Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/BR49QPR7JkiC67f1ytJ5--zXrWk.roa
File: BR49QPR7JkiC67f1ytJ5--zXrWk.roa (raw, json)
Hash identifier: paIHuJQbckbVxLPGAjudrcJZceqcNwmveFQLiZVIY2M=
Subject key identifier: 05:1E:3D:40:F4:7B:26:48:82:EB:B7:F5:CA:D2:79:FB:EC:D7:AD:69
Certificate issuer: /CN=18abae0e1f216a321973ccc9c6537ec6197dab18
Certificate serial: 01DC7C
Authority key identifier: 18:AB:AE:0E:1F:21:6A:32:19:73:CC:C9:C6:53:7E:C6:19:7D:AB:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GKuuDh8hajIZc8zJxlN-xhl9qxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/BR49QPR7JkiC67f1ytJ5--zXrWk.roa
Signing time: Thu 17 Feb 2022 13:03:06 +0000
ROA not before: Thu 17 Feb 2022 13:03:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35393
IP address blocks: 91.198.105.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121980 (0x1dc7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18abae0e1f216a321973ccc9c6537ec6197dab18
Validity
Not Before: Feb 17 13:03:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=051e3d40f47b264882ebb7f5cad279fbecd7ad69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ab:36:0a:f0:2f:f4:2c:06:cf:43:49:c3:95:
50:b4:42:97:c2:2a:38:47:d3:91:95:7e:a7:1a:ac:
34:7f:1a:1b:fd:88:56:e8:3d:25:0b:64:42:8d:e3:
52:99:32:20:e6:71:65:ce:78:db:a7:c0:1b:73:ba:
1a:ab:0c:2d:c2:0a:bf:5d:58:40:09:79:46:09:c2:
0f:d2:f2:28:24:92:d8:6d:a2:fd:c4:d0:ad:a1:bc:
f4:1c:63:f0:23:d6:c6:cb:67:a9:4c:20:ed:59:b1:
30:8f:0a:e3:3e:29:88:ac:e2:b7:82:b1:77:f9:5c:
b7:09:5d:ec:bf:c3:11:c2:63:d3:3a:63:fc:34:6c:
0f:f9:ea:12:f4:5a:58:c6:52:1d:55:d0:22:4c:da:
f6:4e:eb:ee:bb:b8:74:44:47:f5:e2:3f:6a:b1:3f:
e0:f3:68:08:4f:3d:d1:db:c7:62:fe:61:02:be:6a:
43:2e:75:a6:ce:22:34:42:58:00:f7:17:67:d1:a5:
85:89:7a:f6:0b:b0:00:db:71:54:ae:16:78:30:88:
88:4f:76:f7:60:56:7d:5b:16:36:7b:b9:0e:cf:0a:
99:ee:e0:4c:a6:cf:44:bf:2c:8b:9c:32:9c:1f:4f:
7b:dd:26:d0:9a:2a:11:36:50:be:cf:4a:87:04:14:
b7:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:1E:3D:40:F4:7B:26:48:82:EB:B7:F5:CA:D2:79:FB:EC:D7:AD:69
X509v3 Authority Key Identifier:
keyid:18:AB:AE:0E:1F:21:6A:32:19:73:CC:C9:C6:53:7E:C6:19:7D:AB:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GKuuDh8hajIZc8zJxlN-xhl9qxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/BR49QPR7JkiC67f1ytJ5--zXrWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.105.0/24
Signature Algorithm: sha256WithRSAEncryption
85:2d:13:a7:fd:86:a7:f1:00:6e:bd:a6:72:39:89:39:ca:2a:
a0:09:55:3e:e8:45:44:b8:50:d8:ad:ef:51:3f:0e:5b:b7:57:
d5:0b:9e:9b:ca:3b:0a:8a:b1:72:a6:3c:26:ce:5e:10:b6:35:
20:ba:ed:50:7f:a2:ea:33:db:f3:da:0b:f0:f2:f0:d5:87:63:
62:94:45:62:8a:36:09:15:72:21:15:1f:c0:42:04:b1:50:a7:
b8:0f:c8:5a:21:ca:b7:ee:fc:36:fc:e5:b7:ef:35:41:b5:88:
fa:f8:b8:06:9a:e2:7f:23:92:5d:f7:89:0d:e7:07:c7:cc:0a:
89:c3:64:0f:3e:af:71:67:91:10:a6:24:44:80:00:f3:75:7e:
36:e6:9c:cf:9e:fa:cc:43:1a:1a:cd:33:7c:88:67:8b:d0:c2:
4d:38:69:87:d0:c6:f7:9a:9e:90:b8:0b:fb:ad:27:d7:c6:e6:
e0:5d:4a:38:8d:f6:b0:c5:8a:c5:8d:36:24:5a:b8:a4:3c:d0:
44:28:4e:e0:88:3f:b5:00:0f:c0:26:fb:31:37:a2:11:29:2e:
f5:60:9f:d1:ad:76:76:30:78:52:a6:6d:d6:82:d3:61:c0:78:
0a:11:5a:86:01:4f:5d:b2:43:ed:ac:a8:45:1b:4f:7a:1f:fe:
03:01:19:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:33 2023 by rpki-client on console-ams.rpki-client.org