Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/JwNXpqAtoXDHn6uOosnWlCUGSyU.roa
File: JwNXpqAtoXDHn6uOosnWlCUGSyU.roa (raw, json)
Hash identifier: nyHva6Zq+4EZvyaJdnxJBgJwcg/qXo9elZmCAno7b6s=
Subject key identifier: 27:03:57:A6:A0:2D:A1:70:C7:9F:AB:8E:A2:C9:D6:94:25:06:4B:25
Certificate issuer: /CN=52bf21eeb36414b3280e6c33b0b57296b8f6b675
Certificate serial: 096BD44B
Authority key identifier: 52:BF:21:EE:B3:64:14:B3:28:0E:6C:33:B0:B5:72:96:B8:F6:B6:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ur8h7rNkFLMoDmwzsLVylrj2tnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/JwNXpqAtoXDHn6uOosnWlCUGSyU.roa
Signing time: Fri 08 Apr 2022 18:12:26 +0000
ROA not before: Fri 08 Apr 2022 18:12:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42563
IP address blocks: 91.197.56.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158061643 (0x96bd44b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52bf21eeb36414b3280e6c33b0b57296b8f6b675
Validity
Not Before: Apr 8 18:12:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=270357a6a02da170c79fab8ea2c9d69425064b25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9b:e6:16:d2:6d:d9:3c:8d:9b:0e:81:7a:7b:
99:5f:a1:1c:95:82:e0:30:17:c8:24:11:74:81:b3:
57:04:24:c4:a3:1a:bb:57:78:e1:e3:3e:37:90:3c:
25:5b:ce:d7:1a:e7:90:ed:36:74:a1:a1:2f:d7:27:
1d:ac:06:2c:56:94:fc:7a:30:c9:4e:13:87:70:ef:
cf:ad:61:24:14:dc:22:ca:1f:84:b5:c1:7d:9e:f8:
42:37:43:4d:4e:e9:9f:93:ac:dd:d9:99:47:60:f7:
54:8e:53:e8:75:8f:9a:00:ef:11:d1:c6:71:83:43:
20:9d:fe:e7:e8:80:d3:ee:ab:7a:8d:21:20:7f:54:
a2:8d:46:64:3c:1b:50:a7:db:04:0c:d2:9c:60:c9:
e6:83:db:fd:32:91:c9:a8:a8:74:80:7a:fe:43:23:
9b:b6:c3:e1:31:12:2a:68:8e:12:33:bc:3c:56:8f:
e0:b7:dc:10:5b:66:26:67:32:96:4e:94:de:7f:1c:
c8:d3:26:25:20:23:3d:66:3f:af:c5:b0:e8:1f:2d:
3e:12:ed:71:a9:ae:8a:35:5c:7d:30:19:f5:fb:21:
85:8d:9e:99:54:60:59:2b:15:d6:00:0f:38:b2:1f:
b1:6d:d6:3e:53:2f:e4:23:aa:a6:d8:d4:09:fd:33:
d5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:03:57:A6:A0:2D:A1:70:C7:9F:AB:8E:A2:C9:D6:94:25:06:4B:25
X509v3 Authority Key Identifier:
keyid:52:BF:21:EE:B3:64:14:B3:28:0E:6C:33:B0:B5:72:96:B8:F6:B6:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ur8h7rNkFLMoDmwzsLVylrj2tnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/JwNXpqAtoXDHn6uOosnWlCUGSyU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/Ur8h7rNkFLMoDmwzsLVylrj2tnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.197.56.0/24
Signature Algorithm: sha256WithRSAEncryption
39:77:f5:fd:d8:84:ce:a4:62:3c:62:5e:03:d5:28:2a:fb:76:
49:39:2b:a7:ad:4c:e8:75:37:45:29:de:16:98:fd:f5:00:16:
fe:55:ee:06:8d:25:63:90:f5:da:c2:b4:64:87:6b:64:e0:a1:
37:1f:e1:f1:fc:de:48:24:18:3c:96:ba:1d:3e:4f:40:d3:82:
6e:99:eb:6c:40:68:9c:ac:f0:d7:43:90:25:b6:a0:b0:25:7b:
d4:db:5a:36:96:be:99:f2:97:b2:a7:47:32:39:13:ca:f4:fc:
86:ba:fb:4e:6c:c2:ee:c8:31:64:01:fa:aa:e3:2a:3c:ba:b4:
c8:4a:40:16:fe:ad:9c:43:db:10:c0:4b:08:fc:9f:2b:e7:57:
5f:48:a1:2b:6b:78:a5:42:3d:3f:e3:8e:e5:a2:73:a9:dc:4d:
6b:29:d6:5c:d5:02:ca:bb:98:86:28:2a:81:fb:27:c4:44:d4:
52:e7:d1:8e:83:49:d1:90:aa:0e:7b:3c:6a:57:15:b1:e9:dc:
07:d8:2e:50:1f:08:50:0d:36:e5:16:06:43:a0:51:6c:93:b8:
14:87:49:ac:97:02:35:bb:7e:c3:fc:86:d7:b7:00:28:73:f0:
43:70:a1:5e:32:d7:d3:f9:5f:aa:63:26:ff:72:a9:78:be:a1:
cf:31:1c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:11 2024 by rpki-client on console-ams.rpki-client.org