Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/7e2ada-0dc1-4f3e-a58d-a29e814b9b29/1/WKgxXs_RimlFB8GOEb-nemxY31I.roa
File: WKgxXs_RimlFB8GOEb-nemxY31I.roa (raw, json)
Hash identifier: R16PQ9FmJ8LIP8NCKrTsmoIKqPA+3U7MjPx+TwDMNDs=
Subject key identifier: 58:A8:31:5E:CF:D1:8A:69:45:07:C1:8E:11:BF:A7:7A:6C:58:DF:52
Certificate issuer: /CN=17ac80b0eef5708c64390545d1a71390244b6d1b
Certificate serial: 03A7AB0E
Authority key identifier: 17:AC:80:B0:EE:F5:70:8C:64:39:05:45:D1:A7:13:90:24:4B:6D:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F6yAsO71cIxkOQVF0acTkCRLbRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/7e2ada-0dc1-4f3e-a58d-a29e814b9b29/1/WKgxXs_RimlFB8GOEb-nemxY31I.roa
Signing time: Sat 01 Jan 2022 01:51:14 +0000
ROA not before: Sat 01 Jan 2022 01:51:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56756
IP address blocks: 91.226.207.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61319950 (0x3a7ab0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17ac80b0eef5708c64390545d1a71390244b6d1b
Validity
Not Before: Jan 1 01:51:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=58a8315ecfd18a694507c18e11bfa77a6c58df52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d5:91:02:39:7a:8a:d4:ce:e1:b2:72:e8:56:
d7:5e:53:da:4d:73:1c:0a:a8:11:05:b1:22:18:fa:
bc:7f:53:5b:93:e3:d1:a5:26:10:00:7a:38:d7:aa:
b6:12:1f:2c:ba:4a:0f:66:9f:d4:fa:0e:f4:cd:6d:
34:56:b3:bf:ad:48:18:a0:23:5e:35:ab:06:b4:92:
6e:fd:f7:7d:f5:ea:62:46:49:b7:21:f3:d6:45:64:
82:fa:7a:75:f2:73:01:69:b4:3d:f5:f6:8c:8d:69:
c1:b5:a1:25:65:ff:09:42:0d:a5:36:06:a3:f0:6b:
78:7b:ba:c9:75:37:58:69:79:27:42:d4:13:76:82:
87:c5:42:d2:3a:ca:f5:26:fb:65:8e:55:48:44:9d:
f8:ea:a1:aa:e8:3f:b8:97:28:42:5a:f0:d8:2b:94:
3c:59:46:c9:44:ba:a9:03:9b:1e:4a:f0:a2:05:72:
23:e3:6f:e3:ef:c2:66:c0:d6:b6:12:b1:7c:5e:b5:
d7:e9:4f:38:a0:fa:47:11:99:e1:34:cf:09:bf:c6:
bc:2b:71:dd:58:aa:2f:69:c3:52:81:df:c1:b9:d6:
24:65:e1:73:96:eb:fc:f5:2f:0a:1f:8a:21:9d:0a:
00:d7:3d:9c:07:18:32:fb:13:34:83:32:d5:73:da:
28:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:A8:31:5E:CF:D1:8A:69:45:07:C1:8E:11:BF:A7:7A:6C:58:DF:52
X509v3 Authority Key Identifier:
keyid:17:AC:80:B0:EE:F5:70:8C:64:39:05:45:D1:A7:13:90:24:4B:6D:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F6yAsO71cIxkOQVF0acTkCRLbRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7e2ada-0dc1-4f3e-a58d-a29e814b9b29/1/WKgxXs_RimlFB8GOEb-nemxY31I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7e2ada-0dc1-4f3e-a58d-a29e814b9b29/1/F6yAsO71cIxkOQVF0acTkCRLbRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.207.0/24
Signature Algorithm: sha256WithRSAEncryption
62:b7:db:28:aa:9b:5d:7e:e7:4a:e5:17:39:fa:26:71:7e:25:
61:07:30:55:8e:ff:65:9d:02:83:49:fb:02:49:77:0c:d1:62:
3f:7a:28:e5:24:9b:b8:b6:31:fc:f7:32:1a:e3:83:e1:e2:18:
63:b5:4b:ba:26:59:39:5c:1c:85:e1:c7:0c:e8:0f:f4:76:eb:
93:23:88:0c:e9:78:03:ca:fc:a1:ec:09:a4:c0:19:22:68:ad:
f3:b8:e8:db:e7:fc:d9:16:be:b4:cb:04:07:cd:ce:b7:05:3e:
d9:64:da:cb:f7:5d:fa:86:39:94:cd:db:14:c8:8d:24:a3:76:
c1:c1:81:8c:e1:45:20:28:99:2c:f8:3e:ac:31:ac:17:14:b8:
54:41:15:06:ef:24:ca:ec:74:66:01:64:42:d2:15:26:22:8e:
65:6c:58:b7:14:72:c3:32:1c:69:aa:b9:3f:f5:c7:a3:36:60:
74:b3:f5:fb:b9:45:c4:f7:bb:63:01:1e:ed:4c:a2:b7:02:ac:
a3:2b:f6:8c:52:1f:df:e2:a6:0e:1f:b3:71:08:49:64:a9:8e:
79:3b:b3:7a:2f:a1:16:e0:e0:7a:b8:82:38:6b:f9:b4:a3:c8:
01:fb:c2:c9:2c:e3:52:3a:ed:34:b7:20:f1:de:4e:a0:14:93:
fe:01:e7:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:36 2024 by rpki-client on console-ams.rpki-client.org