Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/wumBRrjByQYG761BKZPo3Bi11uA.roa
File: wumBRrjByQYG761BKZPo3Bi11uA.roa (raw, json)
Hash identifier: 2ezGFUN5TguG5O3LK+XMkAPNSf6R7dmGSL2m+OIZPFw=
Subject key identifier: C2:E9:81:46:B8:C1:C9:06:06:EF:AD:41:29:93:E8:DC:18:B5:D6:E0
Certificate issuer: /CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Certificate serial: A909E7
Authority key identifier: 63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/wumBRrjByQYG761BKZPo3Bi11uA.roa
Signing time: Sat 01 Jan 2022 00:55:57 +0000
ROA not before: Sat 01 Jan 2022 00:55:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 91.221.117.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11078119 (0xa909e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Validity
Not Before: Jan 1 00:55:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c2e98146b8c1c90606efad412993e8dc18b5d6e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c4:b5:18:47:e6:f0:f5:15:65:f9:ba:3c:b3:
5a:97:f9:6d:8c:02:90:dd:28:fb:0b:f2:ce:b0:34:
a2:2e:58:03:a7:59:15:37:5d:15:59:6c:1a:fb:30:
42:be:96:82:7d:2e:b3:ed:98:84:32:6d:18:4c:80:
7f:4d:61:ee:e9:c7:a7:36:4c:5d:a6:5e:56:90:77:
90:1d:72:f8:6e:20:ba:96:08:7a:cf:83:bd:02:60:
d6:b0:4c:a5:ec:4c:66:a2:e3:5f:bc:78:ca:2a:2e:
00:8a:f4:b4:22:7e:66:69:3e:2b:01:b0:65:50:17:
ca:d2:a0:a1:b8:eb:b1:87:4e:99:24:6a:65:6d:78:
83:55:3b:1f:18:3d:64:ff:73:66:43:8f:a7:91:96:
dc:10:0a:56:0a:17:83:55:ff:29:62:40:cf:00:75:
31:00:d9:f2:a3:74:d6:57:ca:37:fc:54:45:8c:47:
6f:79:d5:86:eb:b4:5f:48:48:cf:84:d7:61:d4:eb:
f0:1a:41:ab:42:08:2b:1d:4a:83:ee:b2:0f:e4:90:
7d:df:83:a7:1d:3b:e1:70:0c:5c:ed:2e:89:63:ac:
f1:a8:f4:73:8a:61:02:98:cb:9a:49:af:3f:d1:ae:
43:98:7f:a9:03:50:8d:9c:87:36:95:9f:d2:c9:86:
11:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:E9:81:46:B8:C1:C9:06:06:EF:AD:41:29:93:E8:DC:18:B5:D6:E0
X509v3 Authority Key Identifier:
keyid:63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/wumBRrjByQYG761BKZPo3Bi11uA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.221.117.0/24
Signature Algorithm: sha256WithRSAEncryption
22:0e:66:3a:9e:66:fa:e5:9f:dd:70:24:0f:85:b2:ee:d1:fe:
ef:14:cf:55:e0:b0:5d:75:2a:a0:1c:5a:db:7a:d0:44:d2:fc:
4d:f6:15:61:e2:f5:db:9c:50:d9:ef:97:e0:aa:b5:54:68:9f:
6a:3d:22:57:23:49:46:06:04:29:b7:4e:3d:ad:20:8d:aa:fd:
1c:da:4e:d3:6e:02:df:43:ee:c3:ae:f8:ab:02:ae:c4:73:ac:
82:b1:98:48:bc:d3:1f:a4:da:fb:77:c4:83:ad:08:06:c1:dc:
a4:cc:f6:5e:31:72:0d:e7:d0:50:b7:50:c5:76:f3:87:8d:ad:
3b:24:49:49:63:2c:5f:1e:1e:f1:96:57:f2:96:4e:64:fd:17:
47:21:6b:2a:a5:89:cc:2f:f7:0d:27:23:a1:48:64:f5:ef:44:
a1:eb:6d:94:24:38:a7:b2:7f:b8:ff:a3:3f:3b:7e:3e:22:fb:
1e:77:cf:09:db:a2:b7:9a:4d:60:88:9f:49:05:cb:66:0d:34:
db:c7:c1:c6:3f:d6:91:44:72:b0:fc:ed:43:76:b6:b3:70:80:
f5:67:89:01:1c:ee:6d:ea:91:74:ba:0c:da:bf:a4:b5:5a:71:
7e:80:3f:58:b0:15:d4:b2:6c:71:d8:a1:11:cc:f8:3d:20:6c:
72:93:66:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:38 2024 by rpki-client on console-ams.rpki-client.org