Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/38486c-9de3-44ef-ab29-58f3f37ccdd9/1/aU23OKRaoGsUiq9Iw5Xya3EzTZA.roa
File: aU23OKRaoGsUiq9Iw5Xya3EzTZA.roa (raw, json)
Hash identifier: Y77q08mHpyZ4FaSpqY4VAzMCRgbXJY2DoUUcw7jPKRs=
Subject key identifier: 69:4D:B7:38:A4:5A:A0:6B:14:8A:AF:48:C3:95:F2:6B:71:33:4D:90
Certificate issuer: /CN=a2cd4301b2895f1d98a850e589ce7c063c539f4d
Certificate serial: 02772EDC
Authority key identifier: A2:CD:43:01:B2:89:5F:1D:98:A8:50:E5:89:CE:7C:06:3C:53:9F:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/os1DAbKJXx2YqFDlic58BjxTn00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/38486c-9de3-44ef-ab29-58f3f37ccdd9/1/aU23OKRaoGsUiq9Iw5Xya3EzTZA.roa
Signing time: Sat 01 Jan 2022 13:07:38 +0000
ROA not before: Sat 01 Jan 2022 13:07:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50636
IP address blocks: 91.194.185.0/24 maxlen: 24
91.194.184.0/24 maxlen: 24
2001:67c:2940::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41365212 (0x2772edc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2cd4301b2895f1d98a850e589ce7c063c539f4d
Validity
Not Before: Jan 1 13:07:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=694db738a45aa06b148aaf48c395f26b71334d90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6e:aa:16:c5:81:b2:62:5d:0e:da:16:2b:30:
34:8d:31:8e:1e:a9:78:73:02:bc:4b:97:4e:c5:6f:
2b:98:7a:83:23:97:0a:34:21:1e:de:08:a8:95:2d:
8a:76:c7:57:22:74:e7:89:56:c3:3a:24:4a:75:66:
7d:99:7b:e5:81:97:57:ef:02:9f:80:a4:45:68:3f:
a8:12:b3:7c:17:63:e3:00:ce:2b:8e:d8:9e:03:da:
b6:e5:94:f7:a3:3e:6a:23:b1:e9:da:36:d2:17:9a:
ec:a8:9d:6f:6a:71:68:d4:57:5b:92:33:c3:f0:52:
33:73:a8:7c:92:00:00:8d:fb:f1:36:3c:4e:e7:c4:
8e:9d:91:aa:a3:2c:66:6b:10:c2:52:08:3e:c0:80:
70:10:da:ee:54:8b:db:63:92:63:65:a3:1d:f2:c5:
11:4d:3c:2e:02:9e:5b:3d:2a:c9:97:dd:6c:eb:9a:
89:5b:2f:36:f6:b2:20:f8:6b:a8:6a:8b:2d:f0:33:
e6:fe:4f:8d:a7:f6:ee:00:8c:85:30:d5:ac:d7:f2:
19:b3:f8:db:f6:7b:55:85:88:97:12:e7:6d:5a:b5:
6e:a8:6e:e0:99:55:84:c0:ef:c0:7b:12:da:93:99:
22:87:d1:72:63:c6:bb:3b:c8:aa:79:b2:f0:2b:ee:
a3:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:4D:B7:38:A4:5A:A0:6B:14:8A:AF:48:C3:95:F2:6B:71:33:4D:90
X509v3 Authority Key Identifier:
keyid:A2:CD:43:01:B2:89:5F:1D:98:A8:50:E5:89:CE:7C:06:3C:53:9F:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/os1DAbKJXx2YqFDlic58BjxTn00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/38486c-9de3-44ef-ab29-58f3f37ccdd9/1/aU23OKRaoGsUiq9Iw5Xya3EzTZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/38486c-9de3-44ef-ab29-58f3f37ccdd9/1/os1DAbKJXx2YqFDlic58BjxTn00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.184.0/23
IPv6:
2001:67c:2940::/48
Signature Algorithm: sha256WithRSAEncryption
c6:43:8f:8c:59:67:6a:d2:09:c8:5c:3f:6f:5e:a1:fe:df:11:
c3:71:50:ab:14:29:85:88:33:d9:88:7a:84:f3:c6:0f:f9:11:
c3:7d:85:e9:86:9a:93:36:34:e1:ea:92:f1:5f:03:5d:08:e9:
e6:ec:e1:c9:44:a6:ff:a0:35:3e:25:71:23:11:d3:cf:88:f0:
55:cf:76:ec:89:8a:e8:91:c8:e2:f6:0f:62:99:c2:1b:1f:27:
51:f2:2a:d8:cf:9b:40:04:f5:57:51:6a:75:d4:46:dc:31:7b:
15:a0:14:10:7e:7c:05:34:e3:94:79:0d:98:1f:4d:31:ed:03:
6d:07:c6:db:e9:63:83:1e:01:80:fb:ad:d8:79:bf:49:c4:e2:
5f:ff:e5:d2:38:8c:8c:a9:db:48:85:51:c2:ed:60:aa:8d:cc:
49:fb:d1:05:45:67:e6:96:dd:fb:4b:a0:ec:e1:59:e5:2a:73:
50:88:17:47:93:de:a7:3f:54:b0:2b:72:84:9a:4d:ad:2f:33:
ff:91:5c:a7:d2:d2:ba:f7:ba:21:5e:09:76:8a:6f:89:ef:a2:
7d:a0:af:18:e9:01:2b:f7:54:db:5f:cb:89:fd:cd:51:1d:7b:
69:1c:8d:be:55:a0:ff:56:57:3b:50:2b:4d:d1:ac:35:94:c9:
70:18:20:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:55 2024 by rpki-client on console-fra.rpki-client.org