Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/kw5z-gxmsxoGVSTVqVVNjHdg_Pg.roa
File: kw5z-gxmsxoGVSTVqVVNjHdg_Pg.roa (raw, json)
Hash identifier: w405hRIMrPQe4/yDzqKlUKNkWONslVv2Ef0tLYwxzsY=
Subject key identifier: 93:0E:73:FA:0C:66:B3:1A:06:55:24:D5:A9:55:4D:8C:77:60:FC:F8
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 1391C98F
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/kw5z-gxmsxoGVSTVqVVNjHdg_Pg.roa
Signing time: Sat 01 Jan 2022 05:56:25 +0000
ROA not before: Sat 01 Jan 2022 05:56:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207238
IP address blocks: 91.242.102.0/24 maxlen: 24
91.242.68.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 328321423 (0x1391c98f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 1 05:56:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=930e73fa0c66b31a065524d5a9554d8c7760fcf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:88:b9:98:ca:40:05:38:5d:d5:7b:a5:0e:92:
5d:31:a2:40:ec:c3:73:21:5a:08:b9:c8:30:6c:2c:
3b:ed:a2:ec:ca:35:a0:45:b6:82:ee:de:eb:ae:d5:
80:47:43:32:f0:ce:13:9f:e5:3e:18:28:f3:73:34:
ad:a5:2f:0c:f6:1d:ad:6c:8b:4b:5e:c9:9c:88:f8:
0b:48:a3:50:7c:76:10:99:17:05:30:17:83:d3:25:
75:eb:9a:48:0d:3b:ef:10:68:fe:01:3d:d2:b9:f4:
0c:7b:9b:01:24:bb:f5:15:a2:74:45:0b:ca:d6:53:
9c:f9:01:34:16:5c:55:54:33:0c:b4:a0:e3:8b:31:
02:ca:71:6a:42:04:bd:b3:d1:1d:c0:e7:0c:10:9c:
62:76:05:e6:a7:05:02:4d:79:46:69:f9:55:71:60:
56:c2:e4:b2:ec:90:0d:70:30:64:54:7c:4a:59:eb:
d4:8f:1a:45:78:e8:3d:29:0e:b8:18:d5:b8:24:77:
84:0c:72:f9:1c:ca:2d:14:d3:1b:d0:77:ac:99:a9:
5d:ce:f3:69:c1:d2:65:b9:a4:10:3d:9a:4f:26:54:
20:2f:18:ea:c8:28:16:34:f0:0f:9c:13:38:6e:04:
b0:33:13:7a:19:5f:b5:67:72:f8:8f:b8:c7:48:70:
83:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:0E:73:FA:0C:66:B3:1A:06:55:24:D5:A9:55:4D:8C:77:60:FC:F8
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/kw5z-gxmsxoGVSTVqVVNjHdg_Pg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.68.0/23
91.242.102.0/24
Signature Algorithm: sha256WithRSAEncryption
64:80:10:fa:74:56:39:1b:f2:55:02:f2:cb:29:6c:c3:23:4a:
94:55:03:a0:c3:94:eb:00:3d:89:89:90:39:56:8c:ad:19:ba:
16:02:0e:bc:9b:f3:b8:18:e4:5e:b8:63:07:5e:17:20:d4:f8:
86:0c:8d:e1:8d:b8:a0:fc:4b:42:60:16:78:23:12:80:f1:28:
85:c1:21:66:5f:b8:59:53:45:ee:34:db:b0:64:05:28:bd:c4:
d3:86:f6:99:f1:4d:68:da:98:a8:91:01:fc:21:0f:cd:32:67:
4f:e1:af:df:a0:a6:00:82:35:0f:97:4d:55:e5:28:86:9b:f5:
fe:99:9c:91:4e:48:e2:72:5e:7f:1b:74:15:4b:fd:e9:da:7d:
c9:95:be:9d:ea:96:4b:8a:7c:e7:d0:99:c8:46:a3:a4:0b:3c:
e1:b6:22:53:8a:f7:fd:b8:42:9f:7d:9c:ac:ae:3c:06:c2:f0:
18:04:19:37:d4:af:c9:be:89:5c:02:15:a5:0b:af:c7:1a:14:
a6:a5:37:5d:cd:18:df:45:4b:bd:46:ad:d7:00:46:a1:00:02:
8d:0b:63:d0:02:48:f5:51:f1:48:dc:7b:54:b3:35:5c:80:a4:
4b:27:43:7a:62:66:f9:df:65:d7:40:d5:05:d8:4a:ff:26:bb:
3f:56:19:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:50 2023 by rpki-client on console-fra.rpki-client.org