Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/ernG_-KF2iWduUWsGRoNPJsdpzk.roa
File: ernG_-KF2iWduUWsGRoNPJsdpzk.roa (raw, json)
Hash identifier: /Z9sxfh1Gvve9j2kE01WkWoFVY+HLo41WCRwF7MKuEU=
Subject key identifier: 7A:B9:C6:FF:E2:85:DA:25:9D:B9:45:AC:19:1A:0D:3C:9B:1D:A7:39
Certificate issuer: /CN=ff8ced3b09a905eb96869c58f66b4f8b591503b0
Certificate serial: 0760FAB1
Authority key identifier: FF:8C:ED:3B:09:A9:05:EB:96:86:9C:58:F6:6B:4F:8B:59:15:03:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4ztOwmpBeuWhpxY9mtPi1kVA7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/ernG_-KF2iWduUWsGRoNPJsdpzk.roa
Signing time: Sat 01 Jan 2022 01:56:15 +0000
ROA not before: Sat 01 Jan 2022 01:56:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24881
IP address blocks: 91.192.156.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123796145 (0x760fab1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff8ced3b09a905eb96869c58f66b4f8b591503b0
Validity
Not Before: Jan 1 01:56:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7ab9c6ffe285da259db945ac191a0d3c9b1da739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c0:18:87:25:dd:5d:39:fb:77:08:3e:95:cb:
9e:0c:8b:c4:68:fe:2a:5d:db:d4:87:ac:62:db:bb:
8f:8d:6f:ee:d9:77:d5:0c:c1:00:06:ce:fb:de:87:
06:14:d1:f8:7b:d7:ff:32:ad:97:ea:60:b9:76:2d:
78:f4:a3:9f:aa:00:cb:ea:94:3c:b9:7b:45:4c:6c:
df:28:6e:33:f2:be:4d:cd:83:0b:11:25:7c:c5:f6:
9c:fa:94:9b:f2:75:02:98:de:8c:60:b5:62:dd:8b:
16:70:f5:6b:9c:be:f4:ff:57:76:fb:f8:9a:96:30:
1a:5e:36:d8:b0:97:49:4e:3a:73:14:55:ee:ef:de:
79:4f:db:84:18:b5:24:cd:c4:ab:6d:fa:13:6c:ea:
f6:97:89:bc:e0:02:99:e5:f0:56:a7:14:aa:2e:9a:
f2:f2:83:9c:f1:f6:22:38:70:ea:fa:8e:66:2f:af:
0c:34:55:48:8d:8d:63:17:ff:62:6b:a2:c7:88:6e:
9e:f6:57:23:56:1c:a7:b2:5f:7d:b1:20:ef:d2:0f:
06:78:59:50:15:ad:ff:d7:f8:82:43:57:d5:33:1b:
b7:80:36:0a:bc:c4:c8:89:00:39:ad:99:d8:c2:aa:
40:4f:6b:28:dd:ca:1a:45:72:24:b8:3a:53:ca:57:
9a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:B9:C6:FF:E2:85:DA:25:9D:B9:45:AC:19:1A:0D:3C:9B:1D:A7:39
X509v3 Authority Key Identifier:
keyid:FF:8C:ED:3B:09:A9:05:EB:96:86:9C:58:F6:6B:4F:8B:59:15:03:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4ztOwmpBeuWhpxY9mtPi1kVA7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/ernG_-KF2iWduUWsGRoNPJsdpzk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.192.156.0/22
Signature Algorithm: sha256WithRSAEncryption
55:1d:d8:b1:8d:93:03:93:a9:ad:5a:4b:7d:a2:9f:46:0d:07:
60:5f:f7:84:41:8a:d2:4d:67:2b:91:b8:ca:fd:be:e5:c5:20:
35:bf:5c:c2:0c:06:79:94:77:a7:d4:7a:07:7f:58:b7:7b:e6:
fb:7c:69:83:9a:97:d7:d9:3a:34:0d:b4:d9:42:be:98:ab:e7:
f6:aa:49:51:b4:db:b6:fa:f2:24:b6:36:5e:87:93:be:8c:38:
f6:ab:a0:39:e8:e2:b2:06:a2:b4:97:b7:60:22:a8:ba:33:3e:
54:b3:8d:bd:63:55:ac:4a:dc:65:13:28:ff:4f:ba:62:7c:59:
1d:6e:7f:30:03:23:b1:95:0d:ce:3e:e8:06:8d:ce:15:3c:c1:
33:0a:d6:73:bd:f3:64:68:8c:d7:0a:a9:f3:b2:8c:da:70:b8:
ed:62:94:3b:6c:8b:d9:28:83:68:9b:75:f8:8a:14:d5:d9:ea:
80:03:4f:c9:e1:cc:35:e5:a9:b2:e4:60:e7:a9:e1:a2:4a:12:
b8:6c:cc:a3:1d:5e:44:8a:d5:37:6f:56:d8:b8:d6:d6:09:16:
2b:67:d2:69:67:58:8e:a4:bc:b7:81:71:ab:0c:3f:6a:29:7d:
28:23:9f:8f:48:88:5d:99:90:74:d8:93:9c:b8:fc:99:94:f6:
86:0d:f2:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:43 2024 by rpki-client on console-fra.rpki-client.org