Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/vV6rg699usMQp-_66yDq7c3NoPU.roa
File: vV6rg699usMQp-_66yDq7c3NoPU.roa (raw, json)
Hash identifier: 6aVVMlQMM9iUklG1+aDVrhitSe4qzQJI7D9QviPQdWU=
Subject key identifier: BD:5E:AB:83:AF:7D:BA:C3:10:A7:EF:FA:EB:20:EA:ED:CD:CD:A0:F5
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 06B50DAD
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/vV6rg699usMQp-_66yDq7c3NoPU.roa
Signing time: Wed 27 Apr 2022 09:32:46 +0000
ROA not before: Wed 27 Apr 2022 09:32:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 91.92.33.0/24 maxlen: 24
91.92.49.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112528813 (0x6b50dad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Apr 27 09:32:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bd5eab83af7dbac310a7effaeb20eaedcdcda0f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e4:4f:75:41:c0:36:36:9f:de:36:bf:cc:ea:
cc:b6:eb:d2:b5:b5:3a:b9:1a:e2:64:0e:a9:7f:cf:
d4:5d:17:b8:0f:60:89:19:ef:1e:05:5c:cb:42:31:
7e:61:86:c0:ba:69:0a:23:39:48:f2:5e:23:4a:04:
34:9c:2b:3c:5b:75:5d:4b:1e:23:0f:8f:7c:ee:0d:
e9:ea:00:8e:10:72:b5:4b:59:ab:db:f9:76:b1:64:
fd:1e:9a:b9:47:3c:43:06:9d:65:1c:1e:ad:85:81:
f6:b7:d8:8e:03:9e:a9:b1:15:72:6f:b3:63:1f:fb:
2d:1e:32:05:89:70:09:7e:42:c1:09:a8:f3:4a:e8:
7f:65:86:b5:9a:ab:da:9c:35:a5:80:be:70:a0:88:
f5:7e:43:c9:22:b1:04:13:74:9e:fb:59:c4:72:bc:
e6:44:9a:4b:96:0c:30:a1:a2:97:d1:b0:0f:7f:fe:
4a:9e:d2:94:34:92:41:fe:59:da:15:bb:11:d3:92:
de:8b:24:6f:e6:39:09:f7:59:f5:82:9f:ba:93:00:
39:46:2f:99:5a:e2:9d:2e:0b:f5:2a:86:62:c3:89:
a6:3a:19:f5:e4:af:5c:7d:9c:1e:9e:12:64:84:11:
19:c7:fa:50:f0:7f:db:d7:89:16:a6:24:eb:f9:94:
cb:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:5E:AB:83:AF:7D:BA:C3:10:A7:EF:FA:EB:20:EA:ED:CD:CD:A0:F5
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/vV6rg699usMQp-_66yDq7c3NoPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.92.33.0/24
91.92.49.0/24
Signature Algorithm: sha256WithRSAEncryption
19:83:01:be:eb:26:c6:34:cb:8a:9d:58:2f:63:71:a8:19:67:
16:e0:40:cb:1b:08:de:d0:b5:f5:8d:b1:f7:a7:63:31:7d:c7:
ca:e5:0c:af:d8:f5:25:68:12:f5:c0:72:e9:2c:f5:4f:fe:d4:
d9:25:3c:33:fe:9e:16:2a:a3:52:0a:ac:72:09:45:18:b0:eb:
fd:cb:34:3d:29:01:6b:49:a3:b0:9e:5a:32:ce:28:22:24:03:
e6:fd:68:df:5c:e6:aa:75:ca:b3:c5:40:3d:cb:ff:c2:d3:71:
50:6b:e4:45:05:6e:b1:5e:b8:f4:96:f1:54:32:c7:cd:a7:75:
90:50:83:47:a7:c0:50:c2:75:93:f6:75:6e:4d:87:24:1d:0b:
66:03:0d:31:78:50:b5:f1:57:5c:e4:57:06:7f:3f:48:8d:90:
27:11:f9:a0:b1:1d:25:e0:a9:5f:96:df:5f:18:85:8f:77:b8:
23:49:8f:30:16:46:34:fd:34:a4:46:d6:69:44:fc:d8:7f:cb:
74:34:e5:7d:2c:b5:fa:e2:f7:8c:fd:27:c4:5e:62:54:39:d4:
d8:cb:f2:f4:dc:8c:7d:82:e6:00:46:e9:55:c9:2d:5a:f4:12:
75:ea:1a:ac:dd:28:01:2f:b9:16:32:75:36:05:8a:23:54:08:
38:fe:a4:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:07 2023 by rpki-client on console-fra.rpki-client.org