Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/rPbpNe7HfKjT65TZ19L2DaMc48M.roa
File: rPbpNe7HfKjT65TZ19L2DaMc48M.roa (raw, json)
Hash identifier: oKid4Axc1c7GvsYM/oy1LICa4LDjIh0vWtJxwsbB5f8=
Subject key identifier: AC:F6:E9:35:EE:C7:7C:A8:D3:EB:94:D9:D7:D2:F6:0D:A3:1C:E3:C3
Certificate issuer: /CN=29109da662f9d302fff2c5c4b4afb8f947fec1c0
Certificate serial: 018507653C104EC2307188FCFA90BBA0E5F6
Authority key identifier: 29:10:9D:A6:62:F9:D3:02:FF:F2:C5:C4:B4:AF:B8:F9:47:FE:C1:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KRCdpmL50wL_8sXEtK-4-Uf-wcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/rPbpNe7HfKjT65TZ19L2DaMc48M.roa
Signing time: Mon 12 Dec 2022 17:32:33 +0000
ROA not before: Mon 12 Dec 2022 17:32:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59747
IP address blocks: 91.207.230.0/24 maxlen: 24
91.207.231.0/24 maxlen: 24
2a02:38:1111::/48 maxlen: 48
2a02:38:cccc::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:07:65:3c:10:4e:c2:30:71:88:fc:fa:90:bb:a0:e5:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29109da662f9d302fff2c5c4b4afb8f947fec1c0
Validity
Not Before: Dec 12 17:32:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=acf6e935eec77ca8d3eb94d9d7d2f60da31ce3c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:68:61:96:6c:d6:d7:24:90:0c:2a:8a:98:43:
3b:7d:fb:78:14:3f:3c:b4:81:7c:2d:78:c2:32:47:
f8:90:45:f2:d4:bd:dc:07:06:aa:3a:36:7e:22:34:
14:a4:3e:fa:8f:6e:f8:4e:78:f3:1b:fb:63:37:3d:
1b:a6:cf:37:0c:c9:e8:ca:bd:65:cb:6e:07:62:fd:
71:2b:df:91:a2:af:88:ea:59:18:cd:f4:58:f6:7e:
c6:f5:ff:1f:64:f9:f7:c4:91:09:36:32:c0:13:29:
e4:f6:b3:4d:60:2d:62:2b:c1:eb:2c:a2:6f:4b:8d:
98:29:9d:0e:b0:66:4c:ca:dd:27:06:21:34:1c:f1:
52:dd:e6:8c:ee:5c:07:ea:bc:f7:0e:cf:ea:59:d2:
77:91:e3:87:e7:d4:43:5d:e5:41:68:e7:22:e4:55:
7e:cd:92:51:2c:59:24:60:79:1d:0d:2d:f5:17:2a:
d2:b6:74:ce:87:07:98:18:11:28:69:f1:1a:10:1d:
fd:db:8e:a3:71:f6:8c:97:1f:8a:63:08:46:61:09:
7c:ac:45:a4:da:b5:13:01:9b:b3:f3:2c:4c:f4:9f:
a5:bd:f9:b4:d8:f7:c3:d8:52:3f:e5:1b:51:52:9f:
c2:82:9a:30:82:a3:b6:63:fd:4a:88:1e:42:55:c1:
d2:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:F6:E9:35:EE:C7:7C:A8:D3:EB:94:D9:D7:D2:F6:0D:A3:1C:E3:C3
X509v3 Authority Key Identifier:
keyid:29:10:9D:A6:62:F9:D3:02:FF:F2:C5:C4:B4:AF:B8:F9:47:FE:C1:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRCdpmL50wL_8sXEtK-4-Uf-wcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/rPbpNe7HfKjT65TZ19L2DaMc48M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/KRCdpmL50wL_8sXEtK-4-Uf-wcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.230.0/23
IPv6:
2a02:38:1111::/48
2a02:38:cccc::/48
Signature Algorithm: sha256WithRSAEncryption
0c:a1:e0:59:de:d8:34:08:df:93:c4:71:30:05:19:a7:f4:c3:
a6:4c:6c:df:10:d2:f9:f1:66:00:c4:7e:6a:4f:75:3b:72:9b:
7c:cf:4a:91:c6:4a:c3:a1:78:4a:f3:19:ec:0f:97:cb:57:5b:
bc:11:cc:fb:68:10:f2:4c:6b:4c:ff:de:c4:0f:cb:8d:a9:8d:
f1:1b:29:bf:cb:ab:75:e7:06:e4:cb:ff:a6:48:9a:7b:c0:b3:
37:4c:b0:6a:25:ed:17:f5:1c:dc:39:14:91:d7:64:8a:b0:48:
d5:8d:f6:27:5b:7e:37:5f:02:35:c4:24:1f:74:bd:bd:40:0c:
0a:15:cd:25:90:97:55:ee:78:1f:b8:c4:a2:a9:7e:f3:e0:6e:
b9:ec:e5:53:65:13:67:42:fe:cc:f7:27:f4:0e:7c:cf:fc:c7:
7b:07:74:45:fa:95:20:93:a3:5e:d5:25:b4:8c:a8:f0:0a:ce:
5f:b0:fb:b1:22:b7:86:14:4c:31:f8:87:68:f5:cb:da:0f:33:
2d:04:1c:95:82:ee:cd:51:15:66:b8:10:1c:6a:7d:2d:96:83:
bc:ef:bb:97:d9:a5:13:57:bf:97:67:9a:98:15:08:7e:b5:29:
68:cc:ad:ca:0a:84:f8:04:ac:e4:b4:25:87:f4:9e:37:0b:55:
22:af:cd:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:21 2023 by rpki-client on console.sobornost.net