Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/PtUiTbiJq9Q-NzGIbhlHMGlVdHM.roa
File: PtUiTbiJq9Q-NzGIbhlHMGlVdHM.roa (raw, json)
Hash identifier: U536ln15TAXCx1ndWb+AzubFNxLcC3Y3X8cRWA8LRp0=
Subject key identifier: 3E:D5:22:4D:B8:89:AB:D4:3E:37:31:88:6E:19:47:30:69:55:74:73
Certificate issuer: /CN=dac633a14cac7c7a0922ffd980de5f278a3be267
Certificate serial: 0182466F742A3E18960A05FC42E60C20A07E
Authority key identifier: DA:C6:33:A1:4C:AC:7C:7A:09:22:FF:D9:80:DE:5F:27:8A:3B:E2:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sYzoUysfHoJIv_ZgN5fJ4o74mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/PtUiTbiJq9Q-NzGIbhlHMGlVdHM.roa
Signing time: Thu 28 Jul 2022 20:11:25 +0000
ROA not before: Thu 28 Jul 2022 20:11:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 91.233.61.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:46:6f:74:2a:3e:18:96:0a:05:fc:42:e6:0c:20:a0:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac633a14cac7c7a0922ffd980de5f278a3be267
Validity
Not Before: Jul 28 20:11:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3ed5224db889abd43e3731886e19473069557473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e2:83:1c:0d:c7:5b:30:b3:b6:4f:e0:de:da:
4f:3a:28:d4:ab:96:cb:78:83:ab:83:19:5b:ad:92:
ff:45:54:ff:bf:ef:00:b9:86:23:67:98:a0:70:8c:
49:fe:40:a5:57:8e:db:7a:53:69:b5:62:8d:51:60:
7d:2b:90:e4:e5:7b:8d:ca:b9:c8:21:26:0f:8b:1e:
37:ea:a9:a4:47:e0:77:9a:e5:6a:fe:f6:74:34:7d:
e4:3a:65:b1:f1:5d:7a:26:3b:11:36:a7:4e:a3:d7:
62:07:36:f7:04:14:ec:41:53:96:0b:9c:f8:7c:36:
4c:2c:a0:9f:5d:d9:6d:81:4d:0e:8a:9c:d7:a6:44:
87:b6:e3:4e:f4:1f:f6:60:e7:4d:30:cd:59:00:e2:
0a:6f:12:b0:b2:bc:e9:1e:52:49:af:bc:89:45:1f:
cc:8c:07:30:27:00:33:66:6c:0c:70:37:08:f9:d2:
d1:ad:c5:20:81:d8:56:0e:28:cb:b0:3f:af:4a:e9:
7b:0b:28:8c:d0:b9:da:2c:fc:a8:b3:b3:e4:c8:f1:
db:b1:df:bc:47:6d:c5:76:39:ba:8c:bf:b4:3c:95:
2d:7f:a9:c3:a1:40:8e:39:e9:10:f8:23:34:eb:64:
ee:cc:5b:04:a9:40:20:9a:cb:68:4d:9d:6d:81:35:
f3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:D5:22:4D:B8:89:AB:D4:3E:37:31:88:6E:19:47:30:69:55:74:73
X509v3 Authority Key Identifier:
keyid:DA:C6:33:A1:4C:AC:7C:7A:09:22:FF:D9:80:DE:5F:27:8A:3B:E2:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sYzoUysfHoJIv_ZgN5fJ4o74mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/PtUiTbiJq9Q-NzGIbhlHMGlVdHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.233.61.0/24
Signature Algorithm: sha256WithRSAEncryption
30:18:9c:74:47:22:22:41:72:86:9f:7a:f5:6e:42:1e:70:2c:
e5:4f:80:d1:fb:ec:69:e5:ce:c6:39:13:98:49:9c:bf:9f:84:
69:fa:94:b1:df:ae:b6:21:44:1f:c7:70:a0:ad:8b:ee:1c:ad:
a2:b9:3c:e1:c3:5c:1a:5f:8c:23:b2:a0:d6:52:20:b7:00:00:
40:3c:a8:b8:db:ef:2e:99:b3:82:5d:39:9e:43:b6:0b:e8:42:
2c:f7:8d:3f:eb:ed:a3:0b:ae:24:e9:ae:5c:61:79:35:3c:ec:
64:7d:8b:c1:8f:ed:74:a0:31:85:01:ce:5e:4c:fc:c6:89:cb:
6e:34:da:f4:03:51:5f:19:b9:cb:6f:e2:3b:31:98:65:d8:55:
ed:30:d0:24:4e:12:2a:5e:3d:a9:e3:9c:8c:2a:38:ad:51:06:
60:00:d2:e7:93:13:10:b9:fe:e0:29:a1:e2:66:1a:24:bf:0a:
39:4c:24:c4:eb:5e:2f:4a:dc:32:02:0b:f6:49:fe:0e:47:cd:
b5:14:79:09:43:6a:10:6f:5f:b6:83:5a:35:3a:a0:31:14:2c:
4d:e3:32:38:b0:86:a0:0f:59:42:cf:85:4a:c1:28:12:d2:97:
30:61:a3:32:43:2e:c8:c3:cd:c1:4f:bd:2e:a8:d4:16:9b:47:
04:86:0a:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:30 2023 by rpki-client on console-ams.rpki-client.org