Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/CsY20FD7Z6prM_IcbBjBiqlGDVc.roa
File: CsY20FD7Z6prM_IcbBjBiqlGDVc.roa (raw, json)
Hash identifier: ncMD+oZ5GxkT2X4+x2XEg/47xr0A0ICT/g5T+VEofeI=
Subject key identifier: 0A:C6:36:D0:50:FB:67:AA:6B:33:F2:1C:6C:18:C1:8A:A9:46:0D:57
Certificate issuer: /CN=35e3d4bf1bc0f81728205e51de097cf383a0cdc9
Certificate serial: 05754134
Authority key identifier: 35:E3:D4:BF:1B:C0:F8:17:28:20:5E:51:DE:09:7C:F3:83:A0:CD:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NePUvxvA-BcoIF5R3gl884Ogzck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/CsY20FD7Z6prM_IcbBjBiqlGDVc.roa
Signing time: Sat 01 Jan 2022 14:55:11 +0000
ROA not before: Sat 01 Jan 2022 14:55:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 91.231.35.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91570484 (0x5754134)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35e3d4bf1bc0f81728205e51de097cf383a0cdc9
Validity
Not Before: Jan 1 14:55:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0ac636d050fb67aa6b33f21c6c18c18aa9460d57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:18:18:66:54:82:b7:c8:37:67:56:c1:38:17:
1c:8c:d4:fe:d8:2d:ae:73:ee:a6:d5:bf:0f:db:a9:
1f:e1:d3:da:8a:d9:28:2e:60:cb:08:14:7b:78:0a:
7b:40:f0:42:be:d9:03:8e:22:d1:1e:8b:93:b6:5a:
a1:a0:14:ba:cd:40:fb:65:fc:e6:45:a0:5d:7b:67:
bf:7b:50:66:94:ba:a6:5f:ff:c9:55:3d:bc:15:c3:
40:93:61:b8:f0:ec:43:91:a7:a2:56:5a:fc:57:55:
11:5c:42:3e:d0:47:bb:9b:4a:79:75:11:77:6e:f4:
07:3b:cd:b2:06:6a:fc:e2:72:ba:c5:41:4f:25:51:
1b:83:a6:ed:97:43:6c:0a:96:29:a3:c3:17:88:a7:
ea:57:df:c4:4e:9d:8c:59:b0:ac:17:1d:fa:03:1a:
9f:12:85:bd:36:5d:10:39:50:8e:4b:c5:f1:eb:b3:
4a:5a:9a:1b:a6:ff:33:9b:11:4d:e3:9e:c0:fd:18:
5f:e3:06:29:ba:40:12:17:79:d4:31:ad:5b:aa:47:
af:2c:a1:b4:04:e0:ed:ed:89:dc:3a:8c:1d:d0:02:
d1:09:11:3b:51:6e:89:07:49:45:15:ab:d0:22:c7:
92:80:4e:20:99:8f:6f:b9:f8:71:ba:e2:78:54:31:
20:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:C6:36:D0:50:FB:67:AA:6B:33:F2:1C:6C:18:C1:8A:A9:46:0D:57
X509v3 Authority Key Identifier:
keyid:35:E3:D4:BF:1B:C0:F8:17:28:20:5E:51:DE:09:7C:F3:83:A0:CD:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NePUvxvA-BcoIF5R3gl884Ogzck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/CsY20FD7Z6prM_IcbBjBiqlGDVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.35.0/24
Signature Algorithm: sha256WithRSAEncryption
28:49:57:68:23:97:dd:9b:f2:ca:a4:8d:17:a7:8f:91:bf:f3:
b5:ad:cc:ca:81:52:35:13:be:9e:0b:32:d5:0d:37:ab:10:5b:
37:5a:1d:78:29:20:99:48:5d:b4:a6:36:f1:7d:9b:db:24:33:
59:87:9e:d5:d7:18:18:21:d0:d6:eb:1b:fb:15:19:ce:4d:d3:
53:77:df:3d:d2:4b:b9:3d:7f:61:7f:e7:42:d7:66:07:e4:47:
c2:7e:ae:05:70:15:3b:cb:cf:92:81:83:6c:41:c4:75:1a:a0:
1f:b9:c2:22:6b:ca:79:c2:6f:7b:48:f1:9b:84:81:02:0a:1d:
d7:54:5e:d3:60:7e:be:86:39:3d:10:a1:09:e2:d3:9b:d4:e8:
83:8f:d3:c9:6b:f1:3c:da:ec:a8:a3:c0:3d:e9:a0:e4:89:2e:
9f:ba:b5:e5:30:71:a8:24:94:f5:cc:7c:b7:81:8a:50:48:65:
8d:a6:5f:ac:46:8a:ea:92:6d:75:a5:e6:4f:8e:9c:50:08:c5:
b8:eb:92:e1:e7:2a:5b:2f:4a:d8:9a:1f:e4:2e:8d:d9:87:4d:
39:58:04:92:6c:fd:e4:51:fb:44:58:43:73:dd:45:d0:a6:dd:
57:c6:6a:b6:db:1c:0c:c0:58:f5:41:64:91:90:0d:84:3b:e3:
df:96:44:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:52 2023 by rpki-client on console-fra.rpki-client.org