Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/d9d82d-1ca4-4824-a92c-ca55efc7752d/1/1-Bei-2qerW0BJvTeXRpxPNquYMY.roa
File: 1-Bei-2qerW0BJvTeXRpxPNquYMY.roa (raw, json)
Hash identifier: PmmWkTMAw3cdrDXIaYH3E58k5OuEm1ASev8y/Vr3bf0=
Subject key identifier: F8:17:A2:FB:6A:9E:AD:6D:01:26:F4:DE:5D:1A:71:3C:DA:AE:60:C6
Certificate issuer: /CN=310e2e9fb70668c796adce877b21e09a8a1ad029
Certificate serial: 01478A
Authority key identifier: 31:0E:2E:9F:B7:06:68:C7:96:AD:CE:87:7B:21:E0:9A:8A:1A:D0:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MQ4un7cGaMeWrc6HeyHgmooa0Ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/d9d82d-1ca4-4824-a92c-ca55efc7752d/1/1-Bei-2qerW0BJvTeXRpxPNquYMY.roa
Signing time: Fri 21 Jan 2022 10:52:34 +0000
ROA not before: Fri 21 Jan 2022 10:52:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197368
IP address blocks: 91.220.44.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83850 (0x1478a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=310e2e9fb70668c796adce877b21e09a8a1ad029
Validity
Not Before: Jan 21 10:52:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f817a2fb6a9ead6d0126f4de5d1a713cdaae60c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:96:5e:01:6c:ed:cb:a7:c2:0c:25:4e:29:06:
e9:bf:1f:13:70:99:bb:68:da:08:b2:df:f3:70:93:
7f:7b:ec:34:de:89:3e:fb:7a:ce:d0:1c:79:da:25:
36:01:72:73:d7:37:11:63:ec:bc:fb:28:90:a0:24:
c0:29:3b:5f:28:77:7e:04:e1:a6:91:11:2b:46:5f:
60:03:a1:7d:8f:14:ef:f4:44:bb:e4:f2:60:81:48:
b6:59:88:1a:62:d5:ab:70:98:98:5e:6d:46:a3:a7:
23:9a:d2:9d:1b:ad:dd:8c:92:a1:84:ed:5c:29:94:
f1:40:c3:8b:c0:a9:9b:d0:97:c1:ae:2c:45:e5:8d:
6e:de:77:b6:fa:1d:88:bd:3d:44:be:e4:4e:da:06:
03:7f:6b:d0:aa:5a:e5:d7:39:e0:1b:0e:78:d5:78:
ac:7b:b2:d4:36:e3:10:9e:85:0b:66:45:fc:97:aa:
e6:c3:42:5f:d7:6b:9e:8d:2d:a3:18:6c:a9:6e:9d:
5d:f1:df:1d:7d:7d:58:5f:f6:ad:60:1e:3a:cb:06:
f3:25:57:76:4f:5b:4c:28:46:ed:dd:81:8e:77:73:
09:ee:ad:da:de:b1:a9:25:42:db:b7:7d:74:95:e0:
2b:89:38:c2:17:06:cf:68:0f:5c:03:9b:6d:b6:2d:
b8:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:17:A2:FB:6A:9E:AD:6D:01:26:F4:DE:5D:1A:71:3C:DA:AE:60:C6
X509v3 Authority Key Identifier:
keyid:31:0E:2E:9F:B7:06:68:C7:96:AD:CE:87:7B:21:E0:9A:8A:1A:D0:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MQ4un7cGaMeWrc6HeyHgmooa0Ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/d9d82d-1ca4-4824-a92c-ca55efc7752d/1/1-Bei-2qerW0BJvTeXRpxPNquYMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/d9d82d-1ca4-4824-a92c-ca55efc7752d/1/MQ4un7cGaMeWrc6HeyHgmooa0Ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.44.0/24
Signature Algorithm: sha256WithRSAEncryption
59:92:a7:31:1b:0d:7c:08:aa:6a:ee:4d:c6:d5:ff:6a:99:c5:
ce:6e:88:ca:a3:2b:1f:2f:e5:33:c2:48:4f:be:59:ac:37:ca:
46:0f:11:71:f0:7f:52:a8:9a:fc:b5:b9:e2:4e:26:05:aa:12:
d2:94:fc:83:4f:44:13:22:b6:fe:c8:28:62:7f:0a:e4:77:a4:
c9:62:15:3a:dd:21:74:95:00:24:e8:de:ed:dc:06:91:81:49:
42:dc:0a:14:68:85:86:c2:a7:a7:99:bf:c1:af:df:63:6b:19:
d6:36:9b:81:97:96:05:eb:5a:ad:6a:2a:86:67:be:1a:41:c2:
29:02:65:06:4b:93:ed:76:13:cd:50:7f:89:30:6b:79:ef:de:
b6:d2:7d:e7:82:eb:8b:bd:90:5e:7c:b2:0f:1a:e7:31:bc:5d:
ac:93:cf:ed:87:d2:3d:bb:c9:f6:61:9a:27:40:7e:c7:f6:2e:
02:87:73:2a:0a:6b:65:dd:e5:1f:bf:b8:1a:8c:06:58:42:07:
fd:92:93:05:50:18:ff:7d:30:09:74:6b:d7:6d:b8:09:31:2c:
66:48:dd:ea:11:7f:0a:fc:e6:b5:de:f9:c9:74:d0:f2:e6:30:
02:7a:47:8c:ee:10:f8:93:36:95:27:26:01:44:f5:f7:32:c1:
2d:59:df:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:50 2023 by rpki-client on console.sobornost.net