Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/42ec68-d433-4000-906c-c3eae6b0fb9c/1/sJ5HrWnVorJRhC7QTyo4UrFANKc.roa
File: sJ5HrWnVorJRhC7QTyo4UrFANKc.roa (raw, json)
Hash identifier: P4vgbavZ/mtJBECV5PLkvw4L1o/KPHdyA/JURPG7M7M=
Subject key identifier: B0:9E:47:AD:69:D5:A2:B2:51:84:2E:D0:4F:2A:38:52:B1:40:34:A7
Certificate issuer: /CN=9980c70f76f0b5f5c8457a0337ad5d63122cf7e6
Certificate serial: BD4C
Authority key identifier: 99:80:C7:0F:76:F0:B5:F5:C8:45:7A:03:37:AD:5D:63:12:2C:F7:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mYDHD3bwtfXIRXoDN61dYxIs9-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/42ec68-d433-4000-906c-c3eae6b0fb9c/1/sJ5HrWnVorJRhC7QTyo4UrFANKc.roa
Signing time: Thu 28 Apr 2022 09:18:42 +0000
ROA not before: Thu 28 Apr 2022 09:18:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43008
IP address blocks: 91.194.30.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48460 (0xbd4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9980c70f76f0b5f5c8457a0337ad5d63122cf7e6
Validity
Not Before: Apr 28 09:18:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b09e47ad69d5a2b251842ed04f2a3852b14034a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:76:f5:24:ac:04:80:cc:76:42:2b:dc:8d:49:
83:c8:b6:4d:3c:c9:25:4d:75:a3:02:a0:17:b4:6a:
e2:2e:95:45:b6:11:bf:6e:ef:3e:51:c9:f0:35:9e:
e3:16:3f:dd:2e:cd:07:27:fc:b7:d7:46:98:dd:f3:
e3:96:a1:22:7a:f1:db:1c:6c:1f:c6:f9:96:eb:c6:
6c:f7:d8:30:5e:1b:8f:14:73:d2:31:e1:da:79:53:
d6:f0:d4:6c:ea:24:a1:6a:a4:fd:fb:9f:66:cb:fb:
76:8f:28:08:cd:54:c7:31:bc:a0:68:16:95:38:fa:
9d:2f:7e:33:65:19:ce:28:3e:a3:55:6e:ff:ed:ee:
dd:51:74:4c:0b:96:c8:28:f4:6d:15:b7:64:96:b9:
c1:d4:9d:f0:6c:fa:9e:52:c5:47:7c:d1:87:ed:2a:
d0:56:7c:45:21:f6:3a:ea:57:03:4a:a3:71:8c:f3:
b7:f9:d3:16:e8:5d:35:b3:5c:a3:f7:fb:c5:74:a0:
cd:5d:0b:ef:7d:f1:3d:3f:13:8f:73:8e:b7:3b:4e:
a2:7e:e3:41:76:dc:fa:f3:3f:ac:82:10:7d:36:cc:
57:f3:6b:07:6c:89:dc:ca:14:df:af:a5:9c:b5:91:
19:38:7c:30:ef:1d:cb:9e:36:9d:ff:2e:d4:85:b0:
bb:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:9E:47:AD:69:D5:A2:B2:51:84:2E:D0:4F:2A:38:52:B1:40:34:A7
X509v3 Authority Key Identifier:
keyid:99:80:C7:0F:76:F0:B5:F5:C8:45:7A:03:37:AD:5D:63:12:2C:F7:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYDHD3bwtfXIRXoDN61dYxIs9-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/42ec68-d433-4000-906c-c3eae6b0fb9c/1/sJ5HrWnVorJRhC7QTyo4UrFANKc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/42ec68-d433-4000-906c-c3eae6b0fb9c/1/mYDHD3bwtfXIRXoDN61dYxIs9-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.30.0/24
Signature Algorithm: sha256WithRSAEncryption
be:34:3e:d0:ec:66:8f:d0:91:48:ff:45:76:dc:80:0e:52:a5:
7d:19:48:18:60:20:a4:4f:7e:a4:5f:98:f1:11:db:d9:30:8c:
5c:97:de:50:22:d3:c7:d4:44:f7:7c:5f:e9:70:ff:ce:ec:6c:
42:ef:86:3e:94:b1:c5:88:13:a3:ec:f3:eb:18:37:c5:ba:3d:
f4:f5:52:99:8a:55:62:eb:17:13:71:58:2c:68:89:8b:1e:39:
8e:76:d3:40:ee:28:66:db:8a:a3:3d:27:4c:2d:9f:a2:be:88:
b0:b4:d2:51:26:22:f3:fb:b3:17:bd:84:30:3d:80:a7:dd:fd:
9b:b7:e5:91:e3:10:af:07:da:2f:c9:01:9d:bf:33:6e:c7:95:
ac:60:c5:a2:fd:c9:f5:c4:6c:94:11:82:14:7d:0e:da:63:84:
20:73:1f:78:cc:0d:07:e4:ee:10:62:87:54:f5:1c:67:d0:50:
c8:8a:d9:82:e3:07:ad:dd:35:be:16:71:be:0a:e9:11:0f:2a:
d0:b5:3c:74:30:ef:1a:af:1f:53:c9:b4:23:f6:39:d9:d8:4f:
d6:99:d8:8c:a8:80:86:12:15:58:73:59:f7:e8:28:68:73:9a:
38:c5:a8:91:ee:a2:65:36:b5:4e:87:4d:bb:b3:74:6a:6a:bb:
e4:e6:28:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:44 2024 by rpki-client on console-ams.rpki-client.org