Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/5KEGlgMvFfnFk7VKTBM3Bf23YqY.roa
File: 5KEGlgMvFfnFk7VKTBM3Bf23YqY.roa (raw, json)
Hash identifier: nxgnlexE73OocDzqHdpz0mlD3JM/YB3FfL7izFR9vss=
Subject key identifier: E4:A1:06:96:03:2F:15:F9:C5:93:B5:4A:4C:13:37:05:FD:B7:62:A6
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 0182D5A5CE6535732760C412E2F61D9F8F25
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/5KEGlgMvFfnFk7VKTBM3Bf23YqY.roa
Signing time: Thu 25 Aug 2022 15:36:29 +0000
ROA not before: Thu 25 Aug 2022 15:36:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 91.245.184.0/22 maxlen: 22
193.36.208.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:d5:a5:ce:65:35:73:27:60:c4:12:e2:f6:1d:9f:8f:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Aug 25 15:36:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e4a10696032f15f9c593b54a4c133705fdb762a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b6:ed:b5:35:d1:17:8c:a2:99:f3:97:7d:9b:
f2:aa:d9:cd:3a:2a:58:1f:cd:9f:d7:3e:b1:87:a6:
42:a0:b3:6e:28:22:b0:60:9c:ad:43:11:02:f9:fd:
08:30:6d:52:be:e0:25:58:ab:e8:2a:98:52:46:2c:
e7:bb:89:13:c5:ea:4f:b6:64:ad:06:1f:85:b4:af:
aa:88:71:a9:96:83:64:1e:af:c8:d3:3e:c1:d4:76:
ea:fd:31:0d:18:2b:55:2e:1b:77:c5:a8:57:5e:97:
4e:d8:af:ae:9e:f3:12:42:b2:27:30:5a:4e:bb:56:
34:8a:97:c4:49:b4:65:49:a7:d4:9d:11:09:3b:33:
12:ad:d8:1d:2c:83:96:40:23:77:a7:b2:ed:cb:19:
5f:1e:c3:74:97:e3:be:f2:80:19:0c:64:af:8d:94:
08:c9:77:d1:5d:14:90:c8:c2:31:62:b7:eb:af:74:
97:3b:86:67:e6:1c:4f:cc:a1:5c:62:a8:4c:01:79:
71:f1:07:9e:e9:6a:09:b7:1c:73:bd:3b:66:71:7e:
9b:3c:06:81:6e:98:c3:4f:d3:1f:7f:8e:ea:b0:ed:
0f:e2:a3:e4:9c:05:5d:0c:ca:65:ea:34:40:43:ae:
07:a4:4a:ff:7c:fb:0d:66:84:5d:b8:87:0a:16:6f:
a7:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:A1:06:96:03:2F:15:F9:C5:93:B5:4A:4C:13:37:05:FD:B7:62:A6
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/5KEGlgMvFfnFk7VKTBM3Bf23YqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.245.184.0/22
193.36.208.0/21
Signature Algorithm: sha256WithRSAEncryption
39:cb:d1:d3:06:0f:33:09:b6:e2:c2:69:5d:c0:06:16:3f:4d:
d2:23:b0:a1:91:d7:44:eb:45:b3:38:e1:bf:df:58:2f:56:88:
29:71:88:6e:3f:11:d2:f7:99:19:a2:d8:35:04:79:9f:a2:2e:
dc:2f:60:66:d6:e0:ec:67:a1:ba:ec:e0:ab:2c:09:9b:56:e3:
db:3a:67:4a:3d:e3:56:b2:17:2f:83:52:9c:3a:88:c4:6c:bb:
85:cc:57:71:35:1a:6e:db:bd:a0:e6:f5:20:09:9b:48:a4:25:
39:5d:3c:c5:25:1b:87:e0:37:b3:dd:7b:48:fc:0b:0a:f3:b4:
20:ae:bb:bc:18:03:35:37:f5:6c:f5:86:c9:0a:fb:2b:bc:de:
1e:0a:68:5f:63:2f:45:d1:6b:a6:15:ce:48:f0:1f:33:30:71:
76:c2:5a:3b:a8:78:64:0d:ae:1f:e6:04:a8:b5:07:18:45:3c:
0f:2f:4c:63:f1:40:af:83:3a:e1:39:00:26:ae:e5:0c:ce:f1:
11:52:75:ae:34:8b:cb:60:a2:cf:c5:21:c4:df:ad:9e:96:c0:
f6:a1:32:35:3b:cd:6b:3b:fd:03:fb:ad:43:fa:03:4f:da:de:
93:5a:8e:55:15:69:e6:4b:39:77:f7:c8:f4:92:be:ed:88:26:
76:53:ea:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:48 2024 by rpki-client on console-ams.rpki-client.org