Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6e7437-7b10-4ed1-bd3b-be56d1cf73c4/1/slYtQUkUxXszj5Clq1-iFQKfg_s.roa
File: slYtQUkUxXszj5Clq1-iFQKfg_s.roa (raw, json)
Hash identifier: x/qbObmjfRlJp8lXtR+Jk1fte6+MZQU3toOmpy2Xxbg=
Subject key identifier: B2:56:2D:41:49:14:C5:7B:33:8F:90:A5:AB:5F:A2:15:02:9F:83:FB
Certificate issuer: /CN=e40b9ed33e8a343296829e8fa4a9aba88a0d93d3
Certificate serial: 071E9AAA
Authority key identifier: E4:0B:9E:D3:3E:8A:34:32:96:82:9E:8F:A4:A9:AB:A8:8A:0D:93:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Aue0z6KNDKWgp6PpKmrqIoNk9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/6e7437-7b10-4ed1-bd3b-be56d1cf73c4/1/slYtQUkUxXszj5Clq1-iFQKfg_s.roa
Signing time: Sat 01 Jan 2022 06:55:05 +0000
ROA not before: Sat 01 Jan 2022 06:55:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12414
IP address blocks: 91.212.184.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119446186 (0x71e9aaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e40b9ed33e8a343296829e8fa4a9aba88a0d93d3
Validity
Not Before: Jan 1 06:55:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b2562d414914c57b338f90a5ab5fa215029f83fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c2:20:5b:fb:cb:d6:b7:81:83:9e:9a:e7:05:
28:60:23:38:b6:70:d2:bf:62:88:8e:dd:b9:c2:2c:
04:76:97:bb:61:52:99:5c:79:6d:ee:96:d2:57:24:
3a:91:99:90:df:74:63:e0:46:bb:2e:36:5a:b9:8f:
62:e5:93:ff:6a:96:b5:e5:99:91:58:48:94:75:93:
42:55:4f:bf:68:c2:ca:d6:46:bc:82:84:57:d6:8b:
b1:d4:06:8b:72:18:74:46:2c:ec:6a:78:69:83:c8:
a0:b3:08:3d:a5:22:bd:89:75:af:e1:64:5b:73:20:
91:7f:16:ef:f6:bd:2b:ea:26:58:cb:c4:a6:c2:1e:
5c:e1:30:6d:d7:44:70:e6:09:4e:22:08:4f:46:86:
56:de:6a:69:c2:ca:c0:64:12:23:c8:c7:41:2c:9c:
e4:ba:b3:80:0e:93:92:75:0e:b1:3d:61:c8:d2:0b:
ff:45:86:47:7d:fe:01:a6:d1:63:2a:cf:7f:95:47:
a9:4d:74:38:ec:27:64:54:4b:79:c0:f1:5b:01:83:
02:3d:3d:51:c7:d7:89:d2:f8:aa:44:43:e0:25:3a:
c2:3f:af:5b:00:5a:86:b3:a2:a2:54:2f:2e:46:f4:
72:16:54:49:7f:a8:60:63:40:bc:7c:80:c1:c0:3e:
7d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:56:2D:41:49:14:C5:7B:33:8F:90:A5:AB:5F:A2:15:02:9F:83:FB
X509v3 Authority Key Identifier:
keyid:E4:0B:9E:D3:3E:8A:34:32:96:82:9E:8F:A4:A9:AB:A8:8A:0D:93:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Aue0z6KNDKWgp6PpKmrqIoNk9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6e7437-7b10-4ed1-bd3b-be56d1cf73c4/1/slYtQUkUxXszj5Clq1-iFQKfg_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6e7437-7b10-4ed1-bd3b-be56d1cf73c4/1/5Aue0z6KNDKWgp6PpKmrqIoNk9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.184.0/24
Signature Algorithm: sha256WithRSAEncryption
12:45:4c:40:63:0b:80:c5:94:69:08:ed:9f:15:9e:68:80:23:
ad:49:29:f9:43:2e:73:98:f0:c5:96:d7:60:7b:ad:86:81:25:
85:03:cb:de:91:c3:04:42:b2:74:ec:ca:b8:d0:c7:d5:8c:3e:
ed:46:92:e4:cc:d7:b4:b0:b6:0e:69:f9:d3:29:33:7d:ad:41:
f9:a7:b3:b0:44:70:85:54:47:27:38:5a:9c:50:8b:c5:d0:7d:
a2:9f:3f:63:5d:f6:c5:b7:6f:6e:57:5e:3a:1f:54:b7:28:af:
97:34:ea:78:5a:e4:e1:f0:b9:bd:31:96:32:1a:fd:33:2c:70:
75:38:d3:fd:9c:fe:58:c5:c6:16:5d:7c:1b:67:ce:b7:1f:ec:
e3:85:4f:5b:8c:90:05:2b:02:02:14:1e:2c:cd:1a:10:78:2d:
c7:af:8c:61:02:24:32:81:cf:54:25:21:9c:52:01:62:ee:32:
59:e2:e4:82:f4:ba:e4:d9:15:7c:38:e4:da:cf:24:d2:65:09:
28:09:21:33:e8:6d:2f:b4:8d:83:15:28:6e:d1:59:39:10:42:
5b:5d:64:87:3b:43:26:5c:80:44:79:e9:8f:96:a1:ea:2f:b4:
e4:a5:1a:1c:c6:25:1d:24:a8:32:7a:52:cc:32:90:5c:2e:63:
b1:65:ff:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:29 2023 by rpki-client on console-fra.rpki-client.org