Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/5o87X9H_aRKcdU8Y4QoW2r7wb90.roa
File: 5o87X9H_aRKcdU8Y4QoW2r7wb90.roa (raw, json)
Hash identifier: Kuxx+NMs2dEWx9YebPzwS0wYeBE2tZYOrKFHwtjd45w=
Subject key identifier: E6:8F:3B:5F:D1:FF:69:12:9C:75:4F:18:E1:0A:16:DA:BE:F0:6F:DD
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 018506171D314789BB5AA90522B86F880C09
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/5o87X9H_aRKcdU8Y4QoW2r7wb90.roa
Signing time: Mon 12 Dec 2022 11:27:36 +0000
ROA not before: Mon 12 Dec 2022 11:27:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42891
IP address blocks: 91.193.212.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:06:17:1d:31:47:89:bb:5a:a9:05:22:b8:6f:88:0c:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 12 11:27:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e68f3b5fd1ff69129c754f18e10a16dabef06fdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:d9:96:15:66:1f:a0:a0:20:d1:c3:c8:2f:07:
4d:32:03:b7:0e:a7:87:07:3e:54:e7:7c:91:93:cb:
17:7a:4c:97:cf:8c:40:9f:78:ed:25:91:45:22:84:
80:4d:9b:4e:91:b0:91:40:c8:ee:ac:64:38:da:0e:
41:19:50:7e:bc:c6:50:5a:b7:a3:66:39:6f:76:27:
2e:66:08:3b:42:6a:39:20:31:88:bc:31:0a:99:b0:
31:d5:58:34:dd:7a:c0:97:40:ee:6b:98:28:17:f3:
65:39:b9:e4:50:b3:8d:b2:6b:6b:34:14:4c:fd:a0:
d0:6b:16:a0:9a:63:d7:d4:03:2d:df:17:21:20:dc:
5e:77:b9:1b:18:e7:3a:e0:89:a8:b8:4f:84:3b:c0:
47:d5:f6:f7:50:ee:52:54:67:69:4f:b3:a0:47:f8:
f4:92:d7:e4:d2:16:49:1e:6d:08:d8:d0:c4:5c:cd:
93:a9:45:99:71:f8:73:9e:8f:79:c9:5c:c8:85:29:
cd:fd:58:0b:a4:e1:07:64:3a:08:40:cb:0c:54:78:
54:63:d4:cd:c2:9e:95:4b:02:fa:c6:c7:e6:c7:a3:
e2:bb:02:90:47:ad:e6:ad:e7:26:94:8b:d0:2c:68:
c1:9a:e6:bc:7d:e3:a8:34:a2:a4:02:1d:42:2b:bf:
ef:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:8F:3B:5F:D1:FF:69:12:9C:75:4F:18:E1:0A:16:DA:BE:F0:6F:DD
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/5o87X9H_aRKcdU8Y4QoW2r7wb90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.212.0/22
Signature Algorithm: sha256WithRSAEncryption
92:45:f8:fe:df:94:3b:cc:ce:75:8a:15:62:34:c7:06:db:d6:
69:41:e1:33:10:2c:f0:e6:0d:56:ec:96:22:0f:fe:b9:28:8d:
b4:48:31:f2:30:7d:fd:e0:dc:98:b3:e2:ab:6b:ba:f8:d0:95:
2c:87:59:05:b7:5b:d6:2c:13:ad:b3:0c:53:9e:04:20:07:45:
fd:e4:95:af:cc:d7:ca:4c:01:e5:22:8e:23:46:7e:f2:4e:cc:
a8:7f:fc:38:55:13:0d:0f:3e:b7:6b:5c:d0:c8:ac:f0:f6:fc:
eb:a4:47:52:e8:67:7c:7c:cd:e8:93:b6:0c:de:e0:46:98:c0:
e1:f6:45:3f:1d:45:46:2e:0f:4a:85:a5:6e:9c:4e:ee:9a:7f:
5a:5b:58:b9:4d:5c:d6:5d:2e:df:12:cf:0b:9b:1d:ca:36:7a:
4d:fa:7b:32:81:2c:4b:c9:f3:c4:23:fb:07:e7:fa:39:41:39:
ab:79:ce:97:4e:5a:86:58:06:58:d1:2e:42:92:1d:6b:9f:2c:
96:b8:5d:40:8c:ca:53:84:2f:68:3d:12:96:68:44:a4:90:eb:
7f:d7:05:e7:97:16:fd:b3:6d:4c:ae:37:3a:ea:ce:b5:c4:ea:
0e:12:79:a8:ed:35:a4:14:c9:f1:e4:34:d4:80:55:8b:e2:7c:
2e:85:7d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:33 2024 by rpki-client on console-ams.rpki-client.org