Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/7DSezEPPh0xhiZXsZPoptNme8fo.roa
File: 7DSezEPPh0xhiZXsZPoptNme8fo.roa (raw, json)
Hash identifier: M9T+U4cvyn9HXJn3jX9bdvRSwK5y29Kx/VQHUNFZaLU=
Subject key identifier: EC:34:9E:CC:43:CF:87:4C:61:89:95:EC:64:FA:29:B4:D9:9E:F1:FA
Certificate issuer: /CN=50980fb6ade858f2652e736993126c85759f06d9
Certificate serial: 018258301859684E5E1C11E7FE2EDB8DC45E
Authority key identifier: 50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/7DSezEPPh0xhiZXsZPoptNme8fo.roa
Signing time: Mon 01 Aug 2022 06:55:23 +0000
ROA not before: Mon 01 Aug 2022 06:55:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 996
IP address blocks: 91.204.182.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:58:30:18:59:68:4e:5e:1c:11:e7:fe:2e:db:8d:c4:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50980fb6ade858f2652e736993126c85759f06d9
Validity
Not Before: Aug 1 06:55:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ec349ecc43cf874c618995ec64fa29b4d99ef1fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:fe:74:55:7c:9f:ca:d5:70:69:6d:83:3b:34:
89:c2:70:94:4e:ce:a2:50:99:16:f8:a8:3b:f6:87:
9b:70:7f:65:22:a4:38:52:14:11:55:12:77:ce:82:
51:07:2f:9e:eb:12:d3:e3:ce:8d:bc:ac:0e:f1:80:
e6:46:3d:ec:3d:64:59:63:c4:19:4e:81:51:e5:43:
ca:1c:b0:43:ca:ba:69:ff:5e:fd:4c:18:fd:b9:51:
10:ba:c0:fe:f6:e8:c4:2a:a1:0b:4e:a6:c9:54:7f:
0c:f4:26:d0:15:47:2a:c3:c7:f7:b7:43:3d:f2:28:
38:a5:43:60:ac:11:78:d9:a1:a5:96:da:ef:06:d2:
61:17:03:4d:da:0b:a1:0c:f6:86:23:f0:fe:56:59:
08:ca:78:d3:d8:c1:5f:60:c3:48:f0:2b:79:ca:bf:
a5:ee:fd:54:58:1b:ff:75:7f:9f:88:ec:2e:55:1f:
ee:31:a8:43:f0:67:17:92:1c:ea:76:bf:0e:2a:c5:
bc:8f:75:f1:6f:68:4f:96:77:07:6d:95:28:73:49:
51:e4:b7:5e:31:a9:5c:19:e2:e7:35:2a:a0:82:00:
bc:be:51:41:f3:f5:0f:0f:5e:33:ed:3f:9c:be:f9:
90:0d:b6:b3:fa:4a:8e:41:ce:5d:bf:a4:01:de:86:
f6:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:34:9E:CC:43:CF:87:4C:61:89:95:EC:64:FA:29:B4:D9:9E:F1:FA
X509v3 Authority Key Identifier:
keyid:50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/7DSezEPPh0xhiZXsZPoptNme8fo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.204.182.0/24
Signature Algorithm: sha256WithRSAEncryption
95:a7:8f:f8:42:db:cf:6c:9a:4c:97:44:f3:33:64:ab:8c:df:
2a:52:75:b1:d1:03:49:81:e6:c1:e4:e2:5c:fc:23:bb:6c:40:
c6:8e:c4:ab:1a:bc:8b:2c:25:76:da:f1:cd:60:c9:0b:7e:f9:
07:6d:6c:48:28:bf:86:df:57:aa:cf:1d:c5:6c:eb:b3:57:29:
3c:b5:d5:a8:c9:f4:a9:4e:7c:26:3b:94:10:fe:e6:0a:45:c6:
8c:4f:2b:27:de:9e:35:d3:78:cf:f4:4e:86:fa:b3:45:74:c6:
1f:e4:40:03:4f:d4:eb:52:c5:2a:83:a3:93:a5:60:75:79:fb:
65:9a:ed:fb:d2:3e:a6:cd:c6:d2:76:60:d0:e6:2d:71:40:45:
8c:16:32:b4:96:0d:d9:a6:62:61:bc:e1:f2:f1:6b:fa:33:e0:
47:ca:a8:ab:9e:41:36:f5:52:a3:cb:18:f4:0e:ce:c1:78:41:
49:21:0c:12:69:31:16:93:bb:e3:d0:3c:8d:72:8e:dc:16:67:
ff:73:f9:4d:cb:a7:3a:ab:1e:69:e9:41:93:13:f6:7b:12:9f:
1f:68:8c:9a:60:aa:42:d8:07:81:a7:2d:6c:e5:38:0f:d6:e0:
e5:19:ce:ea:29:23:ce:58:81:c7:e9:6e:59:6d:93:b4:62:de:
6c:c1:e4:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:33 2023 by rpki-client on console-ams.rpki-client.org