Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/MyUmNw1p3RM7TinLOeqv1Y9OGcI.roa
File: MyUmNw1p3RM7TinLOeqv1Y9OGcI.roa (raw, json)
Hash identifier: eSR45Q474szhzHVRYQ41qYffIC9vrL2I7iugMtTNnCs=
Subject key identifier: 33:25:26:37:0D:69:DD:13:3B:4E:29:CB:39:EA:AF:D5:8F:4E:19:C2
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 0183D840A087F23547A5C54D98FA5F953AEF
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/MyUmNw1p3RM7TinLOeqv1Y9OGcI.roa
Signing time: Fri 14 Oct 2022 20:47:37 +0000
ROA not before: Fri 14 Oct 2022 20:47:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207326
IP address blocks: 91.147.116.0/22 maxlen: 24
91.147.120.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d8:40:a0:87:f2:35:47:a5:c5:4d:98:fa:5f:95:3a:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Oct 14 20:47:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=332526370d69dd133b4e29cb39eaafd58f4e19c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:bd:ac:97:3a:9a:df:71:6c:b8:8d:88:55:b1:
fc:05:9b:6e:3e:81:32:db:21:6c:fa:98:da:2f:5f:
71:98:39:08:56:e2:13:86:69:66:93:96:e0:6c:73:
21:46:5b:c2:65:4f:92:50:50:65:d1:5f:69:1a:50:
7a:9e:7c:f7:48:b9:cb:4e:20:05:42:a8:1b:d7:cc:
db:11:2e:64:b9:db:79:28:f1:54:21:66:e4:fc:62:
6d:22:62:87:3f:2e:fb:23:bc:6e:7b:f4:ce:da:1e:
bf:95:d5:52:45:51:43:3b:1a:09:ea:84:b6:ad:4d:
b1:8e:7c:dc:65:cf:17:26:db:bb:03:0a:92:8d:d5:
98:e7:2f:fb:a8:59:b2:9b:3f:30:41:66:fb:a8:18:
a0:14:85:d2:d4:d5:40:3b:91:39:74:41:90:4c:a4:
f3:44:ce:3b:57:a0:c6:88:21:4e:46:84:79:96:de:
83:f2:46:a9:0c:03:c6:90:01:07:83:08:a0:2f:99:
a0:74:ea:dd:1b:96:b5:16:d2:85:05:f9:b4:d5:36:
01:08:f0:79:6c:71:63:68:56:4a:73:93:73:fa:ee:
f9:0b:b4:18:1a:36:78:ca:c7:6f:63:78:d9:b8:66:
b4:b7:9c:67:1e:3f:fc:64:68:1f:d1:a4:bf:01:58:
18:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:25:26:37:0D:69:DD:13:3B:4E:29:CB:39:EA:AF:D5:8F:4E:19:C2
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/MyUmNw1p3RM7TinLOeqv1Y9OGcI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.147.116.0-91.147.123.255
Signature Algorithm: sha256WithRSAEncryption
55:55:ff:69:6d:5a:f4:59:7c:8d:52:d5:e6:00:cd:f7:10:b7:
24:63:28:09:21:c3:b1:86:bd:8b:42:21:22:c4:7b:da:6e:88:
0d:52:41:f7:1b:e2:48:31:19:0a:b9:46:ec:1e:ac:22:34:28:
4e:5c:8b:9e:ad:b6:a2:1a:a8:72:e6:dd:8a:d4:2c:12:9a:34:
df:da:b5:af:51:29:2b:86:74:7d:ac:6c:16:fa:6e:1d:21:68:
73:d3:e2:d8:39:4b:45:b8:11:2e:c8:3b:fd:be:1e:a9:e9:24:
19:39:be:e8:aa:6a:cc:3e:1f:f8:48:7a:c3:2d:c2:4d:76:ee:
57:bc:25:e0:f6:45:d3:ba:b0:7c:b6:5a:61:6e:5e:7a:0a:27:
1e:20:b7:9a:56:92:30:9c:b8:56:99:a3:9c:59:c3:78:98:e6:
d8:fa:d7:32:bb:d4:17:a8:6a:17:25:b9:e5:df:9c:15:a0:16:
03:7d:74:de:9b:ec:fb:1c:ce:68:01:b1:43:00:28:af:62:4c:
a0:44:d2:e3:ff:14:88:36:dc:2b:7f:06:1c:31:5b:6d:4b:73:
1f:07:60:02:e9:9a:a3:42:87:df:95:06:86:0f:8d:28:14:8a:
7d:04:68:38:e5:8c:6a:84:2f:82:80:c3:f6:06:73:a8:b8:81:
ed:02:9c:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:08:25 2025 by rpki-client