Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/5Q2RvZ0-nqL1_9W7Hmhdvddq9Ms.roa
File: 5Q2RvZ0-nqL1_9W7Hmhdvddq9Ms.roa (raw, json)
Hash identifier: bxfTUxAUjJengrpvPj9BDshaulWiNi12BztCuFM1GBY=
Subject key identifier: E5:0D:91:BD:9D:3E:9E:A2:F5:FF:D5:BB:1E:68:5D:BD:D7:6A:F4:CB
Certificate issuer: /CN=1f1de936ff1784b78296b8bc4b4b0381b293ed10
Certificate serial: 0E2523
Authority key identifier: 1F:1D:E9:36:FF:17:84:B7:82:96:B8:BC:4B:4B:03:81:B2:93:ED:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hx3pNv8XhLeClri8S0sDgbKT7RA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/5Q2RvZ0-nqL1_9W7Hmhdvddq9Ms.roa
Signing time: Sat 01 Jan 2022 02:00:04 +0000
ROA not before: Sat 01 Jan 2022 02:00:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209913
IP address blocks: 91.199.186.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 927011 (0xe2523)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f1de936ff1784b78296b8bc4b4b0381b293ed10
Validity
Not Before: Jan 1 02:00:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e50d91bd9d3e9ea2f5ffd5bb1e685dbdd76af4cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:78:c8:08:93:ea:50:a1:34:5c:81:91:13:ff:
6f:d5:09:29:89:41:3f:31:31:23:de:15:6d:42:09:
2f:d0:ff:80:b2:6b:e3:1d:a7:5d:33:7b:ff:d9:76:
6b:26:2e:c7:1b:66:06:fc:d6:d2:72:da:c7:59:6f:
a1:29:64:36:63:08:af:74:2f:c9:26:a6:c0:99:b1:
26:b1:b3:bf:f8:10:9a:13:de:af:85:06:6b:f1:38:
88:c4:ac:62:95:ef:5b:a1:1f:55:f1:3a:57:e8:bd:
03:e5:18:86:e0:4e:4e:9b:9c:6a:7f:d1:5b:51:14:
af:ab:f4:00:7a:a6:f1:83:c1:4e:0e:1d:7e:01:b1:
bf:42:b5:1a:1b:07:51:73:23:61:92:09:98:4b:b9:
4b:6f:51:34:1f:c7:83:d6:c2:e3:1a:c5:af:d6:19:
39:41:de:ab:48:44:4b:96:d3:7c:ce:66:ea:2a:0f:
cd:e7:96:99:d0:a7:52:35:e7:b4:30:90:c4:58:53:
94:a3:e1:03:67:a6:b4:27:61:f7:e8:33:de:fc:2a:
f4:ee:30:e2:f3:9a:b3:9c:3b:c6:2d:3a:1b:0c:bb:
8f:0c:62:4f:6f:81:24:c5:66:96:ae:7f:54:81:10:
45:b7:41:d8:4f:62:55:3c:b1:c2:27:0f:f1:9c:12:
e6:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:0D:91:BD:9D:3E:9E:A2:F5:FF:D5:BB:1E:68:5D:BD:D7:6A:F4:CB
X509v3 Authority Key Identifier:
keyid:1F:1D:E9:36:FF:17:84:B7:82:96:B8:BC:4B:4B:03:81:B2:93:ED:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hx3pNv8XhLeClri8S0sDgbKT7RA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/5Q2RvZ0-nqL1_9W7Hmhdvddq9Ms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/Hx3pNv8XhLeClri8S0sDgbKT7RA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.186.0/24
Signature Algorithm: sha256WithRSAEncryption
30:cd:13:0b:5a:e6:42:77:8a:d0:4e:b8:f9:10:db:07:f2:a0:
03:57:65:b1:b1:41:67:68:ca:f0:0a:94:2a:90:a8:56:5d:1d:
0b:f9:0e:76:5b:5b:81:e7:e2:9b:9f:79:90:83:93:15:74:7b:
8a:b8:88:f1:09:d7:74:3b:c8:49:e3:6d:4e:ae:fd:60:4d:df:
c3:ea:32:ab:db:ef:39:55:d1:f5:83:75:9b:3c:92:98:a7:7f:
30:b2:a2:0a:9a:7f:be:4f:8e:33:79:73:3a:1f:17:85:e6:0e:
ce:9e:40:81:b6:0f:80:b8:71:9e:c9:60:36:a8:8c:c3:5e:fa:
a0:fa:83:14:58:6d:99:c8:e3:00:b1:91:10:aa:b5:ec:a8:3e:
61:fd:fd:ac:4f:ab:55:51:31:14:74:4e:25:c5:f5:67:93:71:
cf:6d:e0:9a:23:ef:bf:b4:a6:b6:e7:7f:b0:f3:02:a0:48:98:
02:73:d2:66:d1:2b:dd:f9:11:c2:bc:ad:b1:17:1b:59:0a:40:
12:3f:d4:00:66:06:c8:c2:96:7d:c3:ef:fa:2b:20:17:c6:8a:
2b:72:99:88:77:9a:70:f7:c8:83:67:8b:a3:c8:a6:91:76:5a:
a9:00:94:9f:7f:7f:46:b0:20:19:4f:99:6a:b5:6a:12:de:cc:
e0:5c:1c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:40 2023 by rpki-client on console-fra.rpki-client.org