Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/VjI2KO5Sytran6XKYRnzHYPwdls.roa
File: VjI2KO5Sytran6XKYRnzHYPwdls.roa (raw, json)
Hash identifier: oK9daE6eQQinuINLilNYpChBgqEia4eqAHeeupHdPxw=
Subject key identifier: 56:32:36:28:EE:52:CA:DA:DA:9F:A5:CA:61:19:F3:1D:83:F0:76:5B
Certificate issuer: /CN=0ffcfc345a0646a7cf225905477e2183574886e0
Certificate serial: 03DD29EF
Authority key identifier: 0F:FC:FC:34:5A:06:46:A7:CF:22:59:05:47:7E:21:83:57:48:86:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_z8NFoGRqfPIlkFR34hg1dIhuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/VjI2KO5Sytran6XKYRnzHYPwdls.roa
Signing time: Sat 01 Jan 2022 15:58:44 +0000
ROA not before: Sat 01 Jan 2022 15:58:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44820
IP address blocks: 91.216.106.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64825839 (0x3dd29ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ffcfc345a0646a7cf225905477e2183574886e0
Validity
Not Before: Jan 1 15:58:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=56323628ee52cadada9fa5ca6119f31d83f0765b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:bb:f1:f1:43:94:5a:77:2f:0f:b3:d3:68:4c:
95:5d:77:5a:2d:56:e3:80:83:3c:25:41:d4:27:04:
33:30:8b:2d:52:a7:da:e5:2d:d4:f6:9e:2a:78:56:
43:1e:91:7b:86:de:8c:5b:f7:6d:6c:ac:a6:8a:78:
95:2b:24:4f:59:22:1a:84:3c:cd:af:ac:90:b3:18:
9c:22:74:a4:61:21:75:6f:be:8f:26:82:c5:4e:bc:
b2:94:69:d2:0d:9e:ba:d4:6d:f0:5e:b1:ec:a5:34:
a9:6e:16:5a:d8:7d:74:a4:0d:fb:ea:cd:15:b2:a3:
d7:0e:e9:f4:8e:54:63:60:1b:98:1b:8f:41:1d:85:
e7:91:12:02:75:f2:7d:1b:d8:91:c1:e3:67:ea:f5:
83:38:9b:4e:63:d8:2b:85:09:25:30:2d:29:62:18:
d3:0c:5a:5e:0e:93:8e:65:37:ce:b2:6b:28:ab:51:
f9:bf:5e:03:56:8b:4c:cb:96:65:f0:8c:4d:ca:e7:
fd:e0:d7:4d:98:da:c5:32:4f:cf:d9:b5:4f:f9:5d:
f5:7d:ac:ae:e3:68:6e:0b:25:69:66:ee:4f:64:00:
47:98:39:37:75:ca:01:c7:9c:bf:b2:6a:32:d5:0a:
17:57:24:2c:74:04:ec:0d:3f:8c:8a:1a:9e:1e:1f:
06:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:32:36:28:EE:52:CA:DA:DA:9F:A5:CA:61:19:F3:1D:83:F0:76:5B
X509v3 Authority Key Identifier:
keyid:0F:FC:FC:34:5A:06:46:A7:CF:22:59:05:47:7E:21:83:57:48:86:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_z8NFoGRqfPIlkFR34hg1dIhuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/VjI2KO5Sytran6XKYRnzHYPwdls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.106.0/24
Signature Algorithm: sha256WithRSAEncryption
42:5f:31:4c:c7:97:a7:84:b8:b6:3f:dd:e8:55:60:0e:06:10:
52:d4:d3:d6:34:91:5a:38:f1:2a:8b:3d:99:8b:8a:6f:63:55:
55:db:36:12:0b:53:95:a5:d8:af:51:76:92:43:7f:99:8a:d4:
2c:ce:57:d7:01:e3:fb:34:d1:53:39:6b:ce:dd:23:0d:5b:66:
81:8f:be:6b:96:4d:84:22:69:90:40:6c:97:f1:85:55:08:ad:
d4:f3:96:fb:e2:77:40:9d:6e:9d:0b:16:02:01:fb:8c:53:9b:
0a:6e:b4:c9:d5:8b:16:3a:c7:ef:bc:30:b3:5a:e1:ed:89:3d:
5b:45:b9:d7:3b:0a:8e:a2:f7:41:3f:c1:ae:6c:cf:1a:f0:b0:
68:08:16:43:ee:6f:fb:8c:df:c7:6a:47:96:c3:28:4f:66:16:
d9:51:3a:c3:24:de:88:77:91:d3:1b:ea:8b:7d:72:fc:92:99:
73:e6:ce:d2:9e:2a:0c:20:40:7d:88:9b:25:1d:89:5d:18:a1:
18:64:71:1e:f2:5d:eb:d1:de:11:52:e4:02:b2:42:61:19:08:
60:db:c3:5e:de:e1:0e:d4:78:cd:c5:b7:cf:7c:60:32:b2:72:
e7:2c:0e:f9:b4:30:f9:7c:d4:14:0e:bb:75:f9:43:aa:b7:74:
c8:8c:d1:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:45 2023 by rpki-client on console-fra.rpki-client.org