Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/219c6f-e30f-4a9e-acc0-e0d576d5577a/1/T1WGodBvyPdPWognbupmy2BbodY.roa
File: T1WGodBvyPdPWognbupmy2BbodY.roa (raw, json)
Hash identifier: +LZ7TRDk2eDHgXxT6Y+xcA7ZrNJ7KKov3DoSQcfQwqA=
Subject key identifier: 4F:55:86:A1:D0:6F:C8:F7:4F:5A:88:27:6E:EA:66:CB:60:5B:A1:D6
Certificate issuer: /CN=2450ca4aab2a3f8abc6c973aa7c0fa13f2571081
Certificate serial: 018210A86E649E677D2FE268F17E42FC0009
Authority key identifier: 24:50:CA:4A:AB:2A:3F:8A:BC:6C:97:3A:A7:C0:FA:13:F2:57:10:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFDKSqsqP4q8bJc6p8D6E_JXEIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/219c6f-e30f-4a9e-acc0-e0d576d5577a/1/T1WGodBvyPdPWognbupmy2BbodY.roa
Signing time: Mon 18 Jul 2022 09:34:09 +0000
ROA not before: Mon 18 Jul 2022 09:34:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16190
IP address blocks: 91.195.255.0/24 maxlen: 24
91.195.254.0/24 maxlen: 24
91.195.254.0/23 maxlen: 23
2.56.206.0/23 maxlen: 23
2.56.204.0/22 maxlen: 24
2.56.204.0/23 maxlen: 23
91.198.109.0/24 maxlen: 24
91.198.108.0/24 maxlen: 24
91.198.108.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:10:a8:6e:64:9e:67:7d:2f:e2:68:f1:7e:42:fc:00:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2450ca4aab2a3f8abc6c973aa7c0fa13f2571081
Validity
Not Before: Jul 18 09:34:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4f5586a1d06fc8f74f5a88276eea66cb605ba1d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:41:f7:45:cf:ef:90:51:04:ab:56:47:b5:33:
57:67:02:a0:e3:cd:39:05:54:29:a2:dc:19:85:9f:
ca:d7:0b:19:6a:6b:1c:93:8f:f9:8a:39:fe:39:5b:
ad:b1:94:6b:66:57:fa:f1:77:8e:c2:48:01:93:ce:
88:b9:70:77:51:21:d2:5b:b0:a9:35:f0:73:26:cf:
77:2d:5f:8c:3e:8d:6e:69:c3:cd:08:1a:5b:1a:76:
f7:71:a6:ea:c0:b1:48:77:0c:fd:9d:53:51:aa:46:
a2:d0:0d:a9:df:b8:78:a1:71:54:4f:26:35:98:f3:
6b:30:97:af:7d:cc:f0:c6:14:cb:7f:40:ee:61:05:
d6:71:6a:7f:1f:f9:4e:90:4e:62:ee:f5:ab:0c:67:
94:84:70:2c:af:12:2d:86:93:d3:a8:21:cd:71:7e:
5c:62:51:7f:57:5c:43:31:b2:a6:6d:19:8f:19:bc:
24:78:4b:36:8a:be:b0:74:f9:fa:64:a1:b7:ef:ab:
90:27:ba:40:dc:62:c7:57:18:d4:34:34:db:07:27:
74:f7:60:75:b8:37:09:db:10:55:d3:09:29:f0:b6:
41:46:ad:26:73:f0:f7:fb:ef:e6:ed:b6:2f:99:f0:
f2:a9:bd:a2:69:55:b8:d8:a0:56:c1:61:24:64:88:
26:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:55:86:A1:D0:6F:C8:F7:4F:5A:88:27:6E:EA:66:CB:60:5B:A1:D6
X509v3 Authority Key Identifier:
keyid:24:50:CA:4A:AB:2A:3F:8A:BC:6C:97:3A:A7:C0:FA:13:F2:57:10:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFDKSqsqP4q8bJc6p8D6E_JXEIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/219c6f-e30f-4a9e-acc0-e0d576d5577a/1/T1WGodBvyPdPWognbupmy2BbodY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/219c6f-e30f-4a9e-acc0-e0d576d5577a/1/JFDKSqsqP4q8bJc6p8D6E_JXEIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.204.0/22
91.195.254.0/23
91.198.108.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:b7:15:c0:78:66:55:ca:2b:73:f5:e8:93:e2:55:fe:18:cf:
05:f2:3c:ab:b7:44:77:f7:c2:d8:79:54:57:76:d1:92:e9:28:
71:ce:8e:5c:69:76:1b:c1:f4:e9:87:69:ba:7e:f3:ad:30:be:
c9:39:a4:e9:9e:84:a2:5b:15:05:25:8c:39:ae:b8:9c:55:42:
58:48:8a:4f:f1:e4:0b:38:62:fc:1d:3b:00:75:61:58:b8:f5:
7c:26:80:1a:a1:9b:c9:e8:a8:a2:6f:23:36:d6:7c:a2:a3:22:
b6:68:d9:1f:29:35:6e:fd:6e:8a:76:6b:5c:9c:43:1e:13:95:
2b:0d:39:c7:f4:4d:f3:75:f0:b7:0f:2f:a7:41:01:61:0d:50:
d9:a1:05:9b:a0:f1:bc:90:0e:b8:e5:1a:b0:15:3e:2d:a0:9b:
e8:af:a4:18:05:91:52:a3:3b:da:57:79:b6:a0:7a:ac:6c:4c:
cb:6e:39:db:97:64:7a:ec:fb:25:34:b9:a6:fb:f7:9a:6e:0f:
1d:33:e9:5f:b7:95:7c:31:90:47:6d:6a:b7:23:e0:bc:59:f2:
f0:2b:c5:1e:ee:f3:78:b0:29:7a:31:d8:6d:64:50:39:ef:75:
2f:31:ca:de:20:bf:00:9b:ff:d1:ae:ed:75:d3:cd:e4:b2:cf:
57:8c:86:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:44 2024 by rpki-client on console-fra.rpki-client.org