Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/oiHZPi2lnBVNwMO_uVZcs04EaUQ.roa
File: oiHZPi2lnBVNwMO_uVZcs04EaUQ.roa (raw, json)
Hash identifier: 3z8aDkSXn3/MUaLb8jfSrDRXz2/h+jCvzvBL5e4ywOA=
Subject key identifier: A2:21:D9:3E:2D:A5:9C:15:4D:C0:C3:BF:B9:56:5C:B3:4E:04:69:44
Certificate issuer: /CN=c2510a8a525dc9b1ec0b1560d090a64268d42ec4
Certificate serial: 059CEFE9
Authority key identifier: C2:51:0A:8A:52:5D:C9:B1:EC:0B:15:60:D0:90:A6:42:68:D4:2E:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wlEKilJdybHsCxVg0JCmQmjULsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/oiHZPi2lnBVNwMO_uVZcs04EaUQ.roa
Signing time: Sat 01 Jan 2022 01:57:37 +0000
ROA not before: Sat 01 Jan 2022 01:57:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20892
IP address blocks: 91.198.214.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94171113 (0x59cefe9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2510a8a525dc9b1ec0b1560d090a64268d42ec4
Validity
Not Before: Jan 1 01:57:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a221d93e2da59c154dc0c3bfb9565cb34e046944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4f:7b:ef:5c:6a:ae:b7:55:d3:2c:66:04:d3:
e5:a1:20:7d:e3:71:da:12:4c:cc:af:65:13:15:9d:
f7:a2:ec:d5:27:8d:5d:da:9d:ce:65:79:03:ca:eb:
a9:06:b0:b1:86:ee:ce:2b:61:bf:12:10:de:14:a9:
59:24:3d:8c:24:8b:eb:4a:d7:6d:21:e2:32:9e:ce:
6d:b3:f0:78:9f:53:d3:dd:72:80:3a:ae:0d:e6:f7:
e1:be:86:25:b6:22:67:4d:2e:06:ec:57:c5:4c:c4:
f8:ab:df:3e:cb:97:aa:7f:b7:32:60:85:9c:0c:78:
d9:ea:6c:e7:2d:2d:21:d1:8a:e7:b2:bf:ea:ac:42:
67:67:e8:91:ba:07:b9:ff:4b:d4:46:49:94:80:85:
5c:0c:8c:74:ae:38:6a:ed:35:dc:8d:4a:cd:07:c3:
47:ae:72:a1:d2:1d:f3:ed:1d:42:1c:24:67:69:e6:
10:be:00:6a:9e:af:53:79:50:d4:e4:ef:b1:45:14:
96:e6:f6:88:3c:32:14:ed:87:f0:4a:6a:c2:e6:ec:
98:6d:80:13:9b:b3:51:f6:b5:27:11:cf:0d:a4:de:
fe:43:2a:23:a9:a6:d2:ab:44:12:b1:fd:15:7a:d2:
17:c7:e9:69:32:c4:73:03:f6:46:3f:a6:16:32:13:
b0:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:21:D9:3E:2D:A5:9C:15:4D:C0:C3:BF:B9:56:5C:B3:4E:04:69:44
X509v3 Authority Key Identifier:
keyid:C2:51:0A:8A:52:5D:C9:B1:EC:0B:15:60:D0:90:A6:42:68:D4:2E:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wlEKilJdybHsCxVg0JCmQmjULsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/oiHZPi2lnBVNwMO_uVZcs04EaUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.214.0/24
Signature Algorithm: sha256WithRSAEncryption
85:78:17:4b:de:2f:5a:53:7b:ea:fc:6b:bb:2f:ea:3c:60:70:
d5:e6:57:24:e7:99:4c:32:46:22:3e:d9:52:ef:9b:35:30:72:
e5:55:aa:44:d4:9f:e0:b5:d9:06:53:51:43:d7:0d:04:0e:8f:
96:b4:0e:a5:87:08:b3:3d:a2:79:56:e0:9f:11:34:08:1e:85:
a1:98:1d:06:6d:9a:e8:9e:a6:7b:6d:02:c6:41:c0:88:57:43:
41:1d:84:98:c3:6d:ce:59:93:8c:3d:fb:2c:8c:df:b8:6e:b5:
54:03:c5:82:3c:aa:fc:92:8b:5c:55:c3:e0:78:26:83:03:ea:
ff:6a:03:5b:e1:09:b4:ea:70:9e:7b:25:bc:0c:12:38:b7:de:
22:4d:b9:a7:19:bf:d2:39:86:88:74:9a:f4:7c:f9:00:94:6e:
30:d3:f1:46:05:29:00:ac:00:98:7d:ae:75:b5:bb:4a:14:ef:
fd:6e:2c:eb:30:55:f5:69:e4:dd:ec:16:e0:4c:db:46:5e:fa:
b9:69:00:b0:4a:b6:32:db:08:7b:e0:4c:52:c9:10:bb:c8:5e:
9b:38:7c:97:73:46:86:22:bc:a1:8e:20:c3:4c:12:ea:27:4a:
db:0a:09:26:7b:31:fa:87:4f:9d:cc:10:bf:8f:5b:b6:4a:c2:
54:82:69:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:40 2023 by rpki-client on console-fra.rpki-client.org