Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/I91-2LJwvr-2juS_vP-ILMuZVyA.roa
File: I91-2LJwvr-2juS_vP-ILMuZVyA.roa (raw, json)
Hash identifier: gsPN3M7taSHqrbcueSEJscS8QLeXY0oEQBXl/B9Og3o=
Subject key identifier: 23:DD:7E:D8:B2:70:BE:BF:B6:8E:E4:BF:BC:FF:88:2C:CB:99:57:20
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 0183E0302FA97BBD9902DC028D33833C604A
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/I91-2LJwvr-2juS_vP-ILMuZVyA.roa
Signing time: Sun 16 Oct 2022 09:46:37 +0000
ROA not before: Sun 16 Oct 2022 09:46:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210574
IP address blocks: 5.180.81.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:e0:30:2f:a9:7b:bd:99:02:dc:02:8d:33:83:3c:60:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Oct 16 09:46:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=23dd7ed8b270bebfb68ee4bfbcff882ccb995720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:19:86:40:29:75:f0:87:64:45:8b:92:03:0b:
50:49:52:9a:2e:9e:d0:17:93:54:7c:aa:c8:e5:97:
e8:bd:ae:df:5f:3d:5d:cd:9f:1d:3c:a3:b7:16:2d:
c5:e8:97:4a:68:61:2c:ea:dd:44:71:95:dd:d3:76:
b1:1c:0c:aa:08:7a:3e:c5:b8:9c:a7:12:d2:52:59:
d7:59:7a:c3:65:83:fd:92:f7:4e:f2:5e:94:e1:29:
9e:5e:c2:f1:fb:89:a3:79:c4:00:96:6b:35:d7:53:
a2:b8:22:29:1e:01:6b:90:9c:dd:73:c5:b6:ac:54:
3b:8a:37:1f:b8:1e:a1:10:c1:6c:1d:57:74:a3:7d:
9a:aa:32:b1:d3:58:a9:02:22:16:e2:12:0d:4f:b6:
52:45:91:ed:2b:9e:ec:c1:03:15:83:a6:5b:d5:f6:
b2:a9:e9:bb:82:1c:42:86:83:d4:63:8c:2f:71:db:
60:e8:52:ec:25:73:b7:df:d5:35:3c:ad:e9:d5:74:
af:27:41:81:6c:98:75:51:2d:f1:8a:97:3f:63:a5:
3f:98:2d:75:c7:1e:06:42:13:e6:81:37:bd:f0:4c:
e5:32:66:a7:f9:09:8b:fa:63:b4:32:4e:5f:8e:0f:
38:c3:a1:e6:2a:83:65:a7:75:88:70:20:6c:0c:12:
2d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:DD:7E:D8:B2:70:BE:BF:B6:8E:E4:BF:BC:FF:88:2C:CB:99:57:20
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/I91-2LJwvr-2juS_vP-ILMuZVyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.81.0/24
Signature Algorithm: sha256WithRSAEncryption
84:ba:1a:88:13:71:de:68:32:ab:bf:43:d4:c1:99:96:03:4f:
7b:5e:d5:3c:a9:78:96:70:5f:0e:40:98:fb:01:d9:bb:5e:04:
f2:df:df:94:1e:7d:14:05:9e:ec:53:1c:2b:bc:cf:24:d7:71:
da:dd:b3:ae:dd:78:ac:34:96:99:1e:95:cf:e1:98:86:16:1a:
0b:23:d1:68:a9:0f:a6:82:52:17:83:e1:ba:93:3c:da:f0:ad:
32:63:5f:05:c6:11:33:8f:8f:b1:aa:99:88:eb:7a:a9:d8:2d:
1e:b8:54:82:a2:88:e0:3b:8e:af:d7:0e:4c:cf:0f:cb:12:4e:
de:12:1e:30:ff:d6:09:bd:a6:59:ee:f0:4a:fa:5f:bf:cc:3a:
1d:1a:c1:97:19:cc:6b:c4:48:ba:2f:53:1b:65:85:e7:1c:87:
6a:10:59:49:f9:d0:22:d3:e6:4b:cf:ad:0b:ef:df:26:86:f5:
99:04:f2:1a:94:30:4a:39:76:61:8e:2d:ad:03:df:d0:13:31:
48:1e:ec:82:1e:f7:a9:c5:51:c4:c7:a5:c5:c0:00:29:96:62:
33:60:4a:fb:e8:9a:1d:f6:a1:15:cb:58:1f:69:22:c3:bf:e2:
7b:96:88:55:31:c7:96:f3:03:70:56:1c:86:34:a5:68:41:b2:
82:20:fa:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:29 2023 by rpki-client on console-fra.rpki-client.org