Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b16080-1813-492b-a7c2-98d4ffea210c/1/1H7jq3T1gS9Pzq6eyu5hs41VhQA.roa
File: 1H7jq3T1gS9Pzq6eyu5hs41VhQA.roa (raw, json)
Hash identifier: LLJ44iCeFayreJPJw6QSOWwLsWJXfDgJZUcwovbteY8=
Subject key identifier: D4:7E:E3:AB:74:F5:81:2F:4F:CE:AE:9E:CA:EE:61:B3:8D:55:85:00
Certificate issuer: /CN=3f283af20fe6cf39100169d776bafa78241f44ed
Certificate serial: 24E9
Authority key identifier: 3F:28:3A:F2:0F:E6:CF:39:10:01:69:D7:76:BA:FA:78:24:1F:44:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pyg68g_mzzkQAWnXdrr6eCQfRO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b16080-1813-492b-a7c2-98d4ffea210c/1/1H7jq3T1gS9Pzq6eyu5hs41VhQA.roa
Signing time: Mon 30 May 2022 07:41:13 +0000
ROA not before: Mon 30 May 2022 07:41:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210439
IP address blocks: 91.202.211.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9449 (0x24e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f283af20fe6cf39100169d776bafa78241f44ed
Validity
Not Before: May 30 07:41:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d47ee3ab74f5812f4fceae9ecaee61b38d558500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ee:8d:50:73:5d:b9:dc:aa:db:42:2c:4f:1e:
45:e4:ff:2e:74:04:bc:a4:90:48:99:74:99:b7:53:
1c:db:8e:b6:1c:c0:f0:db:d7:8f:4f:50:48:2a:ee:
6e:0d:2d:c7:55:07:1b:07:31:2a:02:ce:ba:c8:7e:
b1:09:9a:41:b4:ea:e6:da:1a:26:f0:62:c3:2d:b6:
54:8f:f0:53:0a:72:c6:1d:05:7a:5c:e0:a5:26:d6:
61:14:c0:f8:26:bc:8c:34:01:8f:f2:c8:98:6d:59:
b7:d7:58:d1:b4:00:34:50:5c:31:37:f8:62:70:f7:
65:28:e7:1f:86:a7:3f:b6:57:9b:0b:01:58:2c:d2:
21:72:f6:ff:f4:f2:0a:bf:be:b3:d8:62:8e:15:98:
ae:a8:1f:d5:9f:fd:63:d6:cc:1d:d2:33:64:d3:fd:
ce:30:c0:43:31:91:28:59:ea:eb:34:18:eb:81:3b:
df:6f:07:86:3f:df:10:ff:cf:b9:a9:68:23:9c:23:
db:83:96:e1:db:0e:cd:95:52:e8:bb:df:72:ce:bc:
c6:b0:d4:d5:62:6b:13:78:7e:d8:33:5b:67:93:ca:
f2:ec:db:ad:b5:e4:7d:cd:be:2e:22:ab:09:73:ef:
3d:d6:93:62:97:69:a5:e5:ca:ce:4a:2b:d6:69:b4:
a3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:7E:E3:AB:74:F5:81:2F:4F:CE:AE:9E:CA:EE:61:B3:8D:55:85:00
X509v3 Authority Key Identifier:
keyid:3F:28:3A:F2:0F:E6:CF:39:10:01:69:D7:76:BA:FA:78:24:1F:44:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pyg68g_mzzkQAWnXdrr6eCQfRO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b16080-1813-492b-a7c2-98d4ffea210c/1/1H7jq3T1gS9Pzq6eyu5hs41VhQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b16080-1813-492b-a7c2-98d4ffea210c/1/Pyg68g_mzzkQAWnXdrr6eCQfRO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.202.211.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:26:3c:18:2a:53:57:7b:3a:fa:f9:64:8c:95:0c:59:94:81:
bd:bf:b0:2d:ef:04:03:53:c8:ae:a9:a7:bb:59:ca:06:9e:8e:
26:83:9c:b1:9c:8b:8f:31:65:44:ad:2f:1d:aa:f6:f3:f8:55:
33:85:4f:13:bd:e2:ed:c2:3b:0f:31:ae:7a:4b:b1:42:bc:4c:
ee:29:72:4a:44:87:3c:0e:f6:56:bd:63:9b:60:25:3d:5e:9b:
02:17:ca:e7:7b:f5:1b:8d:1b:56:0e:9c:68:9f:6e:a1:58:94:
a1:84:d5:6c:e1:18:b8:de:cf:95:9f:fe:5d:5c:03:e2:d7:b9:
44:a3:a9:7b:73:b9:b4:a8:da:d7:a5:bb:fb:7f:8b:97:a2:38:
7a:9c:f3:c3:88:94:b8:e7:03:85:21:b3:99:37:96:b6:82:b2:
7f:77:78:31:0f:d3:54:18:9b:c0:01:ff:c7:17:ab:79:af:66:
53:bc:53:fb:56:e0:0c:4a:50:9a:b0:4d:e7:25:93:d7:ff:57:
84:f5:23:c8:b9:a0:8e:e8:8b:c0:8f:a3:e8:e4:44:aa:69:11:
27:7f:9b:d9:9e:7e:4f:d2:f2:90:f3:a5:22:ae:a4:69:d6:72:
06:ec:92:e4:55:e7:e9:27:50:69:e5:10:ae:a3:79:58:6f:24:
f8:77:40:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:02 2023 by rpki-client on console.sobornost.net