Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/eYcrljyxRnisGukwqTxxQzfjnUc.roa
File: eYcrljyxRnisGukwqTxxQzfjnUc.roa (raw, json)
Hash identifier: qsukrXY2opkTl+Ij/UDdAvyJR4vJfj0mU7Fc9xbjplk=
Subject key identifier: 79:87:2B:96:3C:B1:46:78:AC:1A:E9:30:A9:3C:71:43:37:E3:9D:47
Certificate issuer: /CN=18caeb14a01ee16d836565e14fa53b4ab3c3cd26
Certificate serial: 3737B667
Authority key identifier: 18:CA:EB:14:A0:1E:E1:6D:83:65:65:E1:4F:A5:3B:4A:B3:C3:CD:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GMrrFKAe4W2DZWXhT6U7SrPDzSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/eYcrljyxRnisGukwqTxxQzfjnUc.roa
Signing time: Sat 01 Jan 2022 08:57:54 +0000
ROA not before: Sat 01 Jan 2022 08:57:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29423
IP address blocks: 91.217.27.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 926398055 (0x3737b667)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18caeb14a01ee16d836565e14fa53b4ab3c3cd26
Validity
Not Before: Jan 1 08:57:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=79872b963cb14678ac1ae930a93c714337e39d47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7e:f9:01:c2:ab:cd:8a:22:d9:a6:33:6c:d9:
76:b5:8c:be:1b:d2:67:c5:c3:51:de:9c:2f:3a:2d:
bb:2c:3e:a3:fc:f2:d7:f5:ec:63:94:4c:86:23:bf:
9e:a0:f2:f0:80:5f:38:c9:4b:b4:df:97:49:bb:37:
3c:d3:a5:8d:9e:c6:c7:43:21:7f:f6:28:7e:74:95:
4b:d6:fe:49:d2:5b:7f:80:c2:c6:cf:f0:e2:f3:87:
e8:0c:aa:80:81:02:24:79:fe:69:96:48:e5:98:ae:
f3:e3:93:69:23:41:5a:52:57:62:b7:7a:cf:41:89:
c9:61:86:76:52:de:bd:8f:de:b5:0f:55:71:c8:56:
fb:53:41:06:88:70:88:6f:b9:90:c3:8a:5e:b2:f5:
c5:98:38:43:a0:61:69:89:71:07:51:cb:6a:91:bc:
a8:37:f3:82:82:ac:e4:e7:dd:25:11:46:84:b6:86:
c4:7f:63:46:cf:e0:55:54:df:8f:5a:e4:a9:33:35:
4f:19:c3:69:ff:68:29:64:76:b3:9f:ea:19:6e:48:
1e:0f:2d:24:07:bf:f9:2f:a5:41:f0:76:2f:78:b1:
e1:3b:1b:a2:4d:4b:a8:00:89:14:f2:87:b7:37:c6:
b5:f7:65:b3:2f:7b:33:c5:d3:35:dc:cb:06:46:70:
a9:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:87:2B:96:3C:B1:46:78:AC:1A:E9:30:A9:3C:71:43:37:E3:9D:47
X509v3 Authority Key Identifier:
keyid:18:CA:EB:14:A0:1E:E1:6D:83:65:65:E1:4F:A5:3B:4A:B3:C3:CD:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GMrrFKAe4W2DZWXhT6U7SrPDzSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/eYcrljyxRnisGukwqTxxQzfjnUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/GMrrFKAe4W2DZWXhT6U7SrPDzSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.27.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:b6:3d:99:22:6c:7d:12:8f:7a:42:87:67:1f:48:06:6e:b2:
eb:3e:c5:fe:2b:91:59:88:53:54:4d:28:46:43:09:49:1f:89:
db:fb:79:70:37:dc:67:a9:e3:a4:0b:81:90:88:4b:59:a1:df:
25:54:af:ab:d9:04:34:23:2e:cf:4c:3a:f4:ec:25:22:4a:c7:
3e:a6:8d:86:20:c1:1b:fd:fc:3a:91:60:e5:7b:64:df:21:f3:
01:cb:e2:e9:3e:b6:4a:3c:41:a3:91:04:32:8a:dc:23:c5:5d:
b3:f2:bd:28:24:9d:be:87:30:47:8a:e8:9e:4a:22:54:44:39:
4c:68:44:8c:2f:f7:28:46:04:66:2b:f8:96:2a:de:97:d4:cf:
6e:d8:61:65:f2:2a:22:45:c4:4b:1b:07:1b:b5:96:62:b9:86:
91:b5:f3:49:e8:7e:38:3b:4d:f6:14:8c:92:ff:33:10:ef:04:
02:b8:b2:a6:85:22:c8:ae:af:15:ea:63:d8:a3:d1:91:34:49:
d4:84:5b:93:8e:f7:92:51:94:08:33:8a:b2:99:36:ea:11:07:
02:40:0e:a0:64:97:4b:25:ba:60:90:47:1b:e7:bd:68:0d:4a:
70:20:c0:f0:aa:b6:c9:89:39:a1:d5:22:0f:e5:40:be:96:13:
da:95:01:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:29 2023 by rpki-client on console-ams.rpki-client.org