Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/RNCHgtM_ydBcdAHPzGOR4sUzCac.roa
File: RNCHgtM_ydBcdAHPzGOR4sUzCac.roa (raw, json)
Hash identifier: Jf/gXlGbv0sRFPZ+ufSWAXmTI0Z3nQ8jT7lhv3ZPnVo=
Subject key identifier: 44:D0:87:82:D3:3F:C9:D0:5C:74:01:CF:CC:63:91:E2:C5:33:09:A7
Certificate issuer: /CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Certificate serial: 0A78D507
Authority key identifier: AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/RNCHgtM_ydBcdAHPzGOR4sUzCac.roa
Signing time: Sat 01 Jan 2022 08:57:07 +0000
ROA not before: Sat 01 Jan 2022 08:57:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60707
IP address blocks: 91.151.83.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 175691015 (0xa78d507)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Validity
Not Before: Jan 1 08:57:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=44d08782d33fc9d05c7401cfcc6391e2c53309a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f1:ee:df:cf:96:a6:5f:a4:4f:15:86:11:73:
6b:cf:41:8d:c4:ec:1c:6d:1a:e7:5c:7a:53:71:25:
43:0f:61:f4:67:96:a4:46:50:09:b6:f6:3b:85:d2:
8b:a2:bf:65:a2:37:1c:a7:10:9d:6c:37:ce:67:2f:
21:f0:e3:0d:8c:82:77:ff:b2:5c:54:cf:ff:f5:1a:
42:cf:85:2f:33:f8:e8:23:8b:7d:c7:fb:5f:ca:b0:
4f:60:0c:da:79:c2:9e:f6:30:63:5d:bf:ea:d5:8e:
8d:9a:54:b6:22:82:5d:a8:a0:d5:86:b8:e6:9b:bc:
74:b5:3c:e4:ff:e4:71:ad:3d:13:63:8c:52:4a:18:
e3:f8:9c:ce:e4:83:55:ac:14:1f:30:75:76:1e:48:
9d:b6:a5:42:16:cd:f5:ce:0c:08:7e:a4:45:ef:84:
61:74:e8:34:5f:ba:7d:a6:cd:0e:f5:5f:72:d4:6c:
34:6d:18:21:4a:4c:f9:a9:54:2b:a2:9a:a6:2c:a3:
03:5f:6f:ab:af:b3:5e:b6:92:1d:36:9c:50:42:a4:
23:78:12:ac:76:d9:78:94:57:1c:89:69:f4:c6:4e:
d3:09:14:3c:9c:bc:cd:1c:97:2c:70:ea:95:6f:98:
88:8d:a9:87:ba:1b:f4:56:82:6b:30:05:46:08:6a:
e9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:D0:87:82:D3:3F:C9:D0:5C:74:01:CF:CC:63:91:E2:C5:33:09:A7
X509v3 Authority Key Identifier:
keyid:AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/RNCHgtM_ydBcdAHPzGOR4sUzCac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.151.83.0/24
Signature Algorithm: sha256WithRSAEncryption
83:ae:c8:6d:cd:7e:3a:c0:c0:2e:37:57:80:d2:20:2c:ab:fa:
0c:87:91:d2:08:48:22:2c:10:3e:c8:04:06:25:4a:dc:39:eb:
17:32:a5:4c:7d:7c:23:dc:f1:8a:3a:db:d2:49:52:e9:f1:21:
15:5d:41:a7:5b:35:36:e4:ee:23:29:e7:cf:fc:19:19:88:25:
cd:d8:bc:39:9d:54:39:fa:f3:17:67:29:97:a0:19:94:83:72:
7d:23:b6:5e:cb:b8:9d:11:80:5e:45:50:77:15:ca:b3:9c:9a:
b0:cd:5a:4e:11:9a:44:34:5a:aa:65:cd:ec:e1:22:c4:4d:1c:
2c:3b:a7:22:0f:e4:33:57:e5:bc:4a:47:b4:e3:f2:97:c5:4e:
6c:de:8b:de:1c:65:e2:f1:1a:75:02:7a:bf:c2:6c:15:11:7c:
10:7a:b6:7c:9b:4c:e4:a9:cb:2b:9f:00:8f:fd:8b:29:2e:0d:
ce:44:1c:b5:21:0b:56:ac:0a:a3:c5:69:e7:05:4e:ad:56:4a:
bb:6c:84:5f:0f:e5:31:5e:f1:24:bb:b6:7a:19:c2:06:cb:74:
dc:18:e9:06:a7:39:36:ff:b8:a6:a1:df:7f:1e:eb:e6:a8:d8:
18:7c:ae:7f:36:9b:c0:e5:4e:79:39:7e:08:21:6a:35:c5:fe:
01:30:e6:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:04 2023 by rpki-client on console-ams.rpki-client.org