Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/IS9BdnUWSYjo8C7DSw52FQqGr4E.roa
File: IS9BdnUWSYjo8C7DSw52FQqGr4E.roa (raw, json)
Hash identifier: CIgJPd+YTT1USSfpJWVdfkf0Q9IWOSKvXhP34T3z2Uc=
Subject key identifier: 21:2F:41:76:75:16:49:88:E8:F0:2E:C3:4B:0E:76:15:0A:86:AF:81
Certificate issuer: /CN=50980fb6ade858f2652e736993126c85759f06d9
Certificate serial: 01821C597DA234919AD59093D69C0C5A56A7
Authority key identifier: 50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/IS9BdnUWSYjo8C7DSw52FQqGr4E.roa
Signing time: Wed 20 Jul 2022 16:03:23 +0000
ROA not before: Wed 20 Jul 2022 16:03:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 399587
IP address blocks: 91.232.8.0/22 maxlen: 24
91.218.176.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:1c:59:7d:a2:34:91:9a:d5:90:93:d6:9c:0c:5a:56:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50980fb6ade858f2652e736993126c85759f06d9
Validity
Not Before: Jul 20 16:03:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=212f417675164988e8f02ec34b0e76150a86af81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:98:7e:2d:02:25:47:8a:da:1b:52:ca:8f:09:
9a:2c:b1:00:48:54:27:ec:00:d8:85:75:8a:15:4a:
18:01:f5:da:d9:ee:df:f7:49:d7:f1:a3:e0:9e:c9:
d5:dd:a0:50:9d:35:4a:44:57:d7:2a:37:dd:9f:1b:
75:1b:87:04:ff:f5:28:97:29:14:a3:92:67:d0:d1:
cd:b8:fa:8c:af:62:b7:37:4e:60:24:19:f0:e1:91:
a4:f5:f3:e9:f3:39:d4:f2:24:b2:1a:16:ac:e2:1f:
c4:bc:fb:f6:31:82:18:67:3a:5e:89:6c:71:7b:25:
68:c8:43:44:31:69:ac:ae:a6:c0:05:9a:fd:80:89:
e1:91:11:09:04:d1:ca:d0:98:13:46:24:63:40:47:
dd:10:e3:01:b1:c7:6e:71:5c:02:f9:fa:59:1c:cb:
18:2b:f4:50:5a:53:ce:ac:5b:3c:23:37:35:d1:cf:
15:69:78:a0:82:38:36:02:12:96:f4:08:3f:2c:c8:
aa:73:28:48:31:3e:11:31:73:18:d6:30:99:79:d3:
2c:21:5b:c5:ce:61:23:89:59:f1:d7:7e:69:38:b9:
82:2d:70:ad:a2:07:73:72:84:62:83:8a:bd:2d:ed:
c1:dc:38:a7:d3:41:87:26:ea:6d:20:a5:40:0a:78:
80:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:2F:41:76:75:16:49:88:E8:F0:2E:C3:4B:0E:76:15:0A:86:AF:81
X509v3 Authority Key Identifier:
keyid:50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/IS9BdnUWSYjo8C7DSw52FQqGr4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.218.176.0/22
91.232.8.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:48:0c:83:0a:e2:bf:38:f0:10:7c:c7:7e:0c:86:a8:53:73:
9d:1d:54:f6:14:a7:6a:4c:9e:cc:a0:82:d8:81:28:6b:13:ff:
a1:a4:1b:82:44:19:7e:6c:18:01:ad:07:ce:b2:84:a1:0b:1c:
99:ec:f5:77:62:ce:1e:25:b6:7d:43:84:8a:54:73:54:63:30:
14:02:1a:72:97:49:fa:1d:e0:95:91:18:14:6e:f6:45:a5:d0:
d8:cb:02:9f:83:04:b6:50:b5:ac:4d:66:d7:b5:ab:08:f4:75:
c6:60:0d:9d:3f:89:47:3b:c4:2c:21:92:06:7f:5c:65:08:6c:
63:9d:af:33:27:77:9a:e5:f4:9d:86:58:57:59:ea:9c:da:a0:
34:2d:f4:cf:b6:da:14:a3:51:93:04:d1:cf:5e:1c:22:72:9d:
56:78:22:5e:66:db:27:0b:03:10:01:ad:48:d8:55:a2:03:72:
44:4f:95:91:30:fa:9d:da:35:a7:d8:3e:53:5d:52:50:6d:35:
77:b8:d0:7c:69:62:31:e9:60:60:87:cc:90:02:ab:74:22:9d:
b3:75:cd:10:d7:5a:48:de:f4:89:d4:08:64:f4:8c:19:08:f4:
5f:52:f8:41:13:96:92:a3:1b:05:b7:dd:e6:ce:21:ce:30:a3:
b9:55:8f:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:33 2023 by rpki-client on console-ams.rpki-client.org