Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/wrLT4qF37yUNTgXK908dtHBWa8g.roa
File: wrLT4qF37yUNTgXK908dtHBWa8g.roa (raw, json)
Hash identifier: jJIjGAHJodxOvvDS8OfaJ6gGDSAlZNokxQo4SxJcUQA=
Subject key identifier: C2:B2:D3:E2:A1:77:EF:25:0D:4E:05:CA:F7:4F:1D:B4:70:56:6B:C8
Certificate issuer: /CN=c605871889b9dcafe7ec3136aed1ddfee2dfbc7d
Certificate serial: 15649970
Authority key identifier: C6:05:87:18:89:B9:DC:AF:E7:EC:31:36:AE:D1:DD:FE:E2:DF:BC:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xgWHGIm53K_n7DE2rtHd_uLfvH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/wrLT4qF37yUNTgXK908dtHBWa8g.roa
Signing time: Sat 01 Jan 2022 12:03:25 +0000
ROA not before: Sat 01 Jan 2022 12:03:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31019
IP address blocks: 91.228.151.0/25 maxlen: 25
91.228.151.0/24 maxlen: 24
2a05:9280::/29 maxlen: 29
2001:67c:22dc::/48 maxlen: 48
2a05:9280::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 358914416 (0x15649970)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c605871889b9dcafe7ec3136aed1ddfee2dfbc7d
Validity
Not Before: Jan 1 12:03:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c2b2d3e2a177ef250d4e05caf74f1db470566bc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:31:48:7f:7b:39:db:fe:68:d3:ec:82:67:21:
03:aa:12:f4:8e:e2:98:d9:cc:4a:d5:d2:34:bd:30:
40:f2:41:ab:da:09:37:fe:a6:d8:ce:c0:53:26:03:
ea:b9:28:de:bb:a2:08:77:44:04:e2:3a:8f:37:3e:
24:f0:03:11:fd:8a:5e:fe:d2:08:38:18:ac:f5:ee:
4d:92:fa:71:e4:e0:06:af:12:11:db:f3:55:be:1a:
67:be:fd:db:06:e6:19:4b:e5:db:9c:92:4a:49:46:
05:bc:fe:b6:0e:e0:96:75:b8:ac:a3:a5:25:bd:67:
51:64:1c:29:bd:e1:ec:97:c0:75:51:92:1f:e4:62:
02:a1:46:a5:1f:1e:ce:25:3d:ed:01:8b:79:08:c8:
ba:a9:76:36:58:47:20:ba:de:f2:ae:97:8a:db:b8:
6f:52:0d:c3:0a:d7:f5:56:7b:10:a6:8f:68:cb:e1:
a8:3d:a3:e8:24:03:d4:22:76:4d:a1:df:6c:7d:8a:
a9:8f:b1:4f:8d:b0:0a:d7:6d:23:ff:74:6d:cc:94:
44:ac:2b:56:1a:27:33:2d:aa:25:0a:62:e0:0f:c0:
47:db:c7:af:d7:13:23:0d:f3:1d:b3:df:7f:ad:0f:
f6:54:3a:5b:9e:8f:97:98:c2:79:be:8c:8a:03:7e:
5b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:B2:D3:E2:A1:77:EF:25:0D:4E:05:CA:F7:4F:1D:B4:70:56:6B:C8
X509v3 Authority Key Identifier:
keyid:C6:05:87:18:89:B9:DC:AF:E7:EC:31:36:AE:D1:DD:FE:E2:DF:BC:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xgWHGIm53K_n7DE2rtHd_uLfvH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/wrLT4qF37yUNTgXK908dtHBWa8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.151.0/24
IPv6:
2001:67c:22dc::/48
2a05:9280::/29
Signature Algorithm: sha256WithRSAEncryption
a0:2c:81:b5:bd:1f:9c:cf:40:f1:ec:37:04:e6:a1:a9:98:bc:
f3:3e:83:6f:84:30:4b:70:61:32:1a:d2:79:71:53:40:21:6c:
99:43:ef:42:6e:7a:6f:4d:5f:56:72:a5:c1:57:35:ae:3f:ca:
3d:a2:a4:26:63:18:3d:c6:ca:30:d9:3f:1f:df:a2:ba:2a:50:
1e:c4:5a:91:fb:40:95:48:6f:62:28:bc:cd:cd:12:6e:aa:54:
1b:6c:eb:ea:41:0e:47:54:b9:c1:00:a8:08:f0:4f:40:f7:49:
83:55:d5:cf:00:64:e0:24:32:23:8c:fb:bb:1c:92:48:2f:30:
32:17:20:e8:bb:05:2f:2b:52:2b:11:69:74:36:36:4b:2b:b5:
41:6f:35:d5:d7:62:1b:e5:05:42:f2:14:ba:d1:94:5d:00:83:
7a:36:cd:97:8e:78:7f:6d:67:14:66:38:70:59:ce:18:70:1b:
7f:b2:eb:5e:45:fe:1c:0d:d7:ef:d1:c1:38:17:f9:a4:e7:f2:
8c:66:35:1f:0c:06:9e:d2:19:e6:a7:50:97:7e:68:c0:fa:99:
cd:2a:e5:e4:33:04:7c:e7:10:c4:0c:7a:2c:9e:ee:29:7d:1e:
ac:d6:e6:9c:1d:87:d9:c1:68:a9:59:14:38:10:fd:95:bb:34:
a2:8a:fc:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:29 2024 by rpki-client on console-ams.rpki-client.org