Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/JIuBvmP0phIgNSPz5qjlqWi5NRk.roa
File: JIuBvmP0phIgNSPz5qjlqWi5NRk.roa (raw, json)
Hash identifier: SUpGBgVnb8R9RasfLOVXAYZRTfSrBGmNKXCW9FSGn8U=
Subject key identifier: 24:8B:81:BE:63:F4:A6:12:20:35:23:F3:E6:A8:E5:A9:68:B9:35:19
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018461D9EE0BAE7AFA169589B2FBF4A2C006
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/JIuBvmP0phIgNSPz5qjlqWi5NRk.roa
Signing time: Thu 10 Nov 2022 14:03:02 +0000
ROA not before: Thu 10 Nov 2022 14:03:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210636
IP address blocks: 91.190.106.0/24 maxlen: 24
45.83.30.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:61:d9:ee:0b:ae:7a:fa:16:95:89:b2:fb:f4:a2:c0:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Nov 10 14:03:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=248b81be63f4a612203523f3e6a8e5a968b93519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:6d:fc:c6:51:2e:df:39:92:b2:b1:44:7e:3d:
68:ad:3c:42:e2:b6:ba:3c:1c:f1:b4:37:9b:09:d6:
30:72:8a:a7:3f:91:42:40:44:ef:0b:9f:b2:91:30:
da:6d:9c:3e:6f:d5:0a:f9:fe:25:f4:ce:5e:66:77:
77:dc:9c:c4:c8:f4:34:ea:23:4c:e3:6b:c7:ed:9d:
d5:41:f5:a6:aa:f6:da:5c:41:0b:f4:0b:9f:49:1f:
a6:26:84:b1:63:50:14:fe:9c:a5:03:68:b6:ae:24:
a2:da:07:3d:c4:56:51:68:87:8c:cb:4a:8c:46:15:
1d:8d:4d:d6:39:f3:6a:d5:ac:60:c4:5d:15:e9:3c:
69:11:63:a2:60:55:33:3b:e5:37:0a:29:4f:03:48:
d5:00:a5:6d:a2:af:fc:0e:55:16:29:36:7e:3e:6f:
dd:01:b5:bc:be:76:cb:41:d1:b3:65:50:bc:16:cc:
ec:0b:37:33:ed:c7:96:6d:4d:a9:a8:66:31:d5:39:
be:ad:57:fb:6a:f7:47:93:27:19:d8:0d:2a:73:08:
bc:5c:eb:ed:4a:d9:6b:91:c2:cc:19:8e:e1:7a:fe:
98:e2:5d:95:a9:84:b1:f4:55:18:f5:11:40:35:d9:
12:d0:e2:59:f8:64:98:d5:46:b8:22:d2:fe:a1:3d:
2e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:8B:81:BE:63:F4:A6:12:20:35:23:F3:E6:A8:E5:A9:68:B9:35:19
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/JIuBvmP0phIgNSPz5qjlqWi5NRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.30.0/23
91.190.106.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:cc:7b:1f:9c:76:f0:cb:d0:83:a9:fa:04:43:e6:fa:53:3b:
cd:9c:ad:3b:bd:1f:6f:59:c2:b3:66:55:8a:de:24:04:24:bc:
40:ae:da:55:9d:b9:b1:ef:60:e1:ef:aa:c7:52:8a:7e:a5:63:
35:a8:cc:59:94:0d:e3:4d:49:56:52:31:76:2c:a7:b4:d7:3b:
22:1f:03:56:dc:61:57:36:75:db:67:c1:80:59:51:7d:80:27:
95:4e:d9:72:30:37:03:99:27:56:0f:67:c1:74:1a:55:a5:d3:
03:9a:85:c5:b6:ca:69:6f:55:66:36:ee:00:b6:0a:b5:d3:76:
35:f6:76:ec:20:12:5b:9f:79:dd:e9:bb:4b:3c:94:71:56:33:
62:60:eb:e1:6f:e3:95:5b:b8:47:0c:d4:d8:6f:50:5e:cb:e1:
7a:e0:43:63:49:2d:48:91:b4:ae:6f:4a:23:fc:c8:4c:9a:e8:
3d:99:b9:c2:95:50:fa:0b:2d:89:43:b2:8e:eb:0b:51:cb:71:
1a:30:5d:f4:75:b1:46:f2:6b:eb:24:ac:6c:c0:cf:df:4b:6b:
0e:04:4e:cb:c5:ef:90:d8:9e:9f:a5:82:70:0f:bf:ac:0f:48:
e9:f9:ad:77:b7:5c:8c:fb:1a:07:e8:fb:b4:87:c7:82:23:57:
d4:89:d7:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:54 2023 by rpki-client on console-ams.rpki-client.org