Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/I0es0NJNSgqvwE_n0PddokYYlOs.roa
File: I0es0NJNSgqvwE_n0PddokYYlOs.roa (raw, json)
Hash identifier: 5gVQmRQ1U+igSHRnaAyFc+tbSf+lO6P+obgrgnyENrQ=
Subject key identifier: 23:47:AC:D0:D2:4D:4A:0A:AF:C0:4F:E7:D0:F7:5D:A2:46:18:94:EB
Certificate issuer: /CN=f310c50d2cc87bdbfa5bb511a18a2277ba00ba68
Certificate serial: 0337CE09
Authority key identifier: F3:10:C5:0D:2C:C8:7B:DB:FA:5B:B5:11:A1:8A:22:77:BA:00:BA:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8xDFDSzIe9v6W7URoYoid7oAumg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/I0es0NJNSgqvwE_n0PddokYYlOs.roa
Signing time: Sat 01 Jan 2022 06:03:44 +0000
ROA not before: Sat 01 Jan 2022 06:03:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41568
IP address blocks: 91.192.104.0/24 maxlen: 24
91.192.105.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53988873 (0x337ce09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f310c50d2cc87bdbfa5bb511a18a2277ba00ba68
Validity
Not Before: Jan 1 06:03:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2347acd0d24d4a0aafc04fe7d0f75da2461894eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:35:28:e8:67:9f:3f:98:4c:f8:26:37:ed:3d:
75:de:89:0a:6d:0a:aa:40:ce:9d:43:31:05:23:8f:
f2:e6:0e:69:aa:4d:6e:0a:e2:e5:a8:48:ad:56:8c:
c4:6f:8d:00:5c:4d:6f:07:78:82:d7:d8:1e:92:3c:
c3:c9:93:73:26:6a:92:17:52:5f:63:b9:81:5c:73:
d6:91:6e:58:d7:de:da:c6:55:c3:84:2e:a8:7e:8b:
bb:da:60:e1:1d:6a:d9:4a:ce:20:6c:c9:e4:e8:45:
94:a0:1e:1a:48:78:77:18:8a:b0:01:09:73:19:0c:
9a:5f:dc:44:fe:a7:72:43:22:53:44:9b:e7:69:b5:
39:fc:9a:7f:c0:77:65:b8:22:77:72:24:a1:a2:0e:
34:69:b7:52:4a:e4:4f:9a:99:54:72:1b:08:f6:93:
2d:4f:6f:aa:2d:8d:72:a9:2d:95:ce:4a:67:9b:0c:
39:42:8f:04:d2:5f:b6:48:45:f1:d1:96:4d:e3:b9:
76:8b:82:d2:42:fa:dc:30:63:35:d0:d0:16:c7:15:
44:55:c8:b3:b7:09:20:a3:48:44:61:de:cc:34:06:
39:ab:9f:89:4e:16:61:13:06:a7:02:b4:a9:87:f6:
c8:05:21:be:15:c3:1f:9f:d3:cb:6c:d9:9b:fb:3d:
f9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:47:AC:D0:D2:4D:4A:0A:AF:C0:4F:E7:D0:F7:5D:A2:46:18:94:EB
X509v3 Authority Key Identifier:
keyid:F3:10:C5:0D:2C:C8:7B:DB:FA:5B:B5:11:A1:8A:22:77:BA:00:BA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8xDFDSzIe9v6W7URoYoid7oAumg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/I0es0NJNSgqvwE_n0PddokYYlOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.192.104.0/23
Signature Algorithm: sha256WithRSAEncryption
66:1a:b4:9f:58:dc:05:51:5c:c4:e4:a8:4f:5e:80:5c:16:7a:
7b:88:fb:46:04:aa:ed:04:dc:ea:11:52:56:cb:c6:99:fa:88:
94:86:90:ed:29:6f:aa:05:8a:ba:95:74:c6:c9:6d:fb:cc:9a:
bb:80:51:e6:b5:ed:db:55:c4:1a:2d:9d:57:02:db:1b:f9:e8:
63:08:55:e6:13:b8:35:e7:98:6b:d9:cb:1a:c4:4b:0e:13:b4:
ae:58:4a:6c:ef:d0:70:8b:1f:c0:f8:82:fb:30:3c:d8:04:3b:
36:60:d7:ba:da:fa:7a:06:4a:a1:13:e7:60:2c:ea:41:93:53:
22:f8:77:be:0e:0d:34:09:80:75:5a:57:81:46:94:31:61:a5:
f8:47:29:de:34:d5:a1:95:36:90:d6:bc:56:f3:8e:83:80:eb:
a2:a6:4c:32:e1:e1:4f:34:b0:22:c4:44:6e:db:4f:5f:87:86:
b7:d4:15:ff:0a:04:9a:3c:3c:3a:d2:21:1c:c0:63:14:28:3f:
ca:83:fb:fa:2c:0d:b7:19:e7:52:c3:d0:30:a2:0d:f2:74:bd:
da:76:59:6f:4e:63:42:83:d9:26:a6:78:75:7e:62:74:17:f3:
99:b5:dc:66:c9:8e:0e:82:57:56:52:81:94:76:b7:28:5e:c3:
f5:4d:8f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:20 2023 by rpki-client on console-ams.rpki-client.org