Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/V9Iakv9A3v37Iqdl125323QYsTQ.roa
File: V9Iakv9A3v37Iqdl125323QYsTQ.roa (raw, json)
Hash identifier: PtpzCEJiNoGIrCxHVNEXkQJ0U9HpUtmgMkqPUUm5uIw=
Subject key identifier: 57:D2:1A:92:FF:40:DE:FD:FB:22:A7:65:D7:6E:77:DB:74:18:B1:34
Certificate issuer: /CN=f50b6b425600a25a6dc132de514797e2aa4b0247
Certificate serial: 19099BC1
Authority key identifier: F5:0B:6B:42:56:00:A2:5A:6D:C1:32:DE:51:47:97:E2:AA:4B:02:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9QtrQlYAolptwTLeUUeX4qpLAkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/V9Iakv9A3v37Iqdl125323QYsTQ.roa
Signing time: Thu 17 Mar 2022 09:59:34 +0000
ROA not before: Thu 17 Mar 2022 09:59:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199743
IP address blocks: 185.48.68.0/22 maxlen: 24
91.217.210.0/24 maxlen: 24
2a01:9660:19::/48 maxlen: 48
2a01:9660::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 420060097 (0x19099bc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f50b6b425600a25a6dc132de514797e2aa4b0247
Validity
Not Before: Mar 17 09:59:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=57d21a92ff40defdfb22a765d76e77db7418b134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:13:fc:a0:07:1c:b5:82:d9:0b:a1:86:3b:8b:
c4:74:5c:26:52:ff:ed:2b:5d:b5:fb:a6:cb:e9:43:
83:08:19:8e:27:5b:b6:ff:ec:dd:12:5c:6f:b7:d6:
fc:74:59:a3:f5:78:cb:26:04:fa:de:a1:6a:6d:8d:
47:68:fe:80:eb:b1:69:f0:94:dc:35:ee:d4:36:36:
2f:2d:ea:44:79:b8:53:a7:25:be:32:aa:a3:4f:1d:
65:14:20:52:1e:03:f0:3f:2b:99:2e:d5:17:5a:c6:
3e:5d:4f:18:78:6b:cd:e4:49:09:85:90:a0:3b:ef:
84:57:93:47:78:df:49:a7:5b:fe:04:35:ba:88:10:
a0:5b:5d:fb:22:7e:0c:8a:1a:e6:9e:c0:db:18:8f:
3c:10:92:b0:c8:78:e2:d6:11:f4:6d:f1:d6:9f:f0:
e7:d9:c1:01:62:b2:55:89:d7:ea:4e:24:58:ae:cc:
7c:67:de:8d:34:af:54:1f:54:67:97:5b:e2:b4:1b:
44:92:b1:62:f9:0a:b1:01:cf:59:b0:d0:96:56:4c:
74:8e:fd:ea:b0:b1:b3:61:6e:9c:e8:3c:f3:a2:1e:
c7:e9:cd:32:f4:65:d4:5d:1b:bd:e1:8e:74:8f:a1:
b2:50:34:6c:07:ca:29:bb:83:83:20:e3:41:51:b9:
40:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:D2:1A:92:FF:40:DE:FD:FB:22:A7:65:D7:6E:77:DB:74:18:B1:34
X509v3 Authority Key Identifier:
keyid:F5:0B:6B:42:56:00:A2:5A:6D:C1:32:DE:51:47:97:E2:AA:4B:02:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QtrQlYAolptwTLeUUeX4qpLAkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/V9Iakv9A3v37Iqdl125323QYsTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.210.0/24
185.48.68.0/22
IPv6:
2a01:9660::/32
Signature Algorithm: sha256WithRSAEncryption
a0:31:34:fb:f2:ef:e3:28:a9:71:2d:75:a3:12:59:f1:09:79:
8c:04:33:30:8a:72:10:a4:6a:0b:1b:92:d7:a6:fe:2e:10:b3:
ee:7f:59:f6:12:32:9a:6e:e2:4a:22:41:13:34:1c:e3:a9:83:
76:9c:95:e7:ab:f6:eb:2e:01:1e:cf:e5:64:a8:73:96:d5:92:
89:ab:57:5f:ea:8d:01:18:73:60:50:cb:f8:b6:ff:9e:1f:bc:
59:f5:6b:3b:dd:31:49:d1:fa:13:70:f0:b8:d8:d6:d0:f9:e6:
25:6b:f5:07:07:09:74:ce:e2:ce:44:08:7c:54:10:8c:76:7c:
25:a4:6b:f5:ec:83:95:d8:3d:2c:f6:39:f7:ca:9f:1a:ca:4b:
2f:f7:90:f0:c3:77:1b:19:7a:3a:ba:94:40:50:a3:c5:5c:c1:
0a:5a:10:b3:52:68:41:ce:1d:8b:8b:f5:83:28:e3:1a:9a:db:
ae:22:a1:7e:90:a3:2f:f4:df:a2:ae:e5:e3:6d:f4:c0:cf:a7:
7c:d6:20:5c:4d:47:00:4e:30:1e:05:58:cb:16:9b:ca:61:71:
d0:b6:d7:c3:3c:84:36:5b:3c:52:8f:2d:4a:67:48:ba:66:7d:
4a:43:1f:d4:21:7d:4d:da:09:9a:8b:21:32:1f:a7:2a:22:fa:
23:1e:a5:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:29 2023 by rpki-client on console-fra.rpki-client.org