Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/wtD6zJ_w9uDYt6JPBD2upWEWpC8.roa
File: wtD6zJ_w9uDYt6JPBD2upWEWpC8.roa (raw, json)
Hash identifier: +AAHFlE/mdiXwg1/E8VzwvwxAL9n/GP0HwzVz9lQauk=
Subject key identifier: C2:D0:FA:CC:9F:F0:F6:E0:D8:B7:A2:4F:04:3D:AE:A5:61:16:A4:2F
Certificate issuer: /CN=3e8c6cc448f9635c56ff22b11cd80c1aa9c52d4f
Certificate serial: 0181F1EB78E3DBAD8D1C531335619089A445
Authority key identifier: 3E:8C:6C:C4:48:F9:63:5C:56:FF:22:B1:1C:D8:0C:1A:A9:C5:2D:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/wtD6zJ_w9uDYt6JPBD2upWEWpC8.roa
Signing time: Tue 12 Jul 2022 10:19:09 +0000
ROA not before: Tue 12 Jul 2022 10:19:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13032
IP address blocks: 91.202.128.0/22 maxlen: 22
193.41.88.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:f1:eb:78:e3:db:ad:8d:1c:53:13:35:61:90:89:a4:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e8c6cc448f9635c56ff22b11cd80c1aa9c52d4f
Validity
Not Before: Jul 12 10:19:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c2d0facc9ff0f6e0d8b7a24f043daea56116a42f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ab:bb:45:6f:b5:cd:ef:1a:12:bf:b2:42:4c:
b9:53:99:b4:9e:14:d2:99:ad:ec:cd:3e:30:d3:3d:
57:c7:92:68:f5:4d:d5:ce:b1:1c:a2:07:23:55:0d:
23:75:35:d3:d9:80:3e:78:d3:e1:04:33:a0:5c:29:
ce:46:c6:e2:bf:2d:3e:06:ac:6b:fe:8e:ba:66:c6:
69:86:ca:e9:78:db:ef:0c:06:f8:57:3a:9d:24:67:
5f:be:28:6f:32:a6:9f:b5:b5:87:ae:67:0e:06:09:
13:05:b7:5d:c2:de:66:07:6d:98:ae:4b:03:bb:19:
ca:7e:64:8d:b9:8e:2e:6a:57:4e:28:14:d9:af:6d:
4c:38:89:ba:b0:90:94:ea:b2:c8:07:2c:a2:e7:7f:
07:8f:31:09:ad:3d:53:43:e1:ae:71:da:d1:48:41:
a2:a3:e5:9f:8a:ec:1a:b2:99:51:d9:a1:6d:99:61:
29:78:dc:c8:33:31:3c:95:5f:38:98:a5:7c:e6:8a:
f4:e7:0a:9f:5d:c1:95:b8:e6:29:59:47:18:9b:05:
eb:b8:aa:ee:54:b2:f6:96:cb:47:e0:20:17:50:f7:
1e:30:43:af:71:cb:d7:d1:ce:06:21:b4:e8:cd:bd:
2a:96:ac:c0:65:4a:5f:99:52:39:da:37:aa:0c:43:
fd:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D0:FA:CC:9F:F0:F6:E0:D8:B7:A2:4F:04:3D:AE:A5:61:16:A4:2F
X509v3 Authority Key Identifier:
keyid:3E:8C:6C:C4:48:F9:63:5C:56:FF:22:B1:1C:D8:0C:1A:A9:C5:2D:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/wtD6zJ_w9uDYt6JPBD2upWEWpC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.202.128.0/22
193.41.88.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:ca:56:d0:fa:5e:1e:35:5f:d8:a4:64:a1:53:a6:77:40:53:
c6:2c:e8:9e:ab:67:f1:8c:98:fa:b3:54:fb:80:dd:ec:7b:dd:
f1:f4:cf:68:e6:82:69:f0:b7:46:c5:e2:6a:76:58:2e:c1:dc:
22:09:7f:65:62:50:95:3e:e7:5b:ef:ae:fe:cd:08:75:24:4a:
2d:1b:1a:52:8f:a2:d9:10:ca:90:18:0d:83:9f:06:ef:3d:08:
5b:5f:74:07:48:85:97:5b:3f:ab:1d:c0:c9:e4:3e:24:fb:b6:
de:d7:11:8b:f7:10:88:76:c0:0a:6f:bc:29:5e:a8:25:99:46:
57:de:09:7b:56:cf:14:5d:56:32:a9:41:2c:0c:2e:88:e3:eb:
59:f3:62:57:a9:7d:9e:a4:72:ac:7a:60:82:8e:94:b5:c1:66:
95:e6:85:67:07:f8:b0:f0:80:b4:16:41:af:b0:14:48:1e:04:
e4:94:9f:cd:9d:6f:48:d0:04:dc:50:c3:a0:5b:a3:2d:fd:a1:
b3:60:ab:28:4b:2b:a5:51:99:4c:76:f2:f5:1d:83:2b:24:3e:
ee:d3:1d:47:f3:e7:51:df:7f:c7:d7:81:6e:a2:8f:27:80:41:
1c:7f:eb:5d:18:ab:ab:0f:37:6c:15:cf:0b:75:de:82:7f:d5:
17:8f:43:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:12 2024 by rpki-client on console-fra.rpki-client.org