Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/18ec59-0b00-4da6-88d8-d4fd3e389536/1/Umx211B_jwPPSxrIJ6smSUhNnGw.roa
File: Umx211B_jwPPSxrIJ6smSUhNnGw.roa (raw, json)
Hash identifier: AIQYdQJiM5aiJbd9duYa6vXjOzJVKqa35VOBF3nsxHs=
Subject key identifier: 52:6C:76:D7:50:7F:8F:03:CF:4B:1A:C8:27:AB:26:49:48:4D:9C:6C
Certificate issuer: /CN=454fd1c04bf7ec1dabbd2d21fda0085e251ec735
Certificate serial: 02E8B30E
Authority key identifier: 45:4F:D1:C0:4B:F7:EC:1D:AB:BD:2D:21:FD:A0:08:5E:25:1E:C7:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RU_RwEv37B2rvS0h_aAIXiUexzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/18ec59-0b00-4da6-88d8-d4fd3e389536/1/Umx211B_jwPPSxrIJ6smSUhNnGw.roa
Signing time: Thu 10 Mar 2022 10:26:30 +0000
ROA not before: Thu 10 Mar 2022 10:26:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44352
IP address blocks: 91.241.176.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48804622 (0x2e8b30e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=454fd1c04bf7ec1dabbd2d21fda0085e251ec735
Validity
Not Before: Mar 10 10:26:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=526c76d7507f8f03cf4b1ac827ab2649484d9c6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1d:78:ed:48:a0:23:8b:5d:f2:5c:2f:3c:e9:
ba:37:5f:f2:fe:19:65:94:80:39:01:27:9e:0b:68:
f3:f5:b9:a1:32:de:31:24:9b:53:20:6a:c8:97:59:
94:e6:92:44:f7:07:08:2b:ee:1d:7e:5d:52:09:6e:
f0:16:71:af:89:39:e4:b7:86:81:6a:18:3e:67:93:
db:eb:9e:75:7f:48:a3:58:4b:96:83:4b:4e:30:74:
26:c6:0d:28:c5:ea:b4:90:ea:8d:f4:e9:97:11:d0:
94:d5:36:98:10:ac:b7:0c:2a:c5:00:41:6c:18:96:
f4:38:3a:4e:84:ff:c3:e0:4d:58:f2:10:c5:c6:a6:
55:b4:75:26:a0:76:ed:ed:c2:b1:96:22:dc:de:66:
88:22:9d:b6:4c:c9:c3:8f:52:f8:a4:98:32:9e:f1:
89:90:af:32:2f:a9:63:f4:9e:db:0b:1f:17:0d:50:
a2:3b:49:35:48:36:2f:0a:f5:0c:96:b1:e6:4b:b5:
dd:7b:02:cf:8e:b2:d9:f5:8d:c2:63:90:b7:02:83:
e1:02:09:ec:ba:48:40:07:00:e3:87:f3:19:d3:36:
60:44:ce:67:bc:df:14:9c:bc:cc:89:69:1b:c6:60:
17:2c:d6:3f:9b:60:59:89:de:01:e9:61:c3:d8:7d:
ce:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:6C:76:D7:50:7F:8F:03:CF:4B:1A:C8:27:AB:26:49:48:4D:9C:6C
X509v3 Authority Key Identifier:
keyid:45:4F:D1:C0:4B:F7:EC:1D:AB:BD:2D:21:FD:A0:08:5E:25:1E:C7:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RU_RwEv37B2rvS0h_aAIXiUexzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/18ec59-0b00-4da6-88d8-d4fd3e389536/1/Umx211B_jwPPSxrIJ6smSUhNnGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/18ec59-0b00-4da6-88d8-d4fd3e389536/1/RU_RwEv37B2rvS0h_aAIXiUexzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.241.176.0/22
Signature Algorithm: sha256WithRSAEncryption
71:48:33:e7:57:0f:7e:fc:a6:29:4c:42:43:9b:98:7a:91:47:
8b:fc:77:05:e6:d5:d2:f3:dd:01:db:a3:03:bd:a8:ab:20:98:
c0:32:62:61:66:f8:fb:14:9e:e5:f6:60:b3:9e:d5:8a:3e:cc:
21:89:37:bc:73:f0:5a:09:24:c7:87:0e:68:9d:9b:da:c0:35:
69:83:f9:a3:47:0f:ff:03:1a:7e:cf:a0:18:7f:b7:02:05:a0:
ed:4b:e2:d8:22:27:05:ca:f5:a2:35:bf:c9:41:64:8a:7f:06:
2f:01:52:08:9a:e9:08:e6:dd:e2:ab:f7:f2:ac:a9:40:b8:f3:
ef:07:9b:eb:42:00:5d:fc:91:97:fe:7e:63:46:40:90:cc:88:
30:18:17:8e:da:77:db:95:fe:3e:62:ff:ba:78:f9:12:57:d9:
0a:1c:30:16:fe:60:a5:a4:25:b8:89:d0:ea:e9:a9:e9:f4:cd:
33:31:ce:b0:34:dd:0e:b6:2c:12:a1:d1:bc:ae:01:27:ff:d8:
91:0d:cb:3d:ac:14:c1:49:44:79:4d:4d:eb:c8:04:45:61:24:
44:45:4f:b0:96:54:e1:0d:6c:19:aa:10:37:2e:a1:ac:f3:9f:
09:b8:c0:b0:1e:c0:46:37:68:05:28:09:50:ef:96:69:81:f1:
55:76:2c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:59 2024 by rpki-client on console-fra.rpki-client.org