Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3e8e42-dffb-435d-bd2b-eb8b1ecc4741/1/G5it1DVIxuazfJjuH5CMpCgjgWM.roa
File: G5it1DVIxuazfJjuH5CMpCgjgWM.roa (raw, json)
Hash identifier: IJGlsvc413wSEQYcft4KZsmdTEgVAPF2a9AbVMPq/RQ=
Subject key identifier: 1B:98:AD:D4:35:48:C6:E6:B3:7C:98:EE:1F:90:8C:A4:28:23:81:63
Certificate issuer: /CN=4dd2fc4d23fd9c2420c40491871808ec5424a670
Certificate serial: 090637C0
Authority key identifier: 4D:D2:FC:4D:23:FD:9C:24:20:C4:04:91:87:18:08:EC:54:24:A6:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdL8TSP9nCQgxASRhxgI7FQkpnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3e8e42-dffb-435d-bd2b-eb8b1ecc4741/1/G5it1DVIxuazfJjuH5CMpCgjgWM.roa
Signing time: Sat 01 Jan 2022 13:02:25 +0000
ROA not before: Sat 01 Jan 2022 13:02:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8998
IP address blocks: 91.203.38.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151402432 (0x90637c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd2fc4d23fd9c2420c40491871808ec5424a670
Validity
Not Before: Jan 1 13:02:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1b98add43548c6e6b37c98ee1f908ca428238163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b8:31:3b:5a:0e:c5:e1:e8:b0:4a:2b:70:45:
fb:ca:f8:8b:19:18:bf:bd:d3:fd:c7:8a:9b:41:4b:
18:40:b6:b5:db:e9:60:cb:07:98:12:80:81:a0:46:
8e:ae:16:60:c4:81:6a:08:6c:f5:ea:70:29:1b:9c:
80:19:7a:2c:e0:82:ff:35:33:9e:8c:a3:5c:9a:1a:
eb:92:1d:15:80:e2:bd:6d:bc:6b:bb:c9:a1:06:ce:
67:2c:9d:af:17:21:27:5e:96:0c:64:a4:5d:fe:98:
ca:db:b4:8a:e1:25:d6:d6:48:f3:b4:9f:33:68:6a:
9b:5c:0d:50:bc:b1:88:80:d7:f4:5d:ed:5c:13:f5:
ab:b7:6e:1e:f2:cc:44:00:c9:7b:bd:30:86:20:3e:
19:5e:03:c5:2c:8a:c0:5b:79:4e:9a:13:67:11:0f:
c4:a7:19:f6:ac:e3:0a:6d:03:d4:fe:69:1e:4e:5d:
9a:6e:47:77:de:0e:34:a4:3d:c4:14:66:93:62:98:
48:26:dd:d4:3c:79:4d:02:0c:13:5d:10:10:76:aa:
2a:77:c3:ab:7c:a6:58:63:0a:88:63:32:31:2e:75:
ae:0d:75:fb:4e:d7:52:45:3a:1b:8a:2a:a1:40:46:
0a:f0:30:79:10:e0:a8:d8:ae:54:50:8b:68:a5:00:
89:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:98:AD:D4:35:48:C6:E6:B3:7C:98:EE:1F:90:8C:A4:28:23:81:63
X509v3 Authority Key Identifier:
keyid:4D:D2:FC:4D:23:FD:9C:24:20:C4:04:91:87:18:08:EC:54:24:A6:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdL8TSP9nCQgxASRhxgI7FQkpnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3e8e42-dffb-435d-bd2b-eb8b1ecc4741/1/G5it1DVIxuazfJjuH5CMpCgjgWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3e8e42-dffb-435d-bd2b-eb8b1ecc4741/1/TdL8TSP9nCQgxASRhxgI7FQkpnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.203.38.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:ff:11:c6:b6:2d:ce:16:e4:18:54:4d:c9:85:d9:8c:10:ad:
8d:4f:6b:1f:bb:89:03:21:d0:c3:a1:84:ed:db:ab:ca:7e:57:
52:9f:57:15:83:3d:f3:06:ee:3a:a8:bd:2c:f3:a0:96:2d:71:
87:64:7c:e8:ed:90:8c:81:51:bf:55:12:fe:33:cd:0b:e2:a1:
df:1b:28:aa:98:10:b1:fc:da:4e:3d:61:f8:e5:1d:fe:7c:f6:
5d:35:1c:f5:de:0a:1f:83:8e:04:b7:f1:e8:3c:4d:23:9a:07:
1e:76:c6:05:aa:81:f5:00:5a:b7:20:d0:60:1d:ea:d2:03:25:
79:e7:a0:bd:ce:3e:03:b6:72:0c:8b:20:48:f5:dd:30:65:51:
12:2d:91:34:68:c3:74:a4:f4:1b:f7:f8:6d:85:de:f4:cb:25:
01:79:3b:9f:ee:e0:4a:14:a4:de:85:37:02:71:3a:be:42:c1:
de:d2:53:3a:03:e1:22:ae:4c:24:a3:70:1c:05:e5:2e:36:11:
e0:13:fc:14:89:60:84:68:43:90:7e:a4:3d:af:d9:55:10:4a:
af:ed:24:59:70:19:d4:1e:af:cc:51:5d:95:58:4e:ea:be:09:
0d:c3:16:f8:bf:c1:31:57:ec:f2:3d:02:7e:08:9d:e6:f2:43:
7c:1b:6c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:04 2024 by rpki-client on console-fra.rpki-client.org