Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/89fd83-0f92-4653-831a-4f23a2ffb9e7/1/B5g_jhuBqsVKheSz4JH8wdWExKo.roa
File: B5g_jhuBqsVKheSz4JH8wdWExKo.roa (raw, json)
Hash identifier: eq/lBMpnzniNBriT+b6XFSCmadmiwMJAgjwAZLEBpeE=
Subject key identifier: 07:98:3F:8E:1B:81:AA:C5:4A:85:E4:B3:E0:91:FC:C1:D5:84:C4:AA
Certificate issuer: /CN=05b94bb7cf5c923df189246a5d4d99d63b197ecf
Certificate serial: 0B5DDF47
Authority key identifier: 05:B9:4B:B7:CF:5C:92:3D:F1:89:24:6A:5D:4D:99:D6:3B:19:7E:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BblLt89ckj3xiSRqXU2Z1jsZfs8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/89fd83-0f92-4653-831a-4f23a2ffb9e7/1/B5g_jhuBqsVKheSz4JH8wdWExKo.roa
Signing time: Sat 01 Jan 2022 12:03:21 +0000
ROA not before: Sat 01 Jan 2022 12:03:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31027
IP address blocks: 91.231.147.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 190701383 (0xb5ddf47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b94bb7cf5c923df189246a5d4d99d63b197ecf
Validity
Not Before: Jan 1 12:03:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=07983f8e1b81aac54a85e4b3e091fcc1d584c4aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f0:1b:20:ae:d6:b2:16:bf:94:aa:78:39:69:
c8:65:28:78:4e:1d:18:d7:bd:ee:be:e8:4e:68:fe:
b7:6b:f0:a6:90:70:14:25:02:ca:28:6f:88:1f:95:
03:4b:3f:fe:2f:ec:c2:87:39:9e:49:96:51:4e:87:
98:af:d5:6b:c6:3f:69:62:ef:cc:e0:e8:8c:fb:6b:
fe:28:41:6b:04:52:53:47:fa:24:3a:d8:68:d7:24:
b5:85:44:f4:11:c0:c2:20:11:cc:e3:f6:ef:18:2d:
b4:b6:3a:dc:28:f9:2e:31:be:2d:ba:ae:a8:1f:96:
92:c5:f7:38:cc:77:72:91:b4:c7:31:56:a3:55:7b:
20:31:5a:50:45:d1:cd:47:0c:64:04:6b:c5:65:30:
aa:0e:1e:e3:87:5a:ab:55:e3:3b:bb:56:17:d0:f5:
68:8c:08:50:c5:0f:42:e8:ff:b0:f7:df:c5:63:10:
27:99:9d:94:80:4a:be:15:3a:48:94:0b:b0:c6:47:
6f:6e:fd:36:cc:2e:09:08:03:a9:57:e6:0a:f8:1e:
32:d5:73:b7:e4:77:19:bb:e3:46:8e:b1:60:22:b5:
c7:87:a1:75:5e:33:75:4c:18:15:4f:db:8c:64:d4:
49:fe:9a:e0:28:9b:9c:07:4a:a8:c1:7e:9c:dd:9b:
7f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:98:3F:8E:1B:81:AA:C5:4A:85:E4:B3:E0:91:FC:C1:D5:84:C4:AA
X509v3 Authority Key Identifier:
keyid:05:B9:4B:B7:CF:5C:92:3D:F1:89:24:6A:5D:4D:99:D6:3B:19:7E:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BblLt89ckj3xiSRqXU2Z1jsZfs8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/89fd83-0f92-4653-831a-4f23a2ffb9e7/1/B5g_jhuBqsVKheSz4JH8wdWExKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/89fd83-0f92-4653-831a-4f23a2ffb9e7/1/BblLt89ckj3xiSRqXU2Z1jsZfs8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.147.0/24
Signature Algorithm: sha256WithRSAEncryption
05:1e:ed:d5:90:02:9a:42:11:8a:38:9c:16:1f:ab:c4:79:f2:
d1:40:55:05:8b:6e:c8:f5:fe:ed:c4:46:11:69:5a:21:17:a2:
4a:73:5d:e1:dc:6e:50:ae:0e:25:a6:74:8c:b2:e3:41:e3:42:
be:ed:55:b0:b4:85:87:65:72:a4:39:ab:ba:54:eb:56:8d:80:
0c:81:1a:b2:5b:6f:45:6a:87:dd:b2:24:e4:68:87:21:f7:5d:
ad:ec:81:8b:ca:e6:6b:60:d8:c3:3c:2e:df:5c:82:34:20:0f:
a9:2d:c5:cf:40:c2:40:b0:57:de:5d:b6:d6:b5:c8:46:96:dc:
9d:03:09:50:8c:54:83:09:2d:89:f6:39:dd:6e:ba:45:b8:19:
10:37:ab:61:b8:21:f7:56:9e:ae:40:8f:ba:f1:82:5a:22:5c:
46:94:38:50:09:f0:e5:fc:7b:91:18:29:fb:b2:ce:0e:ab:5f:
e9:fb:49:78:71:ae:33:41:56:65:2f:f5:94:88:c0:c2:c5:81:
77:91:1a:c3:4d:96:84:90:2e:7f:36:c6:c9:9f:90:77:48:27:
41:98:52:9d:57:1e:ed:20:be:de:8b:fc:9a:24:3b:82:21:b0:
f9:57:65:26:76:a6:e5:bb:aa:43:46:4f:bf:2b:a7:74:49:52:
63:b3:9f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:21 2023 by rpki-client on console-fra.rpki-client.org