Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/S-MmSgBVIxSg_pwCbUSySNtr5ow.roa
File: S-MmSgBVIxSg_pwCbUSySNtr5ow.roa (raw, json)
Hash identifier: leXYevgGAJnMjrJFpu75eM7ufihgBG37R5m2fjSQuEY=
Subject key identifier: 4B:E3:26:4A:00:55:23:14:A0:FE:9C:02:6D:44:B2:48:DB:6B:E6:8C
Certificate issuer: /CN=77b020308865c3360dab19f3a5703341864e9f50
Certificate serial: 06CDC6E8
Authority key identifier: 77:B0:20:30:88:65:C3:36:0D:AB:19:F3:A5:70:33:41:86:4E:9F:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/S-MmSgBVIxSg_pwCbUSySNtr5ow.roa
Signing time: Sat 01 Jan 2022 09:03:47 +0000
ROA not before: Sat 01 Jan 2022 09:03:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210841
IP address blocks: 91.232.198.0/24 maxlen: 24
91.232.208.0/24 maxlen: 24
91.232.235.0/24 maxlen: 24
91.232.129.0/24 maxlen: 24
80.73.219.0/24 maxlen: 24
80.73.220.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114149096 (0x6cdc6e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77b020308865c3360dab19f3a5703341864e9f50
Validity
Not Before: Jan 1 09:03:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4be3264a00552314a0fe9c026d44b248db6be68c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3f:cc:5c:ff:bc:f9:50:33:19:61:79:3e:2b:
f5:92:47:b5:4a:d8:80:3a:75:74:6e:aa:01:d7:0b:
7b:17:4b:16:16:ad:72:34:e3:a4:61:f3:04:ba:59:
d4:3e:ee:8e:16:e5:d1:6b:54:cc:ad:30:98:64:8a:
b7:7d:a2:2c:ae:96:d9:eb:01:c1:31:18:c7:c6:0a:
2c:01:1d:a5:63:ba:83:0a:c5:6e:9e:64:d8:90:16:
96:82:fe:2c:ec:6b:5e:50:b8:ab:63:45:5e:c8:21:
79:8e:23:ba:84:b1:44:a3:47:8a:32:d7:42:3e:f5:
0d:b5:d8:f3:77:7c:94:2b:cf:d2:e6:15:23:19:e4:
0e:64:18:90:b4:de:e8:5f:72:81:ba:0e:09:65:c7:
fa:0c:a5:79:a9:80:ae:cc:e8:b2:ce:76:04:d8:31:
cc:3f:a7:ad:db:7f:fd:8d:07:f6:70:0d:2f:7d:cc:
7e:7a:6c:6f:dd:2e:7d:cc:b0:89:cd:90:40:bd:07:
14:d7:65:73:9d:41:ec:19:e4:0f:6a:24:f1:77:5e:
81:94:9f:01:4f:95:32:d9:69:87:46:25:1a:e3:b5:
33:a1:e7:7d:cd:54:84:0f:ff:7b:24:17:ac:22:64:
a8:7b:7e:4b:99:a7:e4:4c:8e:41:36:e4:bb:75:91:
ec:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:E3:26:4A:00:55:23:14:A0:FE:9C:02:6D:44:B2:48:DB:6B:E6:8C
X509v3 Authority Key Identifier:
keyid:77:B0:20:30:88:65:C3:36:0D:AB:19:F3:A5:70:33:41:86:4E:9F:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/S-MmSgBVIxSg_pwCbUSySNtr5ow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.73.219.0-80.73.223.255
91.232.129.0/24
91.232.198.0/24
91.232.208.0/24
91.232.235.0/24
Signature Algorithm: sha256WithRSAEncryption
61:e1:4e:31:5f:37:70:2f:ec:39:b4:1c:fa:68:5f:fa:88:20:
56:34:f6:38:b7:c4:23:82:3f:3c:e8:93:f6:a0:87:28:6d:26:
7c:8a:0f:96:7a:65:9d:7e:cc:11:2a:72:5a:89:64:92:e2:2e:
ae:3f:a6:f8:0e:2a:f1:81:0a:7c:1c:85:04:df:07:8c:b5:3b:
b1:38:ba:4c:51:2e:61:17:8d:d4:ab:37:5b:f1:af:20:86:98:
cd:22:63:fd:b9:e3:2b:4f:b0:3d:bb:a3:3d:d8:9d:f7:3d:02:
b7:07:4d:de:95:c1:f9:bf:13:91:19:5b:28:0f:1a:64:fc:be:
b1:87:c0:21:1e:60:f2:2e:eb:07:bf:bf:15:04:f6:2c:cf:fb:
f9:2f:96:bb:39:10:83:d9:bf:c2:af:50:30:9f:e5:d4:ea:ab:
7e:5b:43:e1:23:0d:d4:3c:d0:73:ac:4e:33:27:cd:de:6e:9d:
6e:65:bf:ea:71:0f:f1:17:b1:fe:f4:5e:d0:e0:40:48:02:48:
8d:b2:51:02:be:4e:ce:42:22:60:4a:c8:28:3e:cc:9e:d9:e9:
4d:bf:79:29:e6:51:11:a3:1d:39:0e:a6:ab:50:96:18:1b:f7:
71:d0:3a:55:d6:03:04:d5:a8:94:35:b4:a1:b6:40:de:07:34:
d3:65:9b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:41 2023 by rpki-client on console-fra.rpki-client.org