Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/c0147a-fabf-40a4-9ef5-2214e96e382f/1/spErW-wtYslSPK-RQJVH6bbPmGI.roa
File: spErW-wtYslSPK-RQJVH6bbPmGI.roa (raw, json)
Hash identifier: PkDsT9nLbkJ4hLzXUzxcr+jgrM7YjevzhzW5Eq05UxM=
Subject key identifier: B2:91:2B:5B:EC:2D:62:C9:52:3C:AF:91:40:95:47:E9:B6:CF:98:62
Certificate issuer: /CN=926cc6b46295cbbc1bdf986302d0271b8b7d7af0
Certificate serial: 1A718250
Authority key identifier: 92:6C:C6:B4:62:95:CB:BC:1B:DF:98:63:02:D0:27:1B:8B:7D:7A:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmzGtGKVy7wb35hjAtAnG4t9evA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/c0147a-fabf-40a4-9ef5-2214e96e382f/1/spErW-wtYslSPK-RQJVH6bbPmGI.roa
Signing time: Sat 01 Jan 2022 05:59:50 +0000
ROA not before: Sat 01 Jan 2022 05:59:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2542
IP address blocks: 91.140.64.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 443646544 (0x1a718250)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=926cc6b46295cbbc1bdf986302d0271b8b7d7af0
Validity
Not Before: Jan 1 05:59:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b2912b5bec2d62c9523caf91409547e9b6cf9862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d5:21:de:4e:84:aa:22:7e:f9:bc:e7:d1:1d:
f3:b7:b2:19:a8:ec:ba:0d:8c:27:c8:c8:fd:62:8d:
13:21:43:fe:cc:ea:0a:7f:55:be:6f:7e:ec:5a:b3:
5e:fc:4b:0c:a5:0f:94:77:11:aa:c3:fd:c6:ed:b5:
75:f7:5c:f6:3f:04:d6:96:78:4d:48:fd:52:5f:37:
5b:bc:ca:e9:d4:07:59:70:9b:51:ea:80:60:be:ea:
87:22:61:27:69:81:e7:41:98:e9:5d:62:d1:00:54:
26:b0:0b:d8:f9:9a:41:f7:c2:94:d5:14:bf:18:f6:
d7:0c:21:94:73:14:d1:2e:d7:5f:77:c8:9d:63:46:
a8:d4:94:51:45:28:36:3d:f8:46:0c:5e:06:8c:80:
20:ef:5b:ab:65:8d:71:83:94:30:23:5e:4a:eb:28:
3e:e2:85:c4:40:6d:46:d4:57:54:b3:1a:06:74:a6:
9b:eb:37:30:70:f1:1e:d4:18:57:8f:55:1a:70:39:
b6:2f:94:e3:9d:fd:a4:bd:a3:ab:db:6d:1d:04:7e:
d6:a6:82:4a:64:98:8c:7f:3f:4e:1f:b7:52:4f:ee:
98:f0:0f:cb:b5:84:a7:79:cd:d5:d9:20:52:25:26:
ac:90:89:c8:ea:e2:e7:7e:fb:bc:53:30:c6:b2:d4:
c9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:91:2B:5B:EC:2D:62:C9:52:3C:AF:91:40:95:47:E9:B6:CF:98:62
X509v3 Authority Key Identifier:
keyid:92:6C:C6:B4:62:95:CB:BC:1B:DF:98:63:02:D0:27:1B:8B:7D:7A:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmzGtGKVy7wb35hjAtAnG4t9evA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/c0147a-fabf-40a4-9ef5-2214e96e382f/1/spErW-wtYslSPK-RQJVH6bbPmGI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/c0147a-fabf-40a4-9ef5-2214e96e382f/1/kmzGtGKVy7wb35hjAtAnG4t9evA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.140.64.0/18
Signature Algorithm: sha256WithRSAEncryption
6c:9f:fd:dd:63:33:d9:31:3c:03:96:c9:57:33:88:eb:fe:d0:
1f:9f:01:fd:87:2d:3e:de:47:b3:2b:1e:79:a4:71:a6:93:b8:
73:c0:c6:88:46:47:1d:b2:50:d4:87:ca:e9:4a:89:7d:81:88:
80:f7:1a:ca:9f:3d:a2:bc:69:a1:50:19:e5:f3:03:ab:c7:94:
37:57:5a:ee:0e:ce:f5:32:35:90:c4:0c:ca:15:f6:eb:c9:68:
d6:9f:e6:25:b7:b8:a5:ce:fe:de:3c:bb:4f:1e:29:e6:65:24:
69:80:34:56:d4:4f:f6:db:5f:4f:6c:b2:05:63:90:55:0e:dc:
45:e0:18:a5:68:18:ae:2e:d0:4a:41:ce:8f:31:de:48:42:7f:
dc:da:2a:b3:96:2b:91:ff:d6:12:05:b4:aa:d5:ff:fe:7b:d7:
bc:33:0d:30:71:42:65:df:e0:28:c3:e6:48:98:4c:a5:72:85:
e2:90:0a:18:f7:a6:7b:62:c9:2c:59:8c:31:95:e7:70:af:05:
b2:5c:73:ee:e5:c5:ef:50:b2:db:49:d4:a4:a3:6d:65:cf:90:
48:f1:d5:79:0b:78:7b:5d:82:70:40:dc:1e:c6:7b:de:11:be:
68:37:79:8a:26:15:5b:91:3a:1b:06:f2:26:2d:9d:0a:de:87:
b2:05:f4:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:56 2024 by rpki-client on console-fra.rpki-client.org