Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/2MfDArkhoggsP6tXQ-vQShIH5Jg.roa
File: 2MfDArkhoggsP6tXQ-vQShIH5Jg.roa (raw, json)
Hash identifier: /4C7lP0avYnz/7cebi40AUS38tbK5fXJppcG+tHxaLE=
Subject key identifier: D8:C7:C3:02:B9:21:A2:08:2C:3F:AB:57:43:EB:D0:4A:12:07:E4:98
Certificate issuer: /CN=0170a169b6cd411022279e9ff997f134ff54ab1c
Certificate serial: 3557A8A6
Authority key identifier: 01:70:A1:69:B6:CD:41:10:22:27:9E:9F:F9:97:F1:34:FF:54:AB:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/2MfDArkhoggsP6tXQ-vQShIH5Jg.roa
Signing time: Sat 01 Jan 2022 06:06:39 +0000
ROA not before: Sat 01 Jan 2022 06:06:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205241
IP address blocks: 91.126.77.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 894937254 (0x3557a8a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0170a169b6cd411022279e9ff997f134ff54ab1c
Validity
Not Before: Jan 1 06:06:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d8c7c302b921a2082c3fab5743ebd04a1207e498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:d0:86:63:d4:50:40:15:33:96:d8:05:bf:cb:
07:ec:fb:82:5f:69:56:5c:63:aa:16:b7:4a:aa:7a:
bc:3f:f3:08:8f:d7:f6:ed:64:f9:ad:1c:90:87:21:
57:94:52:62:8f:2f:6b:ea:38:04:fa:a3:99:70:0d:
d0:fa:f2:ba:13:7d:e6:3a:d8:eb:1c:ac:f2:8c:10:
29:d6:b8:09:e5:59:4d:2d:34:0e:9d:f6:50:46:86:
9e:ff:cd:8c:c6:05:0b:99:5e:c4:07:df:c8:66:13:
1d:5c:01:0c:43:c9:2d:7f:f0:3b:6f:79:3a:e1:18:
48:d3:54:2e:67:a9:a5:2b:23:22:d9:6e:fe:dd:c1:
0f:d3:e5:35:91:66:ee:92:a6:93:f6:b0:8f:4d:23:
ab:08:b6:f7:ca:42:ef:e0:c9:e5:d3:5c:d0:53:11:
c2:07:1a:37:a4:50:93:b8:01:22:3a:52:a9:b1:13:
d4:2c:c3:ef:6d:d6:e7:7c:fe:9f:f7:b3:89:10:b8:
46:ff:22:1f:29:e0:59:a6:16:f1:48:2e:f2:1c:93:
67:ef:e5:e2:ff:46:3a:c1:59:b7:a7:0e:fb:3e:98:
fc:29:59:b3:57:51:c0:35:b3:83:62:1d:1b:45:b4:
10:33:2f:eb:83:53:f5:f0:b8:f8:a1:9c:1e:00:74:
2e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:C7:C3:02:B9:21:A2:08:2C:3F:AB:57:43:EB:D0:4A:12:07:E4:98
X509v3 Authority Key Identifier:
keyid:01:70:A1:69:B6:CD:41:10:22:27:9E:9F:F9:97:F1:34:FF:54:AB:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/2MfDArkhoggsP6tXQ-vQShIH5Jg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.126.77.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:8f:af:57:8c:6d:bc:36:88:80:78:af:fa:eb:94:42:ec:24:
c8:cb:a0:db:ef:0d:2a:b1:1f:d4:f7:be:ef:36:19:e3:72:b2:
ee:58:de:21:1c:ad:d6:44:ad:e5:1a:40:39:72:b4:bf:49:0e:
6a:64:21:54:5b:e8:83:aa:ce:e7:38:60:18:e5:a9:64:d4:b8:
c7:0a:48:e4:01:e6:e2:66:2f:b1:ee:a3:fa:03:fa:de:a9:96:
8e:32:b6:72:18:74:36:2e:5d:42:cb:5b:ca:da:e8:73:0b:32:
bb:46:5b:d1:d5:17:97:af:c2:c1:0c:d1:c3:47:24:b1:79:fb:
d0:f1:51:8b:f6:c5:54:b4:5f:34:6f:a5:b4:f5:7c:2e:c2:03:
03:25:fe:7d:b8:96:d2:4c:8c:35:d5:ff:6b:a2:86:1f:59:92:
6c:e7:19:df:1b:96:e9:e4:3a:dc:64:a6:17:12:c1:8c:ad:47:
1c:43:55:cb:eb:a9:9e:96:5e:5d:62:76:44:de:d0:16:91:eb:
43:3e:50:a7:5e:07:ba:5d:ba:50:0e:d6:1f:e2:a1:85:2b:1d:
a0:d5:20:c5:66:e1:d1:7b:c8:64:2b:e2:3c:33:65:69:09:a9:
d9:60:78:4f:3a:61:c8:00:1a:5d:fe:ac:ce:4c:e6:89:83:4e:
08:b9:c2:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:56 2023 by rpki-client on console-ams.rpki-client.org