Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/71f0c3-27df-46b8-895a-36583c165dc9/1/rdOYizsWN5IBTigPF-qwoC6ztoU.roa
File: rdOYizsWN5IBTigPF-qwoC6ztoU.roa (raw, json)
Hash identifier: ncGliKjFhEIYdjgKXnpM3xDDyyYowB4lZ42z2minYsg=
Subject key identifier: AD:D3:98:8B:3B:16:37:92:01:4E:28:0F:17:EA:B0:A0:2E:B3:B6:85
Certificate issuer: /CN=0e280e5bf0970c733cc34bc1be7926759ac31ded
Certificate serial: 03C19663
Authority key identifier: 0E:28:0E:5B:F0:97:0C:73:3C:C3:4B:C1:BE:79:26:75:9A:C3:1D:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DigOW_CXDHM8w0vBvnkmdZrDHe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/71f0c3-27df-46b8-895a-36583c165dc9/1/rdOYizsWN5IBTigPF-qwoC6ztoU.roa
Signing time: Sat 01 Jan 2022 05:52:43 +0000
ROA not before: Sat 01 Jan 2022 05:52:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197916
IP address blocks: 91.228.169.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63018595 (0x3c19663)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e280e5bf0970c733cc34bc1be7926759ac31ded
Validity
Not Before: Jan 1 05:52:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=add3988b3b163792014e280f17eab0a02eb3b685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b0:7d:d6:83:ba:bc:2d:96:1d:09:22:a8:58:
e7:fb:09:59:ac:9d:47:fc:96:28:dc:7d:fe:dd:5a:
f4:d5:06:db:40:cd:10:57:11:4b:23:e8:73:eb:63:
26:a6:bf:c5:14:aa:c8:1b:80:0b:bb:86:f0:4e:cb:
84:dd:e4:e0:39:b5:41:f0:14:f2:b9:3e:c8:b1:6a:
4e:45:76:0d:bd:66:45:f3:f2:a1:44:b1:b0:10:9d:
c6:a9:6d:90:99:dc:1f:02:3d:93:62:e8:a3:2d:08:
8d:3b:7f:65:f3:2f:55:5c:27:fb:2b:79:bc:86:06:
88:ce:e1:b1:1b:97:38:e6:ad:bd:db:4a:2b:d0:18:
25:67:59:0a:63:87:02:16:ba:10:62:78:32:a7:fc:
1e:12:c8:31:a1:7c:cf:56:ca:34:24:95:a4:c7:7b:
85:46:02:12:ff:d0:eb:4b:de:e1:b4:af:f2:90:3a:
28:f3:ab:f8:5b:1e:69:16:37:0c:86:62:96:18:5c:
79:51:e3:bd:41:15:a8:a8:4d:4e:7d:d0:4b:df:f7:
2c:d0:5b:57:6f:d7:f7:f1:b8:bd:9f:68:ce:f0:79:
8a:0b:cd:54:2f:86:fc:a9:e2:cc:41:d3:35:2f:e5:
57:2c:03:87:b0:96:b1:c4:04:bd:e8:01:7d:00:87:
ea:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:D3:98:8B:3B:16:37:92:01:4E:28:0F:17:EA:B0:A0:2E:B3:B6:85
X509v3 Authority Key Identifier:
keyid:0E:28:0E:5B:F0:97:0C:73:3C:C3:4B:C1:BE:79:26:75:9A:C3:1D:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DigOW_CXDHM8w0vBvnkmdZrDHe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/71f0c3-27df-46b8-895a-36583c165dc9/1/rdOYizsWN5IBTigPF-qwoC6ztoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/71f0c3-27df-46b8-895a-36583c165dc9/1/DigOW_CXDHM8w0vBvnkmdZrDHe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.169.0/24
Signature Algorithm: sha256WithRSAEncryption
25:1b:ad:fc:2d:6a:b5:04:d0:fc:ae:fe:0b:c4:ba:82:f6:bd:
f7:9f:01:83:0a:b8:41:50:f7:f9:59:07:58:0f:44:02:d0:1d:
79:03:7b:b2:b3:7e:ec:88:eb:9a:2f:a8:ba:54:f2:47:7d:a6:
24:66:4e:36:0c:81:07:ee:14:a2:5a:10:34:f0:18:c8:d4:12:
9a:3f:cf:a2:2a:b2:2a:51:2e:1b:31:37:1c:76:dd:a8:71:10:
c8:28:39:7d:c8:ba:a9:08:37:d8:a0:8f:78:4f:08:58:e4:60:
ad:b7:5a:32:c1:c3:99:39:ab:8d:74:fb:ab:ff:75:95:1b:c9:
2f:2c:c2:01:38:e1:af:a9:24:bc:fe:2c:1e:6d:c1:04:76:72:
fc:23:0e:6c:aa:20:7e:34:85:44:3e:d1:b4:93:07:0b:ea:60:
0d:34:6f:39:2f:e2:e5:c1:3f:dd:37:76:d0:89:46:de:2a:4b:
1b:74:18:67:85:8d:79:93:7e:91:3a:64:e6:f9:40:20:76:62:
c7:64:8a:f4:89:62:c0:99:df:76:a0:6b:55:fc:e1:50:bd:22:
b3:07:6f:47:0b:0d:b3:df:34:bb:aa:18:0b:74:8e:5e:6b:28:
a6:78:e0:4b:9c:59:2e:a2:40:92:9b:44:65:6e:d4:2a:6a:5f:
d0:d7:fe:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:42 2023 by rpki-client on console-fra.rpki-client.org