Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/7S2QeMPvaAYleqqRAmum39ZgIzI.roa
File: 7S2QeMPvaAYleqqRAmum39ZgIzI.roa (raw, json)
Hash identifier: r0JIAp9F+EBQCTdwWt+qIhKI7v74B6Rexv+k23n9Ui0=
Subject key identifier: ED:2D:90:78:C3:EF:68:06:25:7A:AA:91:02:6B:A6:DF:D6:60:23:32
Certificate issuer: /CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Certificate serial: 0C29868F
Authority key identifier: AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/7S2QeMPvaAYleqqRAmum39ZgIzI.roa
Signing time: Thu 30 Jun 2022 21:26:02 +0000
ROA not before: Thu 30 Jun 2022 21:26:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60707
IP address blocks: 213.142.143.0/24 maxlen: 24
91.151.83.0/24 maxlen: 24
91.151.84.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 204048015 (0xc29868f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Validity
Not Before: Jun 30 21:26:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ed2d9078c3ef6806257aaa91026ba6dfd6602332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:80:90:b3:eb:a4:7b:ee:3e:29:e0:03:1b:99:
88:90:bb:d7:0c:7b:e8:7c:2f:d5:af:19:f9:03:29:
b9:99:f8:3f:1d:51:06:5d:0f:e7:63:9a:d6:4a:23:
00:51:db:52:c6:aa:0b:c7:3a:4d:7a:3b:ad:ba:c3:
9d:fd:16:13:d4:aa:ad:84:e5:97:bd:f8:28:dd:2b:
31:14:a5:5e:cc:58:31:55:67:7a:1e:70:17:e5:7d:
8a:f8:01:fc:22:00:0a:f2:79:ef:ea:6a:22:35:42:
37:a6:51:4e:0c:ee:cb:aa:b9:9b:bb:42:8c:a7:98:
e5:97:64:8a:6f:fa:3b:38:42:98:22:64:05:9b:6f:
73:7d:79:ea:20:ed:d0:83:22:93:aa:68:41:64:bb:
f7:c6:99:f7:29:41:5a:1c:33:de:d6:f0:90:5d:52:
1c:f1:1a:c9:9e:9f:44:98:8e:7b:f9:2f:0a:f2:53:
2b:1b:68:67:1c:81:6a:98:58:01:a5:50:5f:68:49:
93:0d:5e:de:93:4a:74:0b:10:f5:d1:d4:06:54:3b:
ce:e2:7b:26:09:23:61:c9:3c:ed:cd:ed:7d:50:dd:
94:74:99:c5:ad:94:90:a9:81:7b:20:fe:69:e0:38:
bb:5a:66:9d:12:af:ce:a5:e8:35:66:c7:e9:43:fd:
8d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:2D:90:78:C3:EF:68:06:25:7A:AA:91:02:6B:A6:DF:D6:60:23:32
X509v3 Authority Key Identifier:
keyid:AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/7S2QeMPvaAYleqqRAmum39ZgIzI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.151.83.0-91.151.84.255
213.142.143.0/24
Signature Algorithm: sha256WithRSAEncryption
e0:eb:41:07:29:10:13:2f:ca:94:2b:e0:15:7c:ee:29:90:7d:
d2:71:d0:6e:4f:04:d7:59:3e:16:af:68:ec:7c:93:a3:7d:0c:
a6:a6:bb:08:04:62:c7:7e:8f:c9:8b:5a:42:33:7f:b2:06:3b:
09:fe:b0:a4:7a:a7:ff:bd:ff:ce:65:19:ce:95:93:07:24:62:
2a:35:57:51:22:79:b7:08:44:a4:7e:c8:76:d8:be:97:0c:27:
4f:cc:50:af:bc:a2:2f:3e:ba:ff:02:c7:e3:8e:fd:55:27:64:
f9:8f:c3:1b:c2:17:bb:38:4f:68:b4:4f:89:74:42:50:a5:f4:
f6:ed:42:17:73:e3:1f:73:d4:b0:40:b3:07:55:a8:80:91:fd:
c3:43:40:a8:16:a4:83:cf:f9:92:a3:13:76:fa:d4:98:dc:55:
0c:b8:82:63:aa:55:d0:f6:45:57:39:22:7e:e6:56:a8:35:23:
3f:1c:2d:8f:5c:2b:ff:72:b9:ba:3a:d4:bf:94:e8:c2:ee:33:
74:c5:35:6c:66:21:75:33:62:e7:5a:c6:80:7e:95:e5:19:0b:
20:ac:65:5f:0d:ff:c9:b8:a6:70:89:af:51:84:ae:8a:94:19:
3b:10:29:6d:ac:7b:ef:07:c2:a9:e5:12:eb:3d:ab:50:c8:d2:
7b:e4:96:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:04 2023 by rpki-client on console-ams.rpki-client.org