Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/ECq3AifKLZg95fyA8TsYNFZQj_U.roa
File: ECq3AifKLZg95fyA8TsYNFZQj_U.roa (raw, json)
Hash identifier: P0Pt8OIVidIxFsmdCEosxBVnJcKI1Auowwg9+w/0YiM=
Subject key identifier: 10:2A:B7:02:27:CA:2D:98:3D:E5:FC:80:F1:3B:18:34:56:50:8F:F5
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 0184B046A7287AE61E0F0B06C6B98F5F97A2
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/ECq3AifKLZg95fyA8TsYNFZQj_U.roa
Signing time: Fri 25 Nov 2022 19:32:11 +0000
ROA not before: Fri 25 Nov 2022 19:32:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209260
IP address blocks: 91.226.57.0/24 maxlen: 24
193.93.52.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:b0:46:a7:28:7a:e6:1e:0f:0b:06:c6:b9:8f:5f:97:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Nov 25 19:32:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=102ab70227ca2d983de5fc80f13b183456508ff5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3a:e5:eb:14:09:ae:31:89:bb:a6:1d:74:61:
70:8d:a2:bb:23:87:76:c0:d0:a3:86:1c:6e:10:84:
a6:b0:0e:61:5b:04:29:e6:40:12:68:48:31:1e:da:
c0:04:3f:42:0f:34:04:42:c0:33:04:89:54:bd:1f:
e7:af:1c:a2:9e:d4:64:10:c1:85:7b:df:5a:c0:44:
4e:c3:5a:78:42:1c:14:f9:5c:67:33:98:47:fe:15:
e8:2e:93:92:3d:3a:01:2b:c2:0b:6a:29:89:f0:ab:
25:51:60:4b:76:dc:44:c7:71:72:3e:df:40:42:6b:
32:19:cd:ce:3c:af:c9:e9:d1:3d:e7:5d:0b:ee:96:
79:da:0a:c2:81:b3:70:7a:53:2d:74:0f:37:40:cd:
a1:49:d6:91:70:cd:21:4f:b8:bd:7a:da:92:47:45:
ee:c2:a7:eb:e8:3c:5d:b4:7a:05:25:fb:89:dd:d1:
8c:e2:5f:11:1d:b8:92:b4:17:2a:f2:e8:52:8c:b8:
fe:a0:ea:45:ff:23:f5:fc:6c:d6:7a:f7:d4:f4:dd:
a4:18:3c:5c:69:51:04:1f:87:c8:e2:68:32:7c:40:
cd:fd:cb:bf:7c:7f:42:71:d6:2b:be:de:74:ff:75:
5d:4b:82:ee:fc:79:c3:09:8a:07:4e:be:1e:c3:2c:
34:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:2A:B7:02:27:CA:2D:98:3D:E5:FC:80:F1:3B:18:34:56:50:8F:F5
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/ECq3AifKLZg95fyA8TsYNFZQj_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.57.0/24
193.93.52.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:a9:83:98:05:cf:0b:e1:e2:6e:f8:f7:ff:95:05:90:17:11:
80:ad:d5:6f:4b:15:7c:f6:77:90:2f:af:4c:b2:90:87:f5:7b:
87:ee:1b:7a:54:36:8c:80:a6:fd:eb:ae:5e:03:49:36:22:a7:
5c:e8:13:91:90:09:b3:68:a0:ee:a5:b2:3d:15:5b:0e:5c:61:
78:46:d3:81:ae:83:8c:19:2c:31:5d:04:46:9d:1a:5b:1a:ea:
8d:1d:87:04:46:79:ff:d7:42:e1:f4:f5:af:23:0e:5c:b8:a9:
f3:cc:b6:0e:6f:40:37:2c:e6:b2:c1:fd:4a:ce:70:09:63:69:
8e:99:09:01:6b:d2:e6:1f:47:e9:30:02:f8:c6:bb:6b:c6:ad:
6a:ad:f9:5c:f1:a4:58:f1:db:9a:1f:07:cb:67:50:e3:58:3a:
e2:dc:2a:a7:39:35:c3:7a:28:63:7c:4d:05:ac:8b:02:f9:c6:
98:0e:45:3d:25:11:c8:a7:bc:f4:2c:c5:25:38:63:5a:b5:e7:
70:e3:e2:52:56:c8:b5:44:36:3b:c3:10:d6:a3:c5:21:25:33:
b7:16:49:51:f7:33:71:12:49:6d:ae:8e:d8:fa:fc:29:91:27:
7a:3c:44:fa:b7:c0:6c:bd:c4:c8:dc:85:32:65:61:08:da:06:
ea:9c:26:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:06 2024 by rpki-client on console-ams.rpki-client.org