Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/GmEmcvLY4A_pGs5NJcY9W5m8NU8.roa
File: GmEmcvLY4A_pGs5NJcY9W5m8NU8.roa (raw, json)
Hash identifier: Tvm2KZEouS8qloAdPEMR5m2hmd4eBqbWvj71EJHuEuI=
Subject key identifier: 1A:61:26:72:F2:D8:E0:0F:E9:1A:CE:4D:25:C6:3D:5B:99:BC:35:4F
Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Certificate serial: 1B6E2C5F
Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/GmEmcvLY4A_pGs5NJcY9W5m8NU8.roa
Signing time: Sat 01 Jan 2022 10:02:43 +0000
ROA not before: Sat 01 Jan 2022 10:02:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51843
IP address blocks: 91.120.250.0/24 maxlen: 24
91.120.251.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 460205151 (0x1b6e2c5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Validity
Not Before: Jan 1 10:02:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1a612672f2d8e00fe91ace4d25c63d5b99bc354f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:a3:80:28:fa:80:cc:a1:32:62:a5:12:0f:c6:
75:a1:50:54:d5:c2:45:0a:f8:2a:2f:01:11:0d:29:
40:88:e9:0b:71:0e:eb:bb:87:e5:1b:02:bc:3d:6b:
55:3f:4e:0f:61:82:de:03:fd:c6:f9:5c:4e:ca:52:
7c:29:93:1b:88:43:86:33:71:80:69:dd:e2:51:99:
f0:94:8f:e0:26:57:87:dc:4c:9e:0f:44:e3:93:15:
cf:30:cc:c0:0f:26:cf:a2:25:46:d7:26:30:36:b3:
03:83:6f:66:fc:56:de:38:7f:c6:20:17:91:4a:07:
fc:f4:8d:75:11:65:54:1d:62:05:81:88:ff:f7:18:
df:f7:95:38:36:98:28:0c:20:fc:0b:1f:86:9d:24:
a7:b8:d5:68:07:38:6b:e4:62:d2:49:fb:6c:67:6d:
55:5a:86:45:ef:88:28:e5:ce:fc:13:d5:08:02:6f:
89:84:55:96:4c:5d:39:e9:87:ae:a0:02:d4:fb:3f:
24:a3:5c:59:5b:d5:9b:f1:b8:c5:ce:5e:19:bf:0b:
b7:21:c1:f3:13:64:42:53:30:0c:72:41:a3:2b:7d:
0b:08:94:fb:5f:e7:c5:85:6e:fd:47:16:9a:5c:89:
ea:f5:ab:50:6a:e9:82:c8:2f:b7:c9:48:fc:bd:8e:
bc:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:61:26:72:F2:D8:E0:0F:E9:1A:CE:4D:25:C6:3D:5B:99:BC:35:4F
X509v3 Authority Key Identifier:
keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/GmEmcvLY4A_pGs5NJcY9W5m8NU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.120.250.0/23
Signature Algorithm: sha256WithRSAEncryption
2e:50:e1:b8:a8:d3:4d:f6:2a:0f:77:e4:a3:76:f0:26:51:40:
50:9c:47:78:66:44:08:10:06:8a:b9:62:f9:f6:89:5e:5e:c7:
cb:bd:e5:f1:3d:9e:bb:7c:ff:b1:94:14:a5:f2:60:b7:9a:de:
9d:32:53:c9:07:cc:7e:5a:6a:b4:cc:24:29:a9:e3:9b:75:d4:
52:1f:42:9a:15:f9:f5:ef:9f:c2:ca:06:e3:05:75:ca:73:ef:
30:03:2c:ab:fb:6a:1a:a2:6b:97:65:71:1c:95:5c:77:8c:b2:
0d:9e:f2:cf:f8:11:7e:29:0d:75:dc:ab:b3:26:00:ad:f7:74:
15:6e:c8:89:f3:6a:f8:d7:b4:42:b6:12:e6:25:16:6b:c9:48:
39:09:5e:c1:89:04:98:7d:32:f6:88:ff:62:ee:cc:c5:2d:e3:
00:48:8c:4d:75:c5:ff:ed:d5:e1:73:a1:77:28:1b:21:d3:41:
c9:c9:86:5c:02:19:6d:92:b6:aa:64:cd:0f:72:53:c1:7e:9a:
2a:a2:de:e2:37:9f:41:3f:98:df:2f:ac:12:66:2b:c8:ea:0c:
77:4b:d4:ea:2c:15:89:9f:9e:20:85:4c:16:c7:f8:b4:36:f7:
2e:c7:00:66:d7:90:24:ba:c9:fa:af:37:9b:d1:55:b7:63:c9:
08:09:05:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:17 2023 by rpki-client on console-fra.rpki-client.org