Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/44fd9e-fdb5-497a-8f94-128189aa027d/1/EoVRgnw5aciwhp9WFb98dWY_zP8.roa
File: EoVRgnw5aciwhp9WFb98dWY_zP8.roa (raw, json)
Hash identifier: MJEtXAQNGP3ZHh/XJ/4hPiJV9TjfqBxugoy5JR3ru30=
Subject key identifier: 12:85:51:82:7C:39:69:C8:B0:86:9F:56:15:BF:7C:75:66:3F:CC:FF
Certificate issuer: /CN=d0cedce08d2b4fd278b0a949b6dcd050da307cdb
Certificate serial: A6A28E
Authority key identifier: D0:CE:DC:E0:8D:2B:4F:D2:78:B0:A9:49:B6:DC:D0:50:DA:30:7C:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0M7c4I0rT9J4sKlJttzQUNowfNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/44fd9e-fdb5-497a-8f94-128189aa027d/1/EoVRgnw5aciwhp9WFb98dWY_zP8.roa
Signing time: Sat 01 Jan 2022 02:00:57 +0000
ROA not before: Sat 01 Jan 2022 02:00:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48031
IP address blocks: 91.247.162.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10920590 (0xa6a28e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0cedce08d2b4fd278b0a949b6dcd050da307cdb
Validity
Not Before: Jan 1 02:00:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=128551827c3969c8b0869f5615bf7c75663fccff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:23:32:00:b0:dd:89:84:a0:ad:e0:2f:76:d6:
7e:72:7d:44:61:bd:3f:83:81:58:4c:ef:b6:46:33:
c3:47:9c:d2:ea:d5:f8:c9:02:66:37:85:db:13:42:
71:89:dc:c3:a9:cd:e0:19:5c:ea:e4:1c:9a:78:f9:
60:a9:34:3f:d9:3a:46:00:c7:f8:8e:ac:5f:c3:1e:
95:03:8a:b7:be:e8:78:ca:20:8c:a5:22:c3:35:02:
3c:82:67:32:1e:38:60:1b:22:1a:69:c6:23:53:37:
f1:43:2b:3a:b9:03:d5:f6:f8:e5:3d:b1:f2:87:f4:
f6:ef:ac:ed:f3:f5:34:87:45:26:c2:83:ec:00:0c:
9d:4e:5b:48:0b:1a:0a:60:85:c4:3e:c3:b1:b0:88:
5a:2c:8e:b8:68:e3:21:60:52:62:9a:c0:77:bc:ff:
65:9a:a2:9f:72:7c:ea:f2:7a:db:3a:34:a6:4a:68:
fc:cc:a1:c0:77:76:a8:14:5d:de:f5:e8:b3:56:a6:
04:ec:d3:52:15:3b:90:b4:0b:62:9e:5f:4b:60:33:
51:03:39:7b:ec:42:42:01:ab:7e:30:06:06:6a:9d:
1e:cb:2b:fe:b1:e0:ac:d4:26:f0:e1:74:e7:09:cb:
c5:90:30:0f:c9:d2:9f:e8:18:f6:30:5c:45:22:af:
52:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:85:51:82:7C:39:69:C8:B0:86:9F:56:15:BF:7C:75:66:3F:CC:FF
X509v3 Authority Key Identifier:
keyid:D0:CE:DC:E0:8D:2B:4F:D2:78:B0:A9:49:B6:DC:D0:50:DA:30:7C:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0M7c4I0rT9J4sKlJttzQUNowfNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/44fd9e-fdb5-497a-8f94-128189aa027d/1/EoVRgnw5aciwhp9WFb98dWY_zP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/44fd9e-fdb5-497a-8f94-128189aa027d/1/0M7c4I0rT9J4sKlJttzQUNowfNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.247.162.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:e1:f9:e6:a6:6e:92:1b:00:a6:a1:5d:4a:bb:b6:ec:6c:a2:
56:37:5d:4f:aa:89:f5:99:46:8e:48:38:cc:18:be:ff:0c:7b:
63:ed:af:a3:01:97:14:40:83:1e:24:8b:68:eb:19:c4:e2:f8:
0f:12:87:d2:1e:17:0e:08:ce:d1:a7:6b:de:f6:d9:b1:36:de:
c9:16:4c:f8:9f:4d:57:2c:d1:64:76:23:02:8e:17:17:d9:a4:
ed:7e:76:e1:ed:ee:c1:25:f6:d8:1a:72:ad:51:7f:06:46:a3:
77:2d:1d:40:9b:9a:8b:d8:7b:a3:f5:fa:1c:21:ee:47:e3:df:
af:7d:eb:3b:16:f7:11:65:c9:00:e5:cf:7e:3f:c4:28:1b:b9:
36:db:16:ee:d0:e7:a4:2c:c4:1e:2a:e1:09:1d:17:80:27:a5:
96:63:e1:b5:05:f5:8d:20:22:bc:98:d0:9b:ae:46:b5:51:4d:
8d:68:7e:77:33:69:2d:3b:8f:e0:2d:d4:85:51:0c:c9:69:79:
e8:52:eb:ad:71:d5:5c:de:d5:7e:9c:1c:83:ec:84:ca:e8:ab:
cc:47:06:50:64:46:96:ce:83:16:50:dd:eb:ee:7a:96:94:9d:
8b:65:dc:ab:45:a0:ae:b6:7f:ad:00:56:25:bf:97:dd:df:a5:
e5:5c:3e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:43 2023 by rpki-client on console-ams.rpki-client.org