Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/h1SGUJJNFzBNbLmvSWZOROTHLo0.roa
File: h1SGUJJNFzBNbLmvSWZOROTHLo0.roa (raw, json)
Hash identifier: 1bxzEL+oZ8s52TKDq5RE2RXkdmxvWMB00hMNWTtmWeA=
Subject key identifier: 87:54:86:50:92:4D:17:30:4D:6C:B9:AF:49:66:4E:44:E4:C7:2E:8D
Certificate issuer: /CN=41741c05d4ad7ed690e571ef5ed0f87522da47d7
Certificate serial: 0183C1CEC202ED9D3A89E50F1A69EC18C9A8
Authority key identifier: 41:74:1C:05:D4:AD:7E:D6:90:E5:71:EF:5E:D0:F8:75:22:DA:47:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/h1SGUJJNFzBNbLmvSWZOROTHLo0.roa
Signing time: Mon 10 Oct 2022 12:11:36 +0000
ROA not before: Mon 10 Oct 2022 12:11:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21500
IP address blocks: 91.211.12.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c1:ce:c2:02:ed:9d:3a:89:e5:0f:1a:69:ec:18:c9:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41741c05d4ad7ed690e571ef5ed0f87522da47d7
Validity
Not Before: Oct 10 12:11:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=87548650924d17304d6cb9af49664e44e4c72e8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b5:4b:20:43:ce:40:0e:52:ee:53:c5:53:51:
8a:20:88:f6:e5:26:93:ac:f6:c2:fe:89:ed:8f:dc:
4d:e6:28:33:26:4a:83:88:7b:ce:4a:83:34:d3:a3:
6d:aa:36:32:54:4b:8b:69:dd:5f:d7:88:4a:6c:fb:
e2:c2:ff:88:3b:f8:ed:f4:ec:5d:f6:78:a9:06:8b:
8c:60:fa:6f:c1:26:bd:f9:32:ec:21:5c:e0:da:b8:
49:91:6d:19:f5:6d:df:03:f4:9f:c4:7c:6f:ee:2d:
d5:ce:55:8e:8e:a4:b5:90:b9:6a:9b:d0:1f:11:cc:
e8:f3:ab:7c:60:3e:78:81:82:86:39:e3:a1:c6:98:
a7:59:a9:db:bc:55:cd:72:24:7b:fd:d4:6f:fa:82:
ed:3f:36:5d:7e:fb:bc:64:58:34:65:41:f7:19:cf:
ab:e7:4b:82:bd:d9:d7:95:66:17:1a:4e:ce:ce:00:
5e:b0:d4:b7:ab:cf:5d:37:64:e7:23:97:c7:02:6a:
75:ab:a2:ef:80:9d:56:17:d7:3f:e3:62:29:06:76:
e7:f7:37:18:6c:f6:55:dd:94:c7:4f:a2:85:e7:38:
cd:b7:9a:5b:b2:95:bc:04:a4:ad:27:e5:e6:bc:b3:
0e:b5:ef:18:e4:09:37:90:65:68:29:87:c1:68:6d:
a6:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:54:86:50:92:4D:17:30:4D:6C:B9:AF:49:66:4E:44:E4:C7:2E:8D
X509v3 Authority Key Identifier:
keyid:41:74:1C:05:D4:AD:7E:D6:90:E5:71:EF:5E:D0:F8:75:22:DA:47:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/h1SGUJJNFzBNbLmvSWZOROTHLo0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.211.12.0/22
Signature Algorithm: sha256WithRSAEncryption
33:82:25:b3:e7:08:30:17:61:c7:3e:57:cd:23:31:59:9d:ed:
5a:77:91:57:82:f5:b2:e7:20:cc:8b:c3:73:5d:c5:b4:21:c0:
ab:da:c7:77:e8:fa:15:f5:20:7f:16:7d:3e:96:f3:ba:ff:b1:
9d:cf:00:a6:d6:73:03:8e:3c:52:e2:33:0d:3e:19:46:7d:54:
ae:1d:b1:23:8d:b6:f5:fa:c4:9f:4b:75:d8:2d:16:43:11:8e:
09:1a:0d:ec:90:d7:3d:7b:df:ec:fc:fd:22:f2:a5:81:38:60:
84:af:ab:8f:ff:dc:08:45:ca:9e:ba:6e:1f:58:12:42:8f:a2:
d2:4f:b7:bf:b6:1e:34:ee:08:ac:dd:c1:e7:00:68:2d:c6:46:
9d:8c:cd:e6:58:b5:82:52:eb:5c:7d:31:ca:7b:30:26:42:94:
98:66:1f:ac:ec:0b:55:27:a0:54:d9:0a:c3:bc:3e:0c:b3:92:
70:9a:2e:18:fa:12:74:b7:4b:66:96:84:c6:b0:63:b9:3b:3a:
88:44:b6:c5:29:6d:8d:13:9a:d0:24:f9:8b:a4:0f:c5:ce:1c:
e7:64:41:06:3c:29:d1:12:0a:36:ac:f9:c9:78:4f:88:d4:f2:
76:60:1c:66:42:95:da:ca:ac:63:4d:a4:85:e6:59:3e:32:5a:
86:56:fc:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:33 2024 by rpki-client on console-ams.rpki-client.org