Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/BMsqauRAm8nq7rd0THN2hoKChAQ.roa
File: BMsqauRAm8nq7rd0THN2hoKChAQ.roa (raw, json)
Hash identifier: FeUxU4GG2n2RRVSSrZqvs3TGa1qxS5Bu064TkPTy4fQ=
Subject key identifier: 04:CB:2A:6A:E4:40:9B:C9:EA:EE:B7:74:4C:73:76:86:82:82:84:04
Certificate issuer: /CN=8b1b729b75c5f8b2e9d158aa296396d680be70ad
Certificate serial: D31F
Authority key identifier: 8B:1B:72:9B:75:C5:F8:B2:E9:D1:58:AA:29:63:96:D6:80:BE:70:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ixtym3XF-LLp0ViqKWOW1oC-cK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/BMsqauRAm8nq7rd0THN2hoKChAQ.roa
Signing time: Mon 04 Apr 2022 12:07:13 +0000
ROA not before: Mon 04 Apr 2022 12:07:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198472
IP address blocks: 91.235.65.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54047 (0xd31f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b1b729b75c5f8b2e9d158aa296396d680be70ad
Validity
Not Before: Apr 4 12:07:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=04cb2a6ae4409bc9eaeeb7744c73768682828404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:14:c3:6c:5d:d1:1c:c3:f2:18:11:c3:2a:79:
48:97:62:80:a5:9a:7f:2e:83:59:73:d7:96:e5:1f:
fc:84:5b:a8:6e:d1:b4:b1:d4:97:27:4a:9d:de:89:
32:57:01:71:f1:0a:bd:d3:4a:49:89:be:a7:2b:91:
3f:e7:a9:f9:ad:e5:66:bb:b0:90:12:28:6c:d4:cc:
45:73:75:65:c9:99:9d:fe:26:47:2c:a1:e4:0b:c5:
aa:53:32:6b:70:20:c7:d1:7e:88:1d:8d:25:65:e3:
8a:50:45:2d:56:ce:8d:3a:9d:fd:25:5e:ac:d7:c6:
db:9b:18:28:f3:e3:d7:fe:19:24:51:96:09:27:f5:
3e:ed:e9:b2:72:e0:eb:71:f8:a1:50:3e:0a:ba:5a:
a9:0a:9c:ae:b2:5c:d1:9e:cd:12:13:36:7f:14:81:
cd:5d:ca:2e:8b:92:01:62:2c:74:1d:6f:f7:1e:c6:
a6:72:30:e0:87:13:67:34:53:5c:2b:05:89:e5:fc:
a9:4b:49:08:8f:58:94:e6:fa:65:de:be:06:6c:3e:
d4:46:43:a1:b0:45:3c:24:4a:83:cd:91:f0:18:79:
8c:98:8b:af:ac:5d:af:a1:ec:b9:df:2a:4d:87:e2:
45:35:5c:b2:ae:d0:c4:77:d2:cd:6d:6b:81:8d:63:
82:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:CB:2A:6A:E4:40:9B:C9:EA:EE:B7:74:4C:73:76:86:82:82:84:04
X509v3 Authority Key Identifier:
keyid:8B:1B:72:9B:75:C5:F8:B2:E9:D1:58:AA:29:63:96:D6:80:BE:70:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixtym3XF-LLp0ViqKWOW1oC-cK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/BMsqauRAm8nq7rd0THN2hoKChAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/ixtym3XF-LLp0ViqKWOW1oC-cK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.235.65.0/24
Signature Algorithm: sha256WithRSAEncryption
42:18:15:cf:ff:90:4d:6d:68:1f:e8:a1:e0:f2:e3:11:8c:15:
25:e3:05:59:45:7b:3f:11:0f:a7:d6:2c:e1:3a:26:35:04:d1:
ad:31:bf:bc:64:28:b6:90:75:bc:e4:57:d8:93:ee:77:f7:be:
1c:ed:19:ea:f3:a9:23:c7:cc:2d:b9:31:d6:fb:1c:88:38:12:
f7:a4:96:8b:3a:10:c1:00:32:f7:88:dd:09:37:34:c7:96:e9:
ef:e8:09:4e:46:cd:76:fb:27:62:3b:04:69:12:dd:b9:a1:10:
21:f9:a8:a1:6c:e5:95:fa:b4:42:11:76:a0:16:c8:22:20:59:
73:8d:c9:3e:d2:f0:d6:ae:ec:99:59:62:c0:8f:9b:b8:91:28:
19:e2:d5:e5:45:dc:79:7f:20:90:50:4f:b0:de:13:ea:bb:6e:
ee:5a:03:4c:0a:cc:a2:a5:55:ec:1e:ec:e1:9f:c7:a0:8e:25:
2b:d8:51:d7:d8:44:55:fb:be:81:fb:8a:a6:0d:1f:8d:ff:fc:
a0:57:58:9b:55:16:8d:aa:98:ab:df:78:f4:ff:a2:9f:52:db:
85:17:a9:0d:96:24:0f:44:c6:a5:38:7a:bb:5f:aa:06:0d:58:
bb:9b:c2:f5:0e:e1:e4:56:aa:27:7a:5e:9b:cf:11:cb:08:5a:
31:05:64:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:32 2023 by rpki-client on console-ams.rpki-client.org