Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/Rs3weXtaWF_MCBuOz2PaWFZLBt0.roa
File: Rs3weXtaWF_MCBuOz2PaWFZLBt0.roa (raw, json)
Hash identifier: bsJrG4GKoMeige//QCNm7nhbTUgnC7BqHm5tpu3xxQw=
Subject key identifier: 46:CD:F0:79:7B:5A:58:5F:CC:08:1B:8E:CF:63:DA:58:56:4B:06:DD
Certificate issuer: /CN=50980fb6ade858f2652e736993126c85759f06d9
Certificate serial: 01825830193C739941D0E64A8584DD636057
Authority key identifier: 50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/Rs3weXtaWF_MCBuOz2PaWFZLBt0.roa
Signing time: Mon 01 Aug 2022 06:55:23 +0000
ROA not before: Mon 01 Aug 2022 06:55:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209372
IP address blocks: 91.204.183.0/24 maxlen: 24
91.204.182.0/23 maxlen: 23
91.204.180.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:58:30:19:3c:73:99:41:d0:e6:4a:85:84:dd:63:60:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50980fb6ade858f2652e736993126c85759f06d9
Validity
Not Before: Aug 1 06:55:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=46cdf0797b5a585fcc081b8ecf63da58564b06dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:c5:64:7a:1e:9f:7b:c2:97:ef:dc:e3:00:2d:
f3:13:66:ea:30:dc:c4:66:d2:d9:a3:c2:36:04:f7:
6f:b4:d2:32:a8:e7:a5:5e:09:04:ae:24:f4:98:cb:
e4:63:0a:44:34:38:79:40:48:01:67:b4:02:5e:18:
b1:98:37:d8:16:3d:a0:55:72:18:7f:fd:06:47:44:
48:3c:f0:03:8d:c2:17:bd:2b:50:f3:c5:1b:e6:96:
c7:c3:37:41:5d:5a:ac:7a:55:35:31:93:21:ed:f9:
b4:58:09:1d:80:ec:5e:81:8d:38:9c:65:1e:7f:43:
d5:5c:02:95:3f:f5:63:f0:b4:81:df:13:fa:d1:07:
64:dc:cf:b1:a1:8b:a9:5f:1b:ad:2b:fe:30:29:34:
2d:1e:08:08:e0:31:29:15:7a:17:d2:80:50:ff:65:
d0:8c:6e:8c:aa:87:c1:b9:0f:fa:67:6a:0b:2c:1b:
c9:dd:ce:d8:ad:ca:ce:06:fc:e6:81:51:79:77:f5:
d4:bd:38:7d:4a:a6:d2:82:9f:61:5f:0d:09:93:06:
4c:bb:8d:c2:0a:37:31:e6:d5:f7:f3:2d:b9:b8:44:
af:37:09:94:ed:5b:16:59:8b:4b:08:e9:8b:2b:9c:
ed:66:96:e1:b5:9a:e1:e3:90:e0:46:97:89:94:ec:
4f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:CD:F0:79:7B:5A:58:5F:CC:08:1B:8E:CF:63:DA:58:56:4B:06:DD
X509v3 Authority Key Identifier:
keyid:50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/Rs3weXtaWF_MCBuOz2PaWFZLBt0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.204.180.0/24
91.204.182.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:81:ce:54:f8:6c:63:ea:34:13:f1:e7:33:bf:73:b6:02:d5:
0c:4f:7f:03:2a:b2:1b:0b:f1:dd:ab:5a:9d:16:9a:b4:a8:8e:
65:12:2f:03:39:d8:63:77:18:ca:15:56:2a:2c:02:c4:0b:a3:
4c:f5:a0:7d:ca:db:61:64:fd:5c:f0:12:11:52:74:7c:13:2c:
e0:9c:be:70:48:4a:50:8a:dc:d1:63:6e:97:af:d6:a1:0e:97:
9b:ec:66:bf:5e:0c:39:67:0b:be:7e:b1:f1:7d:a6:f9:09:40:
9d:b8:52:d7:4f:79:fa:76:32:64:36:5b:0d:08:88:12:f9:32:
4e:27:71:eb:5a:87:7d:cb:5e:2a:45:2c:97:be:ee:2c:7b:a8:
df:ef:ec:3b:67:57:07:88:4c:fc:7e:62:04:e3:e3:62:46:13:
bb:ec:a4:5e:53:89:75:0a:32:68:00:1f:b6:37:fa:05:4f:90:
3e:3d:5b:78:d8:ea:07:97:4d:9e:99:4b:3f:10:59:a4:f6:9e:
b2:2b:0f:c3:dc:e2:ae:f1:e6:75:40:f6:47:72:e8:72:84:df:
52:a4:09:3b:32:c0:82:96:75:d7:50:4e:c7:96:b6:65:2a:dd:
db:7a:0f:cb:04:85:93:40:0a:d3:60:18:1a:72:b3:f3:af:0b:
c3:9e:96:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:33 2023 by rpki-client on console-ams.rpki-client.org