Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/OOqjXJAVjfFQLXnYekjfEApOoXc.roa
File: OOqjXJAVjfFQLXnYekjfEApOoXc.roa (raw, json)
Hash identifier: yNK0c3Q1KfFKAhhe3ZM39IfrJ1OPZE5xPT0SFmXG4C4=
Subject key identifier: 38:EA:A3:5C:90:15:8D:F1:50:2D:79:D8:7A:48:DF:10:0A:4E:A1:77
Certificate issuer: /CN=945b73df7e6fe1100f1d13a07c18d59af228428c
Certificate serial: 018286D3C5EAD882EEF1854570D2B3B4925B
Authority key identifier: 94:5B:73:DF:7E:6F:E1:10:0F:1D:13:A0:7C:18:D5:9A:F2:28:42:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lFtz335v4RAPHROgfBjVmvIoQow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/OOqjXJAVjfFQLXnYekjfEApOoXc.roa
Signing time: Wed 10 Aug 2022 08:16:41 +0000
ROA not before: Wed 10 Aug 2022 08:16:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61098
IP address blocks: 91.92.227.0/24 maxlen: 24
2a07:6cc1::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:86:d3:c5:ea:d8:82:ee:f1:85:45:70:d2:b3:b4:92:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=945b73df7e6fe1100f1d13a07c18d59af228428c
Validity
Not Before: Aug 10 08:16:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=38eaa35c90158df1502d79d87a48df100a4ea177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:bc:ee:2f:61:bc:cf:bf:8a:bf:1a:5a:ce:39:
56:7a:1b:f1:ab:24:33:3f:58:30:ad:6c:11:6f:ac:
fc:4d:3c:8c:f3:bf:13:59:ff:b3:3d:ee:a9:31:81:
ac:e2:8e:08:71:e6:66:3b:87:b6:f6:dc:37:c9:37:
f9:94:40:13:8b:12:91:13:29:14:7e:16:92:6c:7a:
3c:5d:40:dc:85:ee:b7:2e:68:ee:20:2a:f0:a8:45:
51:0a:23:93:66:69:ca:44:82:87:65:ce:21:6d:c8:
88:18:67:31:18:33:08:d7:31:e0:c7:4f:49:c8:64:
2f:48:a7:a2:5f:be:71:64:a1:84:ca:31:93:d2:0e:
48:33:4d:50:44:a2:b1:69:cf:18:f6:d3:13:af:6b:
20:fd:e6:99:53:7d:25:e0:f2:7f:bc:01:5f:7d:00:
3f:22:5f:c6:26:28:43:63:d1:43:db:5d:ac:6a:c6:
a8:41:9b:39:c2:6e:eb:b1:5f:9b:ff:c9:07:7f:d5:
44:b0:32:8b:65:c4:2d:e9:4d:7d:db:d7:f5:72:84:
49:9c:54:4d:8f:f1:81:ea:13:1e:1b:c7:e7:c4:f2:
9e:3f:31:67:0a:d8:49:e4:04:f2:50:6c:13:fe:35:
cd:e4:5d:36:08:9d:9b:b1:96:36:2f:af:38:80:bf:
70:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:EA:A3:5C:90:15:8D:F1:50:2D:79:D8:7A:48:DF:10:0A:4E:A1:77
X509v3 Authority Key Identifier:
keyid:94:5B:73:DF:7E:6F:E1:10:0F:1D:13:A0:7C:18:D5:9A:F2:28:42:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lFtz335v4RAPHROgfBjVmvIoQow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/OOqjXJAVjfFQLXnYekjfEApOoXc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.92.227.0/24
IPv6:
2a07:6cc1::/32
Signature Algorithm: sha256WithRSAEncryption
61:77:45:9e:3b:19:dc:22:8d:58:3f:f9:ac:4f:34:ee:e5:45:
b4:d7:4e:95:75:70:99:8d:dd:4b:07:eb:fa:06:81:1c:5e:64:
53:fc:e6:76:c5:c0:c1:d5:98:5d:d8:cb:d6:2d:52:c3:15:c2:
0a:b2:0e:28:52:e6:51:09:22:26:ff:20:65:8f:09:47:d3:15:
52:c6:bd:27:52:b7:e0:7d:93:57:7e:f4:fc:3b:8b:93:6e:b6:
7d:77:96:0b:01:60:0b:47:e0:af:1d:17:4f:ef:88:67:28:45:
f1:63:06:51:ea:49:71:0f:56:b6:ee:21:f8:87:cf:3a:ec:99:
c8:a2:b4:34:bb:da:61:c6:04:67:40:40:ef:21:c5:ff:e7:11:
a6:da:fb:b7:74:cd:61:88:75:2a:ae:e1:73:51:f7:ef:53:18:
89:f9:45:95:a4:40:0c:0d:f9:07:87:80:5a:65:ba:48:89:6a:
6d:d8:71:36:8a:ca:3e:b7:ce:ea:11:6f:be:04:a9:c1:b9:c3:
49:8d:4e:6c:46:ff:d1:e1:94:63:5f:71:bb:aa:c9:48:8d:1a:
2c:8f:d6:c9:f6:4a:19:1f:60:86:11:c3:27:29:21:6b:a7:9f:
87:f6:57:15:01:67:70:9a:a9:11:73:d1:84:81:87:0a:03:8e:
9b:f9:b8:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:02 2024 by rpki-client on console-fra.rpki-client.org