Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/WsHgPncdPbZI6xAQ10RkqkSpqzg.roa
File: WsHgPncdPbZI6xAQ10RkqkSpqzg.roa (raw, json)
Hash identifier: e73KZHjD+OxAKGzG6QVuJDRb6qJR5LGgXM4/o48l4wY=
Subject key identifier: 5A:C1:E0:3E:77:1D:3D:B6:48:EB:10:10:D7:44:64:AA:44:A9:AB:38
Certificate issuer: /CN=dd4dcb56f79f4a1ded8d95482333961d0264faa5
Certificate serial: 02151E
Authority key identifier: DD:4D:CB:56:F7:9F:4A:1D:ED:8D:95:48:23:33:96:1D:02:64:FA:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/WsHgPncdPbZI6xAQ10RkqkSpqzg.roa
Signing time: Thu 30 Jun 2022 13:55:02 +0000
ROA not before: Thu 30 Jun 2022 13:55:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200303
IP address blocks: 91.246.47.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136478 (0x2151e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd4dcb56f79f4a1ded8d95482333961d0264faa5
Validity
Not Before: Jun 30 13:55:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5ac1e03e771d3db648eb1010d74464aa44a9ab38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:5e:2d:cf:9b:47:0e:38:40:5f:ff:1d:98:d6:
99:06:ea:6f:31:7f:33:47:c1:80:5a:ec:c1:73:a0:
3b:ad:71:fd:b8:c6:b9:f5:0e:7e:34:26:1f:6e:67:
fe:82:2c:f9:ee:4b:60:85:81:ae:3e:37:6f:93:90:
8f:cf:e3:6d:cc:19:d8:40:da:20:69:52:12:e7:ac:
8b:a2:98:d4:03:eb:b8:a3:fa:0e:0b:e1:e0:4a:e0:
04:a6:d2:cb:b2:70:8d:b0:6e:c8:35:ae:af:9a:bd:
d9:2b:f9:3f:42:08:81:30:2c:44:1b:31:4c:80:a3:
b7:ed:19:71:69:2d:d1:61:ff:4f:b7:c0:c3:a3:12:
66:29:75:13:49:6f:6c:cc:a3:dc:08:b5:2e:54:7c:
7d:56:de:da:b8:c7:04:07:6e:4e:f0:35:af:38:a2:
92:09:23:88:5b:e2:d7:27:39:74:2c:0f:f0:53:b5:
37:77:87:c5:0a:99:90:e1:d8:99:76:0c:19:2e:4a:
3f:b3:3b:f1:9a:1e:7f:fa:44:67:80:38:7b:f2:7a:
dd:3e:9f:5a:ca:e6:23:40:7d:02:23:a5:94:c2:25:
ce:02:fd:fc:cb:4c:b2:79:d2:60:ac:c1:89:24:d7:
cb:5f:6f:91:7d:9e:1b:8f:52:52:7c:3a:1f:08:7f:
e5:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:C1:E0:3E:77:1D:3D:B6:48:EB:10:10:D7:44:64:AA:44:A9:AB:38
X509v3 Authority Key Identifier:
keyid:DD:4D:CB:56:F7:9F:4A:1D:ED:8D:95:48:23:33:96:1D:02:64:FA:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/WsHgPncdPbZI6xAQ10RkqkSpqzg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.246.47.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:27:db:64:07:06:06:7b:90:54:4a:7e:72:d2:78:7c:8f:00:
b1:fa:c2:ae:6c:c8:c9:2c:2d:3f:8b:f9:b0:d3:91:c6:c2:f2:
ea:77:83:84:12:5e:c3:93:e1:87:37:dc:21:37:02:81:73:31:
6d:2f:a1:60:66:7a:03:e8:a8:0e:ca:c8:9b:48:67:ac:0c:ec:
41:bc:b2:59:11:19:8c:99:8d:27:23:d3:50:8a:ac:d6:ab:c6:
10:48:fe:25:fc:0d:6c:1c:34:21:0e:a7:5b:4e:d3:2e:33:bf:
6f:50:10:ba:b5:77:db:3f:77:0f:ca:76:c0:4a:15:25:b0:ba:
24:bb:5d:ac:6e:72:4c:6b:a1:ea:94:40:8e:76:28:ad:8a:fa:
e5:42:bf:49:f6:83:c3:b4:c8:ea:3e:d7:15:d0:79:d9:48:2f:
21:d8:6b:53:62:f2:50:2c:33:8a:87:2e:dc:60:08:bf:b1:61:
8e:c0:13:9b:ee:f8:77:2d:f1:04:93:05:d4:3a:84:a2:e7:28:
c6:bb:e5:b6:7e:f2:a9:8d:cf:0b:9e:03:c0:bc:26:c9:60:af:
bf:03:db:28:9f:89:3e:c8:42:56:85:67:ee:de:ff:fb:61:56:
9a:38:46:b7:61:88:9a:81:16:d1:36:bd:cc:c7:13:3e:d4:54:
97:e7:75:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:48 2024 by rpki-client on console-ams.rpki-client.org