Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/rPxpW39gsW2a86Q5empbc7ByYZY.roa
File: rPxpW39gsW2a86Q5empbc7ByYZY.roa (raw, json)
Hash identifier: ACSI2cYCMG4AHNChEAntOyvPZ/8feKMym8o22ljy4jA=
Subject key identifier: AC:FC:69:5B:7F:60:B1:6D:9A:F3:A4:39:7A:6A:5B:73:B0:72:61:96
Certificate issuer: /CN=d1c15f0aec0e336662de9f6371521ce25e8de10f
Certificate serial: 08B6D2B8
Authority key identifier: D1:C1:5F:0A:EC:0E:33:66:62:DE:9F:63:71:52:1C:E2:5E:8D:E1:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/rPxpW39gsW2a86Q5empbc7ByYZY.roa
Signing time: Sat 01 Jan 2022 13:03:38 +0000
ROA not before: Sat 01 Jan 2022 13:03:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199381
IP address blocks: 91.223.57.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146199224 (0x8b6d2b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1c15f0aec0e336662de9f6371521ce25e8de10f
Validity
Not Before: Jan 1 13:03:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=acfc695b7f60b16d9af3a4397a6a5b73b0726196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:96:82:a4:8a:93:b6:4f:fd:ee:60:30:9c:e4:
35:7b:60:97:3b:cf:72:28:29:65:f1:a1:4e:d9:2e:
55:a3:de:f4:98:9b:30:7d:e4:d1:57:e6:93:fa:35:
92:7d:9c:38:07:f7:3a:e0:87:e1:1e:f8:6e:f1:83:
6c:d2:f0:6d:e8:38:b7:a0:5b:ca:b4:0a:ea:e6:7e:
dd:a9:2a:59:ec:a0:75:8d:2c:09:52:55:11:00:f7:
b9:b9:ba:1a:7d:3d:a0:7e:12:22:f0:ee:11:7e:ba:
a7:e4:2c:62:25:d8:4e:c9:62:3b:b6:b0:c0:19:48:
0f:69:ea:5d:50:18:63:ed:3a:40:d0:df:aa:d3:68:
73:3d:bb:02:24:a2:9a:0c:0d:e7:6d:f4:71:e0:61:
3a:74:59:9a:37:02:d9:2d:3d:a2:13:c6:eb:65:44:
a9:90:d4:53:49:8f:8c:c3:c6:50:c6:65:95:18:1c:
46:e1:43:c7:7a:c2:69:e9:8d:64:78:0b:a6:0b:3c:
45:13:10:a2:8d:74:e6:24:78:6a:93:59:91:7d:0b:
fb:63:f3:83:c4:74:c0:c2:da:ff:21:89:80:8e:8f:
5e:22:9d:fb:88:ee:53:14:66:4c:5e:ca:c4:d0:23:
1e:91:68:43:7a:04:c0:e9:98:61:47:e5:8e:52:c7:
0e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:FC:69:5B:7F:60:B1:6D:9A:F3:A4:39:7A:6A:5B:73:B0:72:61:96
X509v3 Authority Key Identifier:
keyid:D1:C1:5F:0A:EC:0E:33:66:62:DE:9F:63:71:52:1C:E2:5E:8D:E1:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/rPxpW39gsW2a86Q5empbc7ByYZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.57.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:71:1a:4b:dd:64:aa:cd:88:86:f8:65:01:0c:ac:05:c7:09:
21:41:2c:23:5a:1c:e6:2b:47:b0:9c:c4:19:2f:bd:43:5c:92:
d8:83:15:44:28:9f:04:d6:b6:70:21:91:e2:70:c6:c6:b2:e8:
23:02:23:1f:b1:88:07:cc:91:2e:0b:d9:1c:43:d4:54:cc:ab:
03:d2:e5:88:e9:ad:a5:f0:fb:69:2c:b2:16:24:64:b4:02:d5:
6b:c7:5d:d6:e8:c0:e4:8b:44:3d:73:b0:9b:9b:81:7d:ef:ef:
a5:67:23:49:07:8a:33:0c:ef:fc:04:16:e8:cd:66:88:c9:25:
4d:e8:fe:fa:d4:7d:f0:db:45:31:f8:63:b7:dc:2d:9b:6e:f4:
c6:62:8e:f2:06:4b:06:11:65:86:a2:28:50:a0:cd:7c:5b:40:
25:ee:3c:68:f1:03:63:5c:9a:40:c1:be:64:53:2d:7f:9b:63:
d0:27:ad:5a:9a:8a:49:b4:7a:df:b2:f4:22:54:69:df:24:63:
2b:d1:31:c5:b3:8f:c2:6f:d6:60:85:ea:64:f6:61:0a:25:a9:
35:d3:cf:df:12:1c:aa:1a:25:f5:3e:0d:4f:a9:f2:33:44:18:
e7:06:54:a9:9e:f3:80:ef:4b:10:1a:f4:2e:24:04:d0:8c:89:
0b:93:b6:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:44 2023 by rpki-client on console-ams.rpki-client.org