Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/g-SG7lh458YwgL4JoHKp8uL9k9E.roa
File: g-SG7lh458YwgL4JoHKp8uL9k9E.roa (raw, json)
Hash identifier: 0ABUi72DanuDe90JycqNq82DFD8U4QpNlJqKtM4uRJ4=
Subject key identifier: 83:E4:86:EE:58:78:E7:C6:30:80:BE:09:A0:72:A9:F2:E2:FD:93:D1
Certificate issuer: /CN=f1af8bb98e405539ea983384fafa82b2b4b71724
Certificate serial: 0B1C62E9
Authority key identifier: F1:AF:8B:B9:8E:40:55:39:EA:98:33:84:FA:FA:82:B2:B4:B7:17:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/g-SG7lh458YwgL4JoHKp8uL9k9E.roa
Signing time: Tue 04 Jan 2022 19:22:34 +0000
ROA not before: Tue 04 Jan 2022 19:22:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51399
IP address blocks: 91.218.200.0/22 maxlen: 24
91.218.208.0/22 maxlen: 24
91.103.144.0/22 maxlen: 24
91.103.144.0/24 maxlen: 24
185.157.12.0/22 maxlen: 24
91.217.0.0/23 maxlen: 24
2a07:a080::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 186409705 (0xb1c62e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1af8bb98e405539ea983384fafa82b2b4b71724
Validity
Not Before: Jan 4 19:22:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=83e486ee5878e7c63080be09a072a9f2e2fd93d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:db:5e:19:cb:a7:4a:95:61:b2:56:bb:88:57:
ee:73:16:d9:58:26:32:5f:8d:11:87:cd:e1:0d:82:
df:b8:d5:04:f6:34:68:19:92:a2:50:30:35:b4:57:
fa:99:00:8b:d3:32:6b:08:8b:ff:e6:a4:43:a5:4c:
c5:23:da:0a:6b:17:ca:05:1e:dd:d0:11:37:7a:0e:
8a:89:48:54:2b:2f:d1:2a:5d:a5:b7:39:6b:48:f9:
c4:c6:51:89:3f:03:bf:fa:4c:86:e2:9c:56:89:fc:
68:4a:6a:26:2b:7d:eb:ae:54:68:25:e0:c7:79:ac:
ee:d5:b6:06:c0:c5:30:f3:5b:08:86:1a:03:75:f6:
6e:b5:05:75:2a:38:ed:bd:66:9b:c8:34:d6:13:f8:
52:99:72:9e:53:64:d5:32:3e:13:00:d2:3a:25:c7:
ed:24:3c:2e:f2:6c:3f:36:51:94:c8:31:c3:1a:64:
f2:a1:78:f2:dd:81:fb:df:d9:2e:0c:84:42:0c:17:
a8:17:bc:b9:4c:a8:da:8b:c2:0a:88:56:a0:b4:a2:
f8:a7:cf:cf:eb:80:31:c3:70:1d:85:58:13:33:41:
26:c9:b4:1f:c1:7a:bf:c5:aa:9b:e0:ca:c7:9c:e1:
e6:8f:70:fd:c8:ee:05:a4:b4:95:2b:86:96:40:72:
42:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:E4:86:EE:58:78:E7:C6:30:80:BE:09:A0:72:A9:F2:E2:FD:93:D1
X509v3 Authority Key Identifier:
keyid:F1:AF:8B:B9:8E:40:55:39:EA:98:33:84:FA:FA:82:B2:B4:B7:17:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/g-SG7lh458YwgL4JoHKp8uL9k9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.103.144.0/22
91.217.0.0/23
91.218.200.0/22
91.218.208.0/22
185.157.12.0/22
IPv6:
2a07:a080::/29
Signature Algorithm: sha256WithRSAEncryption
a2:99:fd:ae:15:fa:6c:0c:ef:89:5f:5f:f4:43:ea:05:65:95:
f4:ee:e3:57:24:f9:bd:cd:8e:d7:95:82:d5:3f:dc:b0:3e:62:
50:ca:c3:6a:77:8d:63:b6:51:55:d4:df:b0:9f:0f:86:55:c2:
a4:1e:a0:98:5e:f8:b7:5d:73:6c:f7:06:bb:82:a0:72:e3:a8:
9c:42:f7:42:17:6a:f5:65:0c:6c:c9:d7:b2:27:12:28:18:f9:
0a:a5:c7:c6:05:47:d1:fb:78:c9:0a:06:a8:60:cf:3f:ce:58:
12:24:8e:a2:cd:f5:4e:ad:54:dc:75:bd:1c:97:0d:e2:ef:4c:
41:62:00:1e:0b:1b:35:47:93:e6:bf:bc:1c:18:51:9a:a8:64:
e0:d7:e2:77:b0:9d:fc:49:f2:78:06:30:8b:02:2f:53:e3:95:
9b:4e:f2:92:6f:8e:b1:3f:91:57:09:e3:d2:a1:73:8c:99:84:
2c:21:bb:45:31:56:a1:6d:9d:af:ad:e2:a1:92:0a:15:4c:7c:
11:d7:dd:a5:5e:83:1e:ed:72:c4:ed:3f:04:6f:53:4d:da:85:
db:b1:fd:ff:72:77:77:de:85:83:2a:4f:29:9a:e0:5a:1e:20:
00:38:91:ee:ee:83:8c:18:24:9f:40:81:1e:8c:e5:2e:cc:19:
9d:61:01:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:39 2023 by rpki-client on console-ams.rpki-client.org