Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/TXx_sLHtJw1LDATPikpaMpqh_6c.roa
File: TXx_sLHtJw1LDATPikpaMpqh_6c.roa (raw, json)
Hash identifier: kQrobhi9KOraHFnu94EEVCWF10Ajb8vDe7mOan/y+J0=
Subject key identifier: 4D:7C:7F:B0:B1:ED:27:0D:4B:0C:04:CF:8A:4A:5A:32:9A:A1:FF:A7
Certificate issuer: /CN=72aa02f45b97930c7a46d0ef18a91c0aaf8992f2
Certificate serial: 0390CB5B
Authority key identifier: 72:AA:02:F4:5B:97:93:0C:7A:46:D0:EF:18:A9:1C:0A:AF:89:92:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cqoC9FuXkwx6RtDvGKkcCq-JkvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/TXx_sLHtJw1LDATPikpaMpqh_6c.roa
Signing time: Sat 01 Jan 2022 11:54:24 +0000
ROA not before: Sat 01 Jan 2022 11:54:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42708
IP address blocks: 91.212.10.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59820891 (0x390cb5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72aa02f45b97930c7a46d0ef18a91c0aaf8992f2
Validity
Not Before: Jan 1 11:54:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4d7c7fb0b1ed270d4b0c04cf8a4a5a329aa1ffa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7a:c7:8b:6f:88:ee:4f:4f:f5:f4:2f:3e:3e:
26:b6:1f:fb:c9:32:2b:90:b4:16:ce:b3:ba:e3:28:
a2:ad:ec:ed:ee:a5:ff:26:eb:db:67:db:5a:e7:75:
da:4e:5f:f1:20:ad:4d:92:85:a5:f4:4a:3b:e6:34:
e8:5c:3f:63:ba:84:cf:61:fd:6b:c4:c7:72:53:ff:
34:c5:52:14:31:5d:60:2c:89:45:86:20:b3:be:81:
54:13:48:bf:65:b2:a0:6c:04:15:1a:5a:19:fe:c6:
42:4c:63:c4:ce:f4:0d:21:13:14:3d:e1:ae:cf:87:
a7:eb:7a:8c:02:b4:a4:db:1c:da:08:44:ba:b4:d1:
23:24:3a:37:b1:bf:b5:13:e5:f3:56:b4:4e:65:eb:
6b:85:5e:5d:bf:92:8a:da:ef:98:cb:bd:ca:75:00:
2e:10:08:84:46:0c:9c:0e:09:dd:eb:77:bf:b8:9a:
b4:7a:48:08:f6:12:b1:1a:5c:0b:a8:b3:32:62:d8:
e0:d6:2e:80:f0:4d:2c:bd:a7:7e:65:23:ab:0f:b3:
94:1e:13:da:57:9a:19:8c:f6:b1:15:19:00:05:b9:
d0:b1:67:d9:96:45:c1:f3:b1:b1:e7:68:f2:51:b7:
a3:6e:f2:93:16:1a:4a:3b:5d:fb:95:71:37:bf:3e:
41:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:7C:7F:B0:B1:ED:27:0D:4B:0C:04:CF:8A:4A:5A:32:9A:A1:FF:A7
X509v3 Authority Key Identifier:
keyid:72:AA:02:F4:5B:97:93:0C:7A:46:D0:EF:18:A9:1C:0A:AF:89:92:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cqoC9FuXkwx6RtDvGKkcCq-JkvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/TXx_sLHtJw1LDATPikpaMpqh_6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.10.0/24
Signature Algorithm: sha256WithRSAEncryption
02:83:6d:9f:bd:65:ef:cd:66:c7:ab:c5:3f:93:1c:6b:1d:d3:
9b:69:19:5b:22:03:cd:30:12:45:d4:16:3a:d2:b8:e1:e3:10:
be:39:bc:2c:cc:5e:36:75:bb:f7:61:8f:04:f9:b2:23:bd:9d:
57:17:5a:e2:36:04:41:9e:c6:1f:48:85:3a:84:dd:ce:f4:5a:
6f:17:e5:4a:72:f8:64:ad:69:c7:95:9e:fa:fa:06:36:f1:9f:
55:cc:9d:31:ff:ad:2a:cb:54:38:e6:9b:0a:d1:0d:a2:28:80:
98:6b:c9:33:3a:66:95:08:fc:f7:b8:9c:f8:c7:69:ba:36:61:
9b:64:53:a6:5e:10:8f:0a:59:26:33:80:81:af:4f:e6:77:4f:
dc:19:39:2c:d8:ae:78:46:6d:49:39:b4:ec:fb:9f:8b:1b:77:
a5:51:ad:8d:ad:6d:ec:f6:35:2f:1b:bf:3f:95:d4:a4:9e:ad:
dc:e4:b8:80:ae:35:92:ee:6a:46:65:e5:af:3b:ed:61:ec:fc:
d8:45:95:62:b0:c4:de:88:23:cf:0a:ca:a8:f2:8e:d3:c5:3c:
85:4f:4c:cf:d8:97:f4:bf:64:f6:20:ef:92:c2:1f:0b:66:17:
6e:06:79:27:1c:0f:e3:b3:b1:70:67:b2:b7:8d:fb:3f:09:ce:
fe:b9:75:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:24 2023 by rpki-client on console-ams.rpki-client.org