Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/tZ1pKQfeLNzpAzCdRDruA-NgUys.roa
File: tZ1pKQfeLNzpAzCdRDruA-NgUys.roa (raw, json)
Hash identifier: Msa7gtuA/ra6oD5R3EUTx4CTG1a+jzMsZWQRlz7LolQ=
Subject key identifier: B5:9D:69:29:07:DE:2C:DC:E9:03:30:9D:44:3A:EE:03:E3:60:53:2B
Certificate issuer: /CN=0e2e4fd219f5b77ce80cdfaf9e3a6441dec50042
Certificate serial: 13107A7E
Authority key identifier: 0E:2E:4F:D2:19:F5:B7:7C:E8:0C:DF:AF:9E:3A:64:41:DE:C5:00:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Di5P0hn1t3zoDN-vnjpkQd7FAEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/tZ1pKQfeLNzpAzCdRDruA-NgUys.roa
Signing time: Fri 28 Jan 2022 20:52:39 +0000
ROA not before: Fri 28 Jan 2022 20:52:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42214
IP address blocks: 91.246.28.0/24 maxlen: 24
91.246.29.0/24 maxlen: 24
2001:678:4bc::/48 maxlen: 48
2001:678:47c::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 319847038 (0x13107a7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e2e4fd219f5b77ce80cdfaf9e3a6441dec50042
Validity
Not Before: Jan 28 20:52:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b59d692907de2cdce903309d443aee03e360532b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d7:b6:28:1c:f5:07:9e:d5:83:0e:9c:96:18:
ce:ed:20:1d:8f:80:0b:ce:14:a2:9b:5d:d0:5d:c3:
a8:a7:42:8b:b6:65:96:a7:32:79:9b:51:fa:22:8b:
7a:c1:5b:24:0c:2e:42:be:df:44:a9:99:b1:d3:35:
ea:1c:29:84:f8:ac:ce:b2:d0:f3:7c:c5:0a:b6:ab:
1c:5e:eb:60:9f:fc:b2:8a:90:00:7a:5a:12:17:47:
48:ae:f8:88:64:bd:aa:f5:1a:6b:fa:9e:c3:27:0b:
bd:cc:43:e2:d7:13:90:cb:75:02:81:6f:05:df:48:
54:01:12:3f:fa:1a:25:2f:02:be:08:dc:29:c4:95:
12:8e:7e:42:23:b2:9b:11:d5:cb:bb:bd:fd:a6:44:
a9:93:f3:8d:4a:11:b6:3a:43:eb:45:ff:cd:7a:90:
e6:c4:f5:61:92:6c:76:b6:32:62:8f:c8:ff:88:c5:
61:bf:8a:b3:95:28:5f:9d:28:27:36:a3:1a:40:6c:
9d:c6:7f:be:bb:26:b4:28:fc:df:7c:10:e0:81:9c:
62:25:9b:ee:d0:b7:f7:69:ce:5d:b8:9f:74:91:13:
80:22:23:24:de:70:c7:33:ab:bc:92:d0:99:9a:4b:
b6:01:b9:27:05:8a:09:1d:f0:84:12:2d:2d:76:08:
14:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:9D:69:29:07:DE:2C:DC:E9:03:30:9D:44:3A:EE:03:E3:60:53:2B
X509v3 Authority Key Identifier:
keyid:0E:2E:4F:D2:19:F5:B7:7C:E8:0C:DF:AF:9E:3A:64:41:DE:C5:00:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Di5P0hn1t3zoDN-vnjpkQd7FAEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/tZ1pKQfeLNzpAzCdRDruA-NgUys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Di5P0hn1t3zoDN-vnjpkQd7FAEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.246.28.0/23
IPv6:
2001:678:47c::/48
2001:678:4bc::/48
Signature Algorithm: sha256WithRSAEncryption
6d:2f:45:51:79:0c:cc:7b:ef:4c:8e:84:24:fe:00:43:4e:49:
78:27:50:fa:c3:a0:7c:31:28:f5:43:25:5a:f0:50:56:d3:71:
ac:b2:df:05:d6:55:82:b3:be:66:9b:e9:2f:ad:42:99:dc:b7:
30:75:bb:05:6b:89:62:45:ab:57:0b:9c:9f:1a:72:7c:e1:40:
0a:11:ba:43:24:f9:5d:ae:79:6d:fa:f1:b7:d7:64:7f:81:1d:
3c:f4:38:b5:56:61:46:95:86:10:72:f3:be:39:31:ce:fe:b7:
05:04:e2:ed:73:0b:9d:98:8e:7f:d3:5e:0e:37:aa:4b:81:9a:
ef:ec:71:ef:0f:02:c5:e0:fa:69:84:a6:3a:fe:6f:4e:d4:17:
06:c9:ce:16:c4:2f:a0:83:78:57:7a:81:21:1c:c5:cd:cb:8e:
26:72:10:48:15:39:cc:b9:9a:ac:04:fd:cb:97:dc:78:9a:dc:
6c:21:d5:15:0a:bc:56:b3:45:fe:46:9b:5f:63:76:ed:98:55:
3e:40:3b:0c:3d:cd:17:60:78:e6:70:7e:d3:92:71:ac:fe:b2:
bf:e3:33:96:1c:f3:3e:26:ed:04:cf:ab:ad:cd:7d:53:98:fa:
68:fd:eb:0e:72:d5:53:59:fc:41:4b:c1:de:3c:de:4a:c8:37:
89:9f:68:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:36 2023 by rpki-client on console-ams.rpki-client.org