Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/wV9gEmhjNUQ594M4sZv-yyIwxwI.roa
File: wV9gEmhjNUQ594M4sZv-yyIwxwI.roa (raw, json)
Hash identifier: TRV8Qucu8diGAVNI8Acbp2WTi4RKCzWIkFSG7PLyPVU=
Subject key identifier: C1:5F:60:12:68:63:35:44:39:F7:83:38:B1:9B:FE:CB:22:30:C7:02
Certificate issuer: /CN=33710cf81d21777a98d3d999dc1e6eae055f7c3c
Certificate serial: 0A053426
Authority key identifier: 33:71:0C:F8:1D:21:77:7A:98:D3:D9:99:DC:1E:6E:AE:05:5F:7C:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M3EM-B0hd3qY09mZ3B5urgVffDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/wV9gEmhjNUQ594M4sZv-yyIwxwI.roa
Signing time: Sat 01 Jan 2022 09:04:29 +0000
ROA not before: Sat 01 Jan 2022 09:04:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47698
IP address blocks: 91.206.174.0/23 maxlen: 23
91.208.103.0/24 maxlen: 24
2001:67c:394::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 168113190 (0xa053426)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33710cf81d21777a98d3d999dc1e6eae055f7c3c
Validity
Not Before: Jan 1 09:04:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c15f60126863354439f78338b19bfecb2230c702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9d:ab:5e:62:b8:b6:ba:ff:45:af:bc:0b:e6:
5b:e5:38:a0:82:e4:30:dd:49:6c:40:0e:7f:83:dc:
93:bf:e5:35:ab:f2:b9:8f:06:92:e6:33:20:0c:46:
de:49:cc:f6:e1:60:0d:2b:78:48:37:23:83:47:25:
4e:a2:82:8f:97:a2:c3:35:59:f4:3f:55:ec:0a:44:
e6:a0:7f:da:0a:59:96:78:08:33:57:74:2e:e8:fd:
c7:a3:28:0b:00:98:57:37:ce:8e:cf:e0:a4:5f:1c:
0a:11:e5:99:6a:c2:2f:13:48:78:e6:12:a3:f5:17:
07:ad:46:d9:d3:f6:03:36:31:52:8c:7e:8a:d1:e5:
fe:8b:f6:7c:14:54:bc:74:9a:46:66:23:91:e3:2b:
c7:6b:94:5f:76:fa:26:e7:a1:00:3e:51:b4:9e:56:
51:45:fa:18:f6:10:3e:0b:44:f8:5f:fd:00:cc:0e:
c1:7d:2c:15:bc:9a:25:14:f6:03:04:97:2c:7d:34:
9c:e4:d3:13:9f:77:f9:80:10:02:fd:cb:71:e0:1c:
0c:9a:f5:39:8b:b0:2f:16:98:89:5a:86:47:b7:c6:
e1:e7:66:5b:53:8e:7c:1c:f4:c5:dc:a3:e5:15:88:
17:77:fd:60:d2:b8:5b:9b:0b:09:0f:79:12:53:37:
c1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:5F:60:12:68:63:35:44:39:F7:83:38:B1:9B:FE:CB:22:30:C7:02
X509v3 Authority Key Identifier:
keyid:33:71:0C:F8:1D:21:77:7A:98:D3:D9:99:DC:1E:6E:AE:05:5F:7C:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M3EM-B0hd3qY09mZ3B5urgVffDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/wV9gEmhjNUQ594M4sZv-yyIwxwI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.174.0/23
91.208.103.0/24
IPv6:
2001:67c:394::/48
Signature Algorithm: sha256WithRSAEncryption
6c:72:6e:d9:00:a4:c3:ef:52:c5:29:3e:cc:cd:3e:d4:e3:4c:
a8:54:0e:de:44:f2:f4:b7:b7:c3:7d:2a:1f:70:ac:ed:0b:0b:
03:0e:0d:a8:92:49:73:53:ac:4a:e1:2a:9f:13:36:67:79:63:
47:f6:97:7f:16:e9:7b:13:e6:0d:16:b6:5f:47:ec:61:90:d7:
42:de:0f:f2:28:25:6e:d9:29:0c:ea:53:79:e3:88:23:2b:22:
42:be:cd:66:4d:08:2d:0f:97:f7:f0:5c:d2:f9:4d:c5:aa:46:
f9:24:c0:b3:c4:e5:76:e3:c1:15:47:fd:14:82:4d:0b:1f:2c:
e4:34:fe:c0:e5:0b:fd:0b:f8:e9:63:a1:68:84:d8:20:12:f2:
6a:25:b6:ea:61:c1:85:82:89:41:0d:d0:a2:f1:28:93:b1:14:
75:a1:1b:14:a3:4f:6e:66:b6:7d:8d:22:41:91:bb:ae:d1:65:
71:fd:67:c2:3b:88:a8:48:88:fa:9c:de:37:ec:10:ae:26:1d:
fe:0c:3e:b0:f8:36:78:a0:f7:8b:b8:b9:59:c7:02:ad:2a:42:
33:36:e3:81:b3:94:ab:d0:c3:e0:40:36:b5:27:35:e5:5b:5a:
99:37:e3:ab:8b:a7:a5:58:44:aa:93:52:34:b2:19:0a:b7:ee:
7c:1f:8c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:18 2024 by rpki-client on console-fra.rpki-client.org