Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/AXdJvdsnOpwwqNQSlH7RAQNMFH0.roa
File: AXdJvdsnOpwwqNQSlH7RAQNMFH0.roa (raw, json)
Hash identifier: aUeoudEGoZXThuG2/kWwke/rdjuATyX8oX6Kiz5qpDY=
Subject key identifier: 01:77:49:BD:DB:27:3A:9C:30:A8:D4:12:94:7E:D1:01:03:4C:14:7D
Certificate issuer: /CN=d1215bfc48876c36518356efd6e280255a1dee3c
Certificate serial: 682B
Authority key identifier: D1:21:5B:FC:48:87:6C:36:51:83:56:EF:D6:E2:80:25:5A:1D:EE:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0SFb_EiHbDZRg1bv1uKAJVod7jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/AXdJvdsnOpwwqNQSlH7RAQNMFH0.roa
Signing time: Mon 07 Mar 2022 09:32:51 +0000
ROA not before: Mon 07 Mar 2022 09:32:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51083
IP address blocks: 91.216.110.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26667 (0x682b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1215bfc48876c36518356efd6e280255a1dee3c
Validity
Not Before: Mar 7 09:32:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=017749bddb273a9c30a8d412947ed101034c147d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6a:ad:78:df:4d:7d:c9:e1:e4:ec:05:91:8f:
ed:9c:b8:40:e4:9e:cb:c0:5c:fd:a6:8f:2e:8a:4e:
05:03:44:87:b6:58:c7:ba:9a:21:4a:16:1f:8f:5e:
54:63:a2:9d:69:69:88:09:35:75:2b:cd:08:2a:be:
36:12:b5:2c:85:5e:4d:ae:7a:99:26:43:72:77:ba:
46:38:2a:18:1f:49:a4:37:a4:47:ef:a3:e4:42:c6:
d5:4f:e7:0d:10:f1:70:0b:70:75:ce:f9:c8:81:fa:
d0:c7:1b:ff:11:46:dc:dc:d5:7a:59:29:2b:58:b6:
07:12:a2:17:60:2a:06:8a:46:7c:5d:52:24:90:cf:
d7:52:a5:4c:ac:ea:f5:6f:17:b1:2d:0a:65:18:a1:
f4:30:68:14:a8:fa:e3:a2:7a:03:94:b2:fa:51:12:
12:64:7c:98:43:9c:76:be:ea:4f:6c:30:70:fc:56:
4e:d4:1c:f7:aa:ee:a4:a1:0e:90:10:0c:89:17:9e:
62:c4:a4:ed:d5:b2:21:e3:13:d1:7b:76:a1:0f:a7:
87:35:b7:29:93:4b:31:34:05:8c:be:dd:9a:dd:e7:
a4:23:4c:98:58:3f:21:e2:1f:a9:42:8c:0a:ad:d3:
59:72:07:44:02:d3:49:0a:48:ec:bd:6e:f7:87:11:
3e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:77:49:BD:DB:27:3A:9C:30:A8:D4:12:94:7E:D1:01:03:4C:14:7D
X509v3 Authority Key Identifier:
keyid:D1:21:5B:FC:48:87:6C:36:51:83:56:EF:D6:E2:80:25:5A:1D:EE:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0SFb_EiHbDZRg1bv1uKAJVod7jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/AXdJvdsnOpwwqNQSlH7RAQNMFH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.110.0/24
Signature Algorithm: sha256WithRSAEncryption
48:a2:1b:fb:f9:6b:db:4a:5c:22:a5:69:b3:14:ec:c1:35:01:
85:a1:f5:ba:c3:3d:37:08:bd:2b:53:5f:19:5f:4f:25:6e:7e:
a3:63:58:bc:f1:f2:2f:2a:93:d4:c0:16:4d:71:91:4b:67:a1:
91:f2:71:04:9d:6c:66:f7:73:ab:a9:e1:d1:d7:61:4e:66:4a:
2e:2e:3b:a0:fb:0c:1e:a9:50:e1:06:be:d2:0c:b4:5a:f7:e5:
be:90:89:28:b5:7c:dc:99:6a:9b:53:eb:dd:d5:de:a0:b1:ec:
a1:53:75:77:73:47:af:57:82:9a:19:37:03:e8:53:26:65:dc:
0e:04:31:ba:8f:47:ca:9c:1b:0c:86:2a:cc:2e:49:95:42:6a:
d3:24:64:f2:73:9e:01:25:56:c4:a0:bd:f3:f7:74:ee:cd:af:
24:70:7c:2c:46:e0:c3:8e:b0:a1:9c:7a:e5:b3:5c:b2:31:16:
c7:af:e1:d4:f6:04:90:76:a8:52:0d:1d:10:2a:53:d2:e8:48:
b7:9b:23:7e:4d:04:c2:76:91:4b:23:a1:96:37:23:23:75:7d:
74:16:70:0c:ce:24:9f:d0:0a:fd:77:3b:34:fc:bb:9f:41:fb:
76:7f:d7:7b:84:17:2b:74:e1:31:66:aa:57:fe:ae:42:da:48:
71:ad:d2:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:23 2023 by rpki-client on console-ams.rpki-client.org