Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b0b6e7-3e23-4426-8c84-fab83d403558/1/ENvMP_UFGIoPiBy5yY_h44ChJ6w.roa
File: ENvMP_UFGIoPiBy5yY_h44ChJ6w.roa (raw, json)
Hash identifier: ENVRET/Q2YT7rw/CqNmOogvKVCo4w0o3ZDHbypJdZsg=
Subject key identifier: 10:DB:CC:3F:F5:05:18:8A:0F:88:1C:B9:C9:8F:E1:E3:80:A1:27:AC
Certificate issuer: /CN=d6dbaa1b52f3a73289ff768acb7baa7f387f955f
Certificate serial: 06C7BF58
Authority key identifier: D6:DB:AA:1B:52:F3:A7:32:89:FF:76:8A:CB:7B:AA:7F:38:7F:95:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/b0b6e7-3e23-4426-8c84-fab83d403558/1/ENvMP_UFGIoPiBy5yY_h44ChJ6w.roa
Signing time: Sat 01 Jan 2022 09:02:01 +0000
ROA not before: Sat 01 Jan 2022 09:02:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29802
IP address blocks: 91.208.0.0/24 maxlen: 24
91.208.16.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113753944 (0x6c7bf58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6dbaa1b52f3a73289ff768acb7baa7f387f955f
Validity
Not Before: Jan 1 09:02:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=10dbcc3ff505188a0f881cb9c98fe1e380a127ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ad:1d:db:ce:70:fd:67:c8:64:c7:23:02:58:
53:b5:78:4e:58:92:ba:c4:ca:18:e8:81:1c:25:73:
bb:16:82:41:ee:19:28:f3:61:b0:a5:85:ee:75:11:
70:85:03:d1:b9:1a:1b:97:5c:af:fa:6d:8e:89:08:
52:31:cf:89:94:76:75:45:d2:0c:d9:68:b0:32:04:
c6:94:a8:47:0c:fb:01:dd:08:18:ef:17:9d:1b:e5:
8d:60:f8:4a:8b:aa:ea:b3:11:b8:4c:25:c6:72:a1:
ad:1e:b1:69:37:cd:7c:eb:9b:8c:0b:d8:c5:97:76:
0b:64:df:24:08:43:76:e9:d6:84:8d:88:3f:3c:a1:
a0:a6:fe:fd:8c:6c:2f:91:9a:fa:67:6a:98:40:c3:
df:fa:a0:5b:07:2e:9f:e4:5d:98:ff:e0:5e:41:e2:
e9:16:9d:fa:71:94:95:77:1b:7f:9a:a5:b1:f5:e5:
62:77:15:67:00:b3:08:95:e6:21:6d:f4:b6:ff:f4:
b0:e3:91:f3:57:b6:d0:58:02:dc:41:80:1a:84:25:
1b:bf:ae:6f:35:1f:3a:49:a1:58:94:8c:e6:25:7b:
60:59:d4:b1:1e:a1:b4:94:33:4b:ec:1e:89:20:3c:
7d:c3:46:ce:85:67:1c:93:4d:56:b2:79:e4:17:e3:
fe:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:DB:CC:3F:F5:05:18:8A:0F:88:1C:B9:C9:8F:E1:E3:80:A1:27:AC
X509v3 Authority Key Identifier:
keyid:D6:DB:AA:1B:52:F3:A7:32:89:FF:76:8A:CB:7B:AA:7F:38:7F:95:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b0b6e7-3e23-4426-8c84-fab83d403558/1/ENvMP_UFGIoPiBy5yY_h44ChJ6w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b0b6e7-3e23-4426-8c84-fab83d403558/1/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.0.0/24
91.208.16.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:8c:d5:b7:63:f5:49:1f:d8:ca:e8:f6:b4:9d:90:b6:20:47:
b9:57:ec:ce:04:a7:45:f1:89:06:0e:c0:21:7d:6b:29:5d:e3:
58:04:a7:a2:72:6c:69:0d:40:0f:12:39:06:2d:06:3e:19:c9:
9a:a2:1e:c7:09:74:5b:c4:f0:be:21:4f:7b:74:6c:a0:3b:de:
be:2a:5c:36:ca:4e:61:08:eb:ae:f9:10:67:d2:f4:ca:74:f1:
fc:13:51:15:e2:08:c0:6a:0b:94:4f:6c:9e:56:e7:02:11:2b:
1b:ea:af:79:f7:c6:f2:f6:42:5e:40:81:58:e5:ce:71:e3:fe:
9d:d6:13:1a:9e:51:d0:e0:c2:d8:d8:2c:f0:d0:50:a1:c1:e1:
8a:8c:c2:39:41:69:9d:39:49:03:d8:cd:ee:61:98:f6:ae:52:
56:a8:b6:02:2c:29:35:37:23:ea:54:61:60:0d:96:2e:b5:7d:
34:6c:0a:8c:fb:ad:19:0f:55:b3:1c:d5:04:62:71:d0:93:66:
ad:ac:76:ee:2f:88:01:51:02:d8:d1:8a:b7:4b:a9:98:77:fc:
fa:36:1c:76:2c:5b:e0:68:33:e3:30:e9:a1:84:72:54:f0:8c:
8f:0c:23:31:a2:a5:f9:e1:d1:5c:6d:4e:1b:0f:ee:9a:ca:b6:
e9:83:a4:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:04 2023 by rpki-client on console-ams.rpki-client.org