Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/0CINGn3fSSfrYkM-RwuixdhW59U.roa
File: 0CINGn3fSSfrYkM-RwuixdhW59U.roa (raw, json)
Hash identifier: pa7hCC1I4rPce9GcgmicZnR6+P2tbvkjZyCliFaXI08=
Subject key identifier: D0:22:0D:1A:7D:DF:49:27:EB:62:43:3E:47:0B:A2:C5:D8:56:E7:D5
Certificate issuer: /CN=7879770bffc14d9cdfb574ec866caaf13572f45c
Certificate serial: 037F0B9A
Authority key identifier: 78:79:77:0B:FF:C1:4D:9C:DF:B5:74:EC:86:6C:AA:F1:35:72:F4:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eHl3C__BTZzftXTshmyq8TVy9Fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/0CINGn3fSSfrYkM-RwuixdhW59U.roa
Signing time: Sat 01 Jan 2022 07:56:49 +0000
ROA not before: Sat 01 Jan 2022 07:56:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198227
IP address blocks: 91.232.158.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58657690 (0x37f0b9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7879770bffc14d9cdfb574ec866caaf13572f45c
Validity
Not Before: Jan 1 07:56:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d0220d1a7ddf4927eb62433e470ba2c5d856e7d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:91:8b:f8:40:09:d5:37:dd:42:bc:f6:dd:8d:
46:34:66:50:46:82:d9:05:d2:13:56:2c:7f:fc:f6:
67:22:6b:77:30:cb:46:a0:1d:c3:be:38:ff:fa:77:
5d:db:22:40:7c:a6:85:13:92:cf:69:9b:db:9f:4a:
5b:46:06:f0:10:46:41:16:0c:12:1d:83:a8:b2:a4:
7e:43:94:65:f1:f8:b0:70:62:70:55:31:49:40:e3:
ea:f3:88:7e:5a:78:c8:03:1f:fc:7d:2a:d6:b6:17:
e8:cc:67:63:2f:04:c4:2b:d6:d5:c4:c8:10:8c:34:
98:30:bd:48:2c:49:42:a5:fb:ad:d9:7d:bc:3b:27:
4a:a3:78:29:9f:6d:f5:a3:a3:ce:8d:9b:bf:b4:1e:
3f:5f:63:7b:23:5d:97:2c:e8:d8:8d:1f:2d:0b:f9:
0e:24:7f:02:f4:9f:96:61:de:cb:48:1c:2c:fa:69:
32:30:fd:c5:44:4a:31:88:79:45:4b:54:0f:85:1f:
29:b0:f3:e8:ae:26:60:d8:18:2a:d7:9b:5f:b6:49:
eb:80:3a:28:6c:83:4b:6c:4f:15:ee:71:36:5f:5c:
40:a9:9e:9a:c0:f5:a6:93:15:f7:32:b5:6e:a8:cd:
30:f8:8f:5c:03:77:22:c8:8d:34:6e:ec:33:c4:c2:
dd:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:22:0D:1A:7D:DF:49:27:EB:62:43:3E:47:0B:A2:C5:D8:56:E7:D5
X509v3 Authority Key Identifier:
keyid:78:79:77:0B:FF:C1:4D:9C:DF:B5:74:EC:86:6C:AA:F1:35:72:F4:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHl3C__BTZzftXTshmyq8TVy9Fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/0CINGn3fSSfrYkM-RwuixdhW59U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.232.158.0/23
Signature Algorithm: sha256WithRSAEncryption
9f:60:2b:86:d6:34:e2:40:4e:ec:a9:0d:53:45:04:72:fd:b4:
c0:2f:32:f0:27:cb:f5:1f:ac:da:d3:be:8b:8e:01:70:b9:04:
21:6f:64:30:7e:88:15:21:f3:3a:47:a4:b3:62:6b:ce:b9:de:
dd:38:5d:be:8c:87:90:37:2a:6e:13:cb:39:c1:54:32:8c:dc:
58:82:a6:a3:f8:58:30:98:97:f5:fa:2a:46:06:ce:c1:7d:14:
b4:85:c9:21:b4:30:f4:ea:19:fe:4d:e0:12:34:f5:98:21:fb:
81:fb:71:de:9c:33:ee:1c:cd:50:68:15:c3:dc:2d:c7:d9:55:
1c:08:01:6a:af:92:1e:26:ee:18:19:01:33:e8:90:ce:aa:a9:
52:be:01:ea:b6:60:cc:2f:78:b2:78:9b:28:73:ac:86:63:aa:
0b:45:ae:0a:6f:eb:34:50:d6:c5:7b:48:f7:83:bc:67:e4:e9:
0e:16:01:e3:86:66:80:a7:b3:bc:ac:f8:70:4d:b3:42:58:7a:
aa:4b:fd:a3:40:3e:44:76:47:72:ca:93:ea:f6:ee:92:cf:67:
b5:8c:76:9b:d9:08:da:99:b6:ed:a0:10:2d:de:9d:d3:f7:ea:
35:c3:73:51:af:04:1c:5e:bb:fe:46:1f:08:5b:19:83:e6:bd:
42:97:99:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:19 2024 by rpki-client on console-fra.rpki-client.org