Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/SDktkSEZiNkhqUep8ogK_JXux_Y.roa
File: SDktkSEZiNkhqUep8ogK_JXux_Y.roa (raw, json)
Hash identifier: mgUJsVeezdAmegHOHbp1w/LVAVLJvR3mJDL+4MwWrbk=
Subject key identifier: 48:39:2D:91:21:19:88:D9:21:A9:47:A9:F2:88:0A:FC:95:EE:C7:F6
Certificate issuer: /CN=41741c05d4ad7ed690e571ef5ed0f87522da47d7
Certificate serial: 02888DBC
Authority key identifier: 41:74:1C:05:D4:AD:7E:D6:90:E5:71:EF:5E:D0:F8:75:22:DA:47:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/SDktkSEZiNkhqUep8ogK_JXux_Y.roa
Signing time: Sat 01 Jan 2022 00:57:04 +0000
ROA not before: Sat 01 Jan 2022 00:57:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48471
IP address blocks: 91.211.12.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42503612 (0x2888dbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41741c05d4ad7ed690e571ef5ed0f87522da47d7
Validity
Not Before: Jan 1 00:57:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=48392d91211988d921a947a9f2880afc95eec7f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d4:48:70:14:7f:6d:de:72:82:c8:bc:8c:10:
dc:0a:a2:e4:cb:08:e0:cb:67:43:1b:b5:6b:89:6d:
df:84:53:99:47:75:b9:66:ea:a8:9b:ac:5d:31:24:
9e:32:3c:5f:be:33:72:96:e7:df:28:f2:3f:78:79:
f6:af:12:93:74:fb:09:4d:ca:59:a7:9a:29:b2:3f:
94:13:39:c2:25:eb:9a:de:fa:7d:37:cb:29:f4:17:
f9:ab:9d:98:2f:da:8a:c9:3e:d6:1f:aa:dd:7e:05:
47:44:12:4a:c7:cc:8d:39:9f:4a:9f:1a:99:a4:f8:
50:90:f1:4a:4b:4b:6f:ae:75:00:cf:c6:36:0a:21:
9a:15:ef:7b:6b:31:96:22:41:e3:54:d3:eb:fb:21:
6f:e8:4e:63:06:ed:bf:0a:a4:bd:f0:77:ab:f5:ff:
3d:d6:d8:8f:6d:b8:ea:da:80:4e:ba:86:5a:f7:01:
4e:6b:dc:c1:67:7c:27:e1:d5:18:a9:89:19:96:50:
e6:63:49:bf:4b:d4:72:8c:b2:5f:4b:d8:95:2e:94:
1f:ea:c2:40:90:95:a9:4e:06:8b:68:d5:0d:d0:c5:
a5:ad:24:e5:8c:f5:1c:f9:04:61:fc:35:a8:ec:5e:
26:90:36:0a:17:72:36:07:a1:2b:aa:90:7c:af:ec:
82:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:39:2D:91:21:19:88:D9:21:A9:47:A9:F2:88:0A:FC:95:EE:C7:F6
X509v3 Authority Key Identifier:
keyid:41:74:1C:05:D4:AD:7E:D6:90:E5:71:EF:5E:D0:F8:75:22:DA:47:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/SDktkSEZiNkhqUep8ogK_JXux_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.211.12.0/22
Signature Algorithm: sha256WithRSAEncryption
28:c6:52:b9:d5:38:03:a1:23:76:c0:93:10:e4:b5:3d:cc:cd:
bc:99:a6:b9:37:ea:53:a8:bb:0f:ab:a3:c1:f5:0e:75:0f:84:
58:e8:2f:14:7a:c3:fa:43:6c:7d:b6:5f:f3:5b:d9:5a:ba:df:
b8:cb:74:47:9d:d2:7f:ef:83:00:04:ca:12:54:83:1a:e7:4f:
27:79:d0:18:2f:70:70:71:e1:1f:7e:56:22:65:9c:64:a2:00:
e7:a1:6f:d0:f9:aa:60:09:f4:03:86:31:0c:4d:17:cb:87:5b:
87:fb:1b:fe:8e:de:08:fa:36:6d:a5:eb:9a:32:7a:68:29:ca:
25:72:7b:b5:9c:3f:53:3e:ac:98:51:cf:19:36:17:91:eb:24:
54:fb:58:d1:21:3f:f7:e1:e5:ab:0e:24:51:f3:1e:7f:d4:ba:
50:28:f4:56:7a:ff:84:df:36:04:3f:e9:30:50:ca:8b:98:c0:
72:fc:8f:67:2f:f5:94:95:30:e6:36:a5:d7:6a:a4:fb:32:83:
dd:2e:b7:42:d5:e0:28:ae:7e:fb:de:13:e4:1c:4c:9d:42:59:
fa:0e:7d:95:f4:84:9c:63:6e:be:aa:ba:c0:e0:fe:26:48:c1:
ad:25:1c:81:18:5e:e9:2f:a1:7e:93:05:dd:69:ee:04:ea:bd:
18:31:8c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:19 2024 by rpki-client on console-fra.rpki-client.org