Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/xyI8ChLUXgfOhrksuKmq68tIG0k.roa
File: xyI8ChLUXgfOhrksuKmq68tIG0k.roa (raw, json)
Hash identifier: lPFnTYia+0U9lV+bmjKIUZvUoU6JBPV4le8jN8hVnBM=
Subject key identifier: C7:22:3C:0A:12:D4:5E:07:CE:86:B9:2C:B8:A9:AA:EB:CB:48:1B:49
Certificate issuer: /CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Certificate serial: 0183AEE95FA854602EE0F160E6D977B41294
Authority key identifier: 67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/xyI8ChLUXgfOhrksuKmq68tIG0k.roa
Signing time: Thu 06 Oct 2022 20:07:53 +0000
ROA not before: Thu 06 Oct 2022 20:07:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47596
IP address blocks: 91.241.47.0/24 maxlen: 24
193.19.110.0/24 maxlen: 24
91.203.235.0/24 maxlen: 24
193.43.248.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ae:e9:5f:a8:54:60:2e:e0:f1:60:e6:d9:77:b4:12:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Validity
Not Before: Oct 6 20:07:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c7223c0a12d45e07ce86b92cb8a9aaebcb481b49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:96:e1:48:e4:03:31:a0:5e:80:38:43:23:80:
4b:a1:33:9f:f8:c2:d7:cb:58:e7:17:eb:7c:a7:8e:
82:2a:80:0f:7b:63:c9:6b:85:65:08:91:b3:2e:ba:
f4:32:e2:a1:fd:74:df:4c:78:a8:3e:94:f4:13:58:
ff:57:f0:3d:2e:92:85:e3:8c:34:26:73:71:c6:66:
4d:b2:ae:97:a0:c3:38:61:bb:e4:bb:2b:ab:0b:df:
a0:94:f6:df:ae:22:bf:c2:7f:d1:21:1a:7f:b4:e0:
7e:cf:04:05:ca:b1:c2:98:91:76:6c:fa:a6:26:de:
3d:92:e2:b8:d0:5f:e2:2a:ae:15:ea:5c:28:c9:f7:
d1:46:34:70:86:76:7e:80:be:1d:0e:2f:db:25:3f:
25:24:e9:c9:8f:6a:32:dd:ae:c6:54:66:a1:44:de:
12:3f:44:a8:e4:63:54:17:20:3b:d0:c8:7b:d1:9b:
30:c6:fb:32:1c:7e:0e:00:d3:fd:92:91:f9:77:e2:
a4:25:a9:96:6a:eb:77:25:9b:3f:f1:31:df:e8:cd:
42:08:ec:56:f5:b7:94:b4:00:97:4d:82:e6:02:b0:
20:d6:2a:b3:36:1f:74:e4:32:78:15:75:56:61:b8:
0c:be:f9:66:10:12:89:f0:56:b1:4f:0f:a5:37:75:
04:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:22:3C:0A:12:D4:5E:07:CE:86:B9:2C:B8:A9:AA:EB:CB:48:1B:49
X509v3 Authority Key Identifier:
keyid:67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/xyI8ChLUXgfOhrksuKmq68tIG0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.203.235.0/24
91.241.47.0/24
193.19.110.0/24
193.43.248.0/24
Signature Algorithm: sha256WithRSAEncryption
38:67:4e:51:0d:a7:85:d4:df:c2:80:5f:72:c3:ea:d7:2d:c3:
a1:6e:c9:2f:f6:08:7f:31:0b:98:9e:e8:16:5e:8d:03:c5:f2:
66:24:67:9d:c5:15:c2:e8:b7:40:c8:b6:c3:bc:1a:b9:17:0e:
92:7c:20:c4:49:08:ec:6e:c1:0f:d7:82:52:3b:76:b5:d7:dc:
36:26:69:24:f9:f9:82:ee:5e:b1:a3:50:6c:cc:89:e3:dd:35:
bb:d9:6f:ae:f3:42:e5:90:4e:1c:bb:8e:c8:b2:ad:d4:30:58:
7b:c9:33:99:0a:fa:fd:17:19:dc:44:c5:4f:f9:7c:0d:c6:50:
33:ff:24:c4:60:cd:b5:d7:24:f9:12:e1:dc:dc:f2:35:b5:20:
8f:c0:2b:53:09:84:1d:31:de:3f:8a:4b:98:69:ee:92:ab:dc:
e0:63:a8:76:7a:fd:7e:01:2a:b5:f2:6f:72:c0:b9:f7:8c:41:
d6:9f:ed:e6:8e:cf:fb:0c:b4:e8:b7:0a:57:92:cc:63:c4:7a:
87:c9:fb:60:7c:8f:eb:f4:a0:4e:9b:18:2f:89:a1:6e:94:b0:
43:9c:ce:6d:8b:87:01:c2:cd:06:cf:eb:eb:78:04:9a:55:70:
1f:a6:25:a2:c9:71:c0:51:82:ab:3f:f2:76:d7:ac:a0:5d:ff:
aa:e4:65:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:53 2024 by rpki-client on console-ams.rpki-client.org