Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/5cjbjoChVTBExoqZGhyKfPzWhI4.roa
File: 5cjbjoChVTBExoqZGhyKfPzWhI4.roa (raw, json)
Hash identifier: 11WcALUePFXMuMF2ZIMyoWcV1HOMega4kAyybqfXHvw=
Subject key identifier: E5:C8:DB:8E:80:A1:55:30:44:C6:8A:99:1A:1C:8A:7C:FC:D6:84:8E
Certificate issuer: /CN=70cb96543f7e195723e6d122c29478bfdda03ecc
Certificate serial: 01847FB69B69AC76F1F0D357800FDD4ACD8C
Authority key identifier: 70:CB:96:54:3F:7E:19:57:23:E6:D1:22:C2:94:78:BF:DD:A0:3E:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMuWVD9-GVcj5tEiwpR4v92gPsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/5cjbjoChVTBExoqZGhyKfPzWhI4.roa
Signing time: Wed 16 Nov 2022 09:13:04 +0000
ROA not before: Wed 16 Nov 2022 09:13:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197395
IP address blocks: 91.239.186.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:7f:b6:9b:69:ac:76:f1:f0:d3:57:80:0f:dd:4a:cd:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cb96543f7e195723e6d122c29478bfdda03ecc
Validity
Not Before: Nov 16 09:13:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e5c8db8e80a1553044c68a991a1c8a7cfcd6848e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:61:91:7c:0d:8b:67:9a:b2:03:46:3d:eb:04:
df:4e:c0:d6:0d:26:5b:64:4c:ff:54:eb:92:f9:eb:
7f:86:dc:f9:5a:c3:e0:bc:d7:88:53:e4:f7:54:67:
91:bc:d6:50:4f:36:07:6d:d7:79:ec:74:8b:cc:26:
a5:be:e5:54:c2:a3:5c:ef:ac:88:47:90:b7:79:3d:
34:c5:50:5a:b0:10:fa:7a:e0:60:41:77:33:c1:4b:
38:13:d9:1a:ae:64:b7:2d:8e:6b:15:ec:09:48:33:
d4:3a:11:4d:da:cb:1b:2f:f7:13:9f:af:e2:19:e5:
7a:ee:1b:b9:d5:51:11:7f:db:18:f0:22:4f:b1:84:
7b:88:b3:49:c1:c1:f0:4d:59:5b:c3:1b:03:47:69:
06:be:ab:36:b5:40:7b:28:87:fd:81:9c:c3:5a:94:
c7:16:75:9e:85:84:ab:23:42:aa:97:33:9c:ab:d7:
f6:1d:40:8d:92:5b:4b:32:49:f5:e0:c0:e9:fb:b1:
71:90:e0:0d:05:a4:76:f5:92:e5:3b:8a:02:52:0a:
ea:f2:78:bf:33:03:84:bb:33:6e:1b:b1:6d:a7:dd:
8d:c9:9b:8d:90:b5:2f:11:0c:35:f0:49:49:75:fe:
f7:48:50:7f:35:b1:f3:5b:b2:49:fe:8a:2b:8e:08:
c8:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:C8:DB:8E:80:A1:55:30:44:C6:8A:99:1A:1C:8A:7C:FC:D6:84:8E
X509v3 Authority Key Identifier:
keyid:70:CB:96:54:3F:7E:19:57:23:E6:D1:22:C2:94:78:BF:DD:A0:3E:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMuWVD9-GVcj5tEiwpR4v92gPsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/5cjbjoChVTBExoqZGhyKfPzWhI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/cMuWVD9-GVcj5tEiwpR4v92gPsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.186.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:28:30:20:e4:54:e0:0b:07:88:2f:ab:72:47:ed:e2:51:2b:
c3:47:0a:d2:a2:ed:2b:87:dc:7b:f7:4a:6e:da:cb:25:22:0f:
18:e7:6d:3b:0f:cb:59:9f:14:5c:92:9a:db:2e:dd:38:41:1d:
65:b2:4e:58:11:27:38:14:67:d4:5c:4a:aa:10:9b:50:55:3c:
86:a8:43:ea:ae:89:6d:72:a5:a6:92:cd:9a:49:63:12:e1:70:
73:ba:a1:f0:43:97:5a:d4:b1:ce:f3:41:f8:7c:58:fc:2b:6e:
51:a5:0b:ab:25:39:04:ec:15:53:c3:49:56:10:10:8b:27:a8:
ff:f6:4d:25:29:bb:bf:27:0c:94:7a:f0:d6:8e:0d:04:a2:14:
dc:ca:73:d7:67:eb:33:ee:fb:ff:30:1f:ec:e7:d6:fd:b1:2f:
f7:5e:dc:23:d5:52:19:b9:e0:a1:d1:e9:9d:e3:ab:70:54:d4:
dd:1d:25:f8:20:88:a7:98:73:c9:42:0a:33:ea:be:d1:e1:97:
3c:d3:49:65:b4:e8:c4:0b:d1:a8:4d:11:c8:bf:75:fc:ba:09:
90:a2:f9:82:af:25:11:c8:0c:12:74:1e:5b:63:0b:9c:52:6b:
ce:ba:08:d1:9f:9f:86:c8:d4:0e:94:d2:36:d0:91:20:3e:13:
91:14:0c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:58 2023 by rpki-client on console-fra.rpki-client.org