Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/XuMovR2bOVTdrRoIjxncDbjEKsg.roa
File: XuMovR2bOVTdrRoIjxncDbjEKsg.roa (raw, json)
Hash identifier: jlrimH34jqs2SarkbvNEkLPBkkp39cXqk0nYf+26cEg=
Subject key identifier: 5E:E3:28:BD:1D:9B:39:54:DD:AD:1A:08:8F:19:DC:0D:B8:C4:2A:C8
Certificate issuer: /CN=cd108c225f2478cd4230179890d07284be1636cd
Certificate serial: 012BE2C8
Authority key identifier: CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/XuMovR2bOVTdrRoIjxncDbjEKsg.roa
Signing time: Sun 29 May 2022 10:28:06 +0000
ROA not before: Sun 29 May 2022 10:28:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 137427
IP address blocks: 91.204.226.0/24 maxlen: 24
91.204.224.0/24 maxlen: 24
91.204.225.0/24 maxlen: 24
91.204.227.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19653320 (0x12be2c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd108c225f2478cd4230179890d07284be1636cd
Validity
Not Before: May 29 10:28:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5ee328bd1d9b3954ddad1a088f19dc0db8c42ac8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:d7:fc:35:1a:70:6c:84:59:ec:22:c6:d5:46:
21:a2:15:d9:40:1f:d7:c4:6f:31:e2:35:54:a4:d4:
27:04:d7:1d:23:71:9e:07:76:f6:93:11:73:9b:f4:
89:f5:2c:9e:5c:1a:49:ab:24:96:b1:d4:b5:36:eb:
09:f0:c9:65:c5:95:c2:7f:54:34:72:c3:68:8d:58:
d6:28:59:c7:ef:cc:e7:b6:b2:21:31:fc:f5:00:a9:
fc:33:b0:ff:f3:6c:14:2e:43:2e:84:da:ac:da:c3:
e3:12:aa:5e:20:aa:ce:a8:f4:0a:59:e0:83:d0:d8:
d6:35:14:ee:f2:82:73:f9:97:37:4c:44:b3:61:7b:
c5:23:73:8e:76:f9:f2:f8:5c:82:50:57:60:d8:fa:
2e:7d:61:e3:c3:ac:83:91:4f:e8:61:df:bb:e1:09:
d9:d7:49:d7:05:e1:12:6f:21:2d:e9:cc:30:c2:01:
d8:99:8b:6b:e0:4c:ae:da:9f:93:10:de:37:df:59:
32:9d:5a:69:39:69:b7:0d:51:1a:19:3e:38:eb:24:
93:6f:cc:c5:2e:66:bb:21:65:8f:c2:66:8e:13:88:
23:93:81:00:70:bd:4d:b2:75:25:35:3e:e8:62:93:
96:72:cc:cb:cd:2b:4e:36:46:99:f4:98:1a:51:67:
a4:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:E3:28:BD:1D:9B:39:54:DD:AD:1A:08:8F:19:DC:0D:B8:C4:2A:C8
X509v3 Authority Key Identifier:
keyid:CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/XuMovR2bOVTdrRoIjxncDbjEKsg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.204.224.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:87:88:f3:bf:da:5a:cd:ae:0f:d9:f6:93:cc:cc:f5:21:ad:
2b:e4:8c:ce:b5:a9:be:e9:ab:20:dc:df:bd:fb:1a:89:a1:c5:
75:01:96:6f:27:a7:68:9d:75:ea:aa:34:82:1c:93:46:c6:67:
e6:8c:3d:39:f6:e1:04:d0:ff:b4:b0:8a:fe:a8:6c:85:cb:7d:
4c:53:8e:f0:48:4e:da:d6:59:3a:bd:99:3c:ec:ea:f8:a5:2e:
a8:aa:5c:aa:c7:36:f4:b1:9a:d3:e5:87:3d:26:74:dc:6b:20:
25:d1:87:c0:7c:ec:1b:5b:d2:ea:05:af:dd:d7:be:54:61:73:
7f:d1:0a:db:b8:36:e2:f8:6f:fd:02:62:58:37:2c:3f:d5:52:
39:c9:f9:bd:5d:a3:04:cc:3c:a6:49:00:a8:3a:71:a3:5e:04:
56:86:df:0a:39:70:dd:c4:59:5a:a2:b6:da:0c:fe:f7:b5:30:
a6:81:1a:da:48:f5:38:7e:6c:69:16:5e:43:12:f3:5e:77:15:
4b:09:44:44:58:39:31:83:58:bf:66:8a:59:96:e7:f1:77:3f:
a0:18:8b:03:e4:41:3f:53:de:35:8c:82:6e:93:55:84:9a:7f:
0f:81:af:43:ba:69:ed:0d:b4:0f:ae:42:2a:70:e6:47:b7:9d:
aa:5f:c0:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:56 2024 by rpki-client on console-fra.rpki-client.org