Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/Mb7cKV2HU-HrWZjbRkQGS72hl7c.roa
File: Mb7cKV2HU-HrWZjbRkQGS72hl7c.roa (raw, json)
Hash identifier: ZG1o6NZYAUmrjCk4WcVvCbofT6bSG35adNnNMV+Z2t8=
Subject key identifier: 31:BE:DC:29:5D:87:53:E1:EB:59:98:DB:46:44:06:4B:BD:A1:97:B7
Certificate issuer: /CN=0d0dbf9eb836085c19d93f5254221c33948e85e3
Certificate serial: 02FA3E99
Authority key identifier: 0D:0D:BF:9E:B8:36:08:5C:19:D9:3F:52:54:22:1C:33:94:8E:85:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/Mb7cKV2HU-HrWZjbRkQGS72hl7c.roa
Signing time: Sat 01 Jan 2022 06:54:11 +0000
ROA not before: Sat 01 Jan 2022 06:54:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51817
IP address blocks: 91.220.100.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49954457 (0x2fa3e99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d0dbf9eb836085c19d93f5254221c33948e85e3
Validity
Not Before: Jan 1 06:54:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=31bedc295d8753e1eb5998db4644064bbda197b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fb:c0:70:1c:5c:42:c1:e8:aa:29:d6:46:b2:
7f:f1:e4:77:f2:fe:ab:13:f3:ac:db:54:34:a3:98:
77:c8:ed:81:30:e3:cc:8c:c4:c1:84:fb:ab:77:c6:
e7:81:58:bd:46:73:53:79:6a:94:7c:45:71:42:73:
04:53:b3:ee:94:f3:80:69:26:fa:73:cb:fc:26:02:
dd:56:4c:28:bc:23:64:e4:48:1e:2e:41:90:98:7a:
5a:44:b6:93:db:fc:d2:6a:ce:19:0b:39:f6:65:cd:
11:e8:98:39:b4:39:7f:89:cb:8c:b3:ea:a2:cb:f3:
e5:18:0e:22:17:0c:69:78:3b:22:c6:57:7e:db:fe:
fa:24:a2:06:80:6a:aa:46:3f:e3:53:b6:47:2e:51:
fd:de:76:de:ae:a6:d5:34:98:53:8d:ea:90:89:d8:
91:df:bf:5f:5c:30:b5:44:29:e8:ae:2d:37:d2:a6:
e7:0d:de:6f:cc:50:ab:a8:7c:40:04:de:88:20:22:
1e:54:be:3a:4e:a0:27:cc:88:d5:ce:a1:bb:4f:ff:
0d:49:0d:6b:59:86:f5:07:34:4b:d7:8b:89:cc:79:
53:d9:8b:87:22:20:73:12:74:e7:a9:53:54:fa:88:
17:f8:4f:c3:72:dc:e0:99:b4:00:ec:70:03:8c:7a:
01:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:BE:DC:29:5D:87:53:E1:EB:59:98:DB:46:44:06:4B:BD:A1:97:B7
X509v3 Authority Key Identifier:
keyid:0D:0D:BF:9E:B8:36:08:5C:19:D9:3F:52:54:22:1C:33:94:8E:85:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/Mb7cKV2HU-HrWZjbRkQGS72hl7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.100.0/24
Signature Algorithm: sha256WithRSAEncryption
00:0b:df:17:6c:8a:3a:28:f4:36:d5:57:5b:dc:91:7e:3a:60:
ed:7e:9f:c5:83:1a:74:1c:2c:83:6a:ae:f2:3d:94:d4:a6:31:
2c:34:73:ec:f5:97:f4:44:d5:9e:4d:4c:3a:12:33:ed:a9:3a:
03:56:19:81:ee:41:d2:f3:a6:06:3d:cc:fd:24:01:44:40:7f:
79:91:f2:a6:76:ae:32:2a:0e:51:03:e6:7f:2e:ee:f2:ac:fb:
47:63:1a:76:db:d6:96:99:97:1a:18:91:ec:83:e7:d4:a0:d5:
06:8a:d2:c6:92:ae:4d:29:7c:8a:5c:e8:b9:a4:9c:71:c7:2f:
91:60:5e:70:37:55:88:b5:d0:1d:40:38:69:2d:17:49:b3:23:
8b:c8:13:fb:c8:7f:ae:6a:4b:89:31:11:a8:96:72:39:57:57:
8e:db:47:b3:d6:ba:57:a8:75:a5:87:a2:cb:de:06:2d:dd:a1:
04:2f:6a:0f:bf:26:48:62:ca:25:36:2e:be:d7:c4:a5:e1:77:
98:32:2c:44:6a:77:53:48:ec:58:72:f6:aa:90:94:a5:f7:24:
77:ca:55:24:a2:e2:56:50:1e:f8:79:0b:94:d5:b4:03:85:23:
87:2f:34:5c:d0:1c:9a:5f:1a:f4:04:1d:41:0e:6a:16:2f:1d:
14:7b:d6:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:03 2023 by rpki-client on console-fra.rpki-client.org