Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/1MgjhuOffMILwPibolsItg63b20.roa
File: 1MgjhuOffMILwPibolsItg63b20.roa (raw, json)
Hash identifier: GAX2x0yx+s5sykUDRMQazG34qkIXnM6UHzHZFJhXMU8=
Subject key identifier: D4:C8:23:86:E3:9F:7C:C2:0B:C0:F8:9B:A2:5B:08:B6:0E:B7:6F:6D
Certificate issuer: /CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
Certificate serial: 7802DC
Authority key identifier: CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/1MgjhuOffMILwPibolsItg63b20.roa
Signing time: Thu 24 Mar 2022 08:03:50 +0000
ROA not before: Thu 24 Mar 2022 08:03:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49617
IP address blocks: 91.215.60.0/23 maxlen: 23
91.215.60.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7865052 (0x7802dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
Validity
Not Before: Mar 24 08:03:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d4c82386e39f7cc20bc0f89ba25b08b60eb76f6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:05:c5:85:51:2e:33:d1:64:5e:20:dd:3a:29:
b1:50:c2:c5:57:ab:c8:81:59:4f:60:25:ba:fe:ce:
15:ed:58:f7:b5:b5:b2:f2:30:f7:41:34:80:32:49:
8a:4a:b9:51:c0:83:6d:bb:98:c8:27:2a:ff:1e:9f:
f4:c7:a8:ba:af:82:95:d6:c7:1e:88:b7:af:4f:32:
25:64:bd:b6:97:41:07:ea:55:4d:a6:2a:ec:9a:2c:
82:d5:d3:b8:62:b6:db:cc:e7:7a:7c:ab:4d:cc:fa:
f0:87:8e:98:7b:5b:ad:f8:82:c4:75:df:29:75:f5:
dd:17:bc:c5:ce:4a:8b:dd:78:e7:d1:7a:31:0e:f4:
61:a3:12:74:61:55:37:96:97:fa:97:01:e2:dd:e0:
e3:f4:b9:4e:1a:05:83:93:43:9a:87:b7:b6:c2:eb:
97:34:ff:0f:c0:35:1a:0a:2f:3a:d2:47:a9:08:1e:
16:79:97:f6:71:3b:c9:fa:b4:03:db:89:39:ca:ab:
f7:f4:f3:c4:1e:47:f5:fc:81:71:2c:2b:a3:71:9a:
41:59:4f:13:55:a7:2b:58:e2:c4:fd:db:38:55:d8:
a2:84:c1:b0:35:9d:7e:a3:73:14:8e:0b:b6:b3:8b:
2b:1c:cc:0a:21:7c:f1:83:2e:d3:9c:11:22:33:83:
ba:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:C8:23:86:E3:9F:7C:C2:0B:C0:F8:9B:A2:5B:08:B6:0E:B7:6F:6D
X509v3 Authority Key Identifier:
keyid:CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/1MgjhuOffMILwPibolsItg63b20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.215.60.0/22
Signature Algorithm: sha256WithRSAEncryption
24:48:7f:5b:d7:ee:89:77:4b:ea:16:d6:09:0d:35:a3:2f:d6:
31:6b:6b:33:57:ba:5c:6f:7f:4e:bd:a1:e7:3d:09:e0:04:23:
4b:84:a9:b1:75:df:83:64:f4:1a:22:b4:7d:1a:5a:52:9e:32:
b0:f6:7e:73:54:50:fe:99:57:50:42:64:da:b3:a1:6c:90:06:
d4:06:81:3e:95:cb:be:64:8b:0c:9b:c7:7b:5e:c1:80:5f:1c:
91:5f:7c:0b:25:22:0a:94:db:f1:96:5d:2f:06:4b:18:0b:c6:
4a:c5:c0:02:fe:3b:51:42:ad:d9:e2:f1:cd:7f:84:f7:04:c7:
5f:e3:e6:f5:94:db:dd:fe:ac:d5:52:5c:03:c8:11:7d:56:7c:
95:80:5d:31:ca:23:58:06:d7:39:7a:f9:09:ed:61:6d:c9:40:
f9:4a:a5:3f:31:50:d4:d7:4a:f6:df:b2:e2:e5:bd:1d:40:9f:
12:9c:14:ae:91:cb:d3:82:77:b8:3e:11:e6:e5:c9:2d:c4:14:
5b:d8:13:6e:b7:40:4b:1b:d0:78:5e:9d:b8:53:1b:9b:da:5b:
77:5d:b1:ff:6c:5c:43:e5:e9:37:11:73:5e:13:f9:b5:1d:ab:
fe:2e:cc:e2:0b:61:41:48:6e:ca:62:e3:dc:ff:17:fb:bf:65:
3d:1d:e1:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:56 2023 by rpki-client on console-ams.rpki-client.org