Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/0e58dc-7c90-49d7-8855-fa32d2d52968/1/s6srKgVrToCda4GNTcue8eZcOk8.roa
File: s6srKgVrToCda4GNTcue8eZcOk8.roa (raw, json)
Hash identifier: ktROXTbCuRPokkHc0PJ3ltc+D0qylqtyQmwHNbDPVXM=
Subject key identifier: B3:AB:2B:2A:05:6B:4E:80:9D:6B:81:8D:4D:CB:9E:F1:E6:5C:3A:4F
Certificate issuer: /CN=f0cc7a447482e57b0604babb82a52409cde3b36d
Certificate serial: 01F66C45
Authority key identifier: F0:CC:7A:44:74:82:E5:7B:06:04:BA:BB:82:A5:24:09:CD:E3:B3:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Mx6RHSC5XsGBLq7gqUkCc3js20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/0e58dc-7c90-49d7-8855-fa32d2d52968/1/s6srKgVrToCda4GNTcue8eZcOk8.roa
Signing time: Sat 01 Jan 2022 15:59:42 +0000
ROA not before: Sat 01 Jan 2022 15:59:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211585
IP address blocks: 91.123.8.0/22 maxlen: 24
91.123.12.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32926789 (0x1f66c45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0cc7a447482e57b0604babb82a52409cde3b36d
Validity
Not Before: Jan 1 15:59:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b3ab2b2a056b4e809d6b818d4dcb9ef1e65c3a4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:aa:18:72:61:8a:6c:a9:ed:e4:5b:ad:e9:c2:
1b:29:b5:5d:62:79:81:81:8c:77:40:f9:de:9d:76:
90:ba:1f:36:2f:35:53:e1:49:85:8a:3d:07:1c:e8:
ab:a9:64:18:90:fe:7d:17:53:f4:cb:a1:3a:aa:e1:
43:c9:0f:7e:69:9d:47:34:66:b4:be:ec:69:c4:04:
8c:be:37:d8:53:19:c8:c5:3c:e8:7f:50:c6:c4:42:
21:90:e0:b9:8c:ca:1d:2d:da:f7:fa:9b:d5:90:79:
ef:f0:2e:6e:9f:8f:50:d1:c2:2c:4d:23:f7:00:9d:
3a:68:15:06:5f:b6:12:e0:72:03:bf:25:6a:ed:79:
06:5a:74:b3:b5:4d:2f:8c:74:b0:de:a3:05:a1:bf:
b3:ea:16:5a:88:01:3d:68:c0:3f:3b:f6:3e:ee:51:
ef:7e:62:ed:8e:f1:c4:78:99:97:9c:05:d3:4c:11:
56:89:5a:6f:60:65:62:e9:f8:3b:52:c8:eb:8a:67:
9f:88:12:f9:54:b3:91:51:1d:e3:d8:8b:46:68:8e:
9a:17:c1:31:8e:b5:e3:fe:a6:ac:0c:ad:a8:66:f8:
70:5a:c5:f1:84:1e:e4:03:5f:2b:82:82:91:ef:7d:
7f:0f:b7:a5:e7:c4:a5:6d:71:b5:86:c2:d5:66:a6:
4c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:AB:2B:2A:05:6B:4E:80:9D:6B:81:8D:4D:CB:9E:F1:E6:5C:3A:4F
X509v3 Authority Key Identifier:
keyid:F0:CC:7A:44:74:82:E5:7B:06:04:BA:BB:82:A5:24:09:CD:E3:B3:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Mx6RHSC5XsGBLq7gqUkCc3js20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0e58dc-7c90-49d7-8855-fa32d2d52968/1/s6srKgVrToCda4GNTcue8eZcOk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0e58dc-7c90-49d7-8855-fa32d2d52968/1/8Mx6RHSC5XsGBLq7gqUkCc3js20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.123.8.0/21
Signature Algorithm: sha256WithRSAEncryption
8d:84:3e:0e:b7:62:59:41:c8:1a:6b:f3:39:4c:b8:66:63:18:
7c:1c:c0:14:fa:97:c4:a5:97:e6:81:66:db:ff:8e:ac:f8:df:
81:16:5f:66:8d:89:65:98:ef:eb:71:62:e5:2c:bd:c4:d6:04:
8c:ba:ce:7f:c6:8d:df:76:4c:02:2d:33:61:93:21:24:91:cb:
cf:7b:78:86:27:c7:b6:f7:69:b2:91:e9:99:1f:1b:53:a4:8b:
7a:de:4a:6a:67:43:1a:57:c9:11:59:90:90:de:0e:1f:13:76:
30:71:e0:6f:5d:53:34:5d:dc:89:dd:e9:6a:a7:1a:4f:83:72:
f5:f5:1c:8f:f3:88:2d:7c:0e:5a:4e:bc:fe:67:76:f0:2b:9f:
00:f5:d2:83:e5:58:70:40:18:19:f2:56:f5:f1:9f:ed:d5:d3:
02:be:72:c0:4e:eb:6e:31:44:9d:84:3a:ad:af:7f:fb:46:ce:
32:20:77:ea:fd:fc:71:97:c7:2a:29:f3:26:3d:a0:0b:67:90:
0f:0a:71:f5:a5:f5:71:45:10:e7:d3:28:06:71:b3:4c:a4:98:
ee:e2:85:08:16:2b:50:9c:2d:ff:03:d7:de:32:38:0f:ef:0a:
05:1e:c0:de:d0:a6:52:d0:16:15:e8:22:58:3e:a5:45:86:a8:
17:94:b1:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:13 2023 by rpki-client on console-ams.rpki-client.org