Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/kWzRRiLyPFakp4fg140TB1Y74vU.roa
File: kWzRRiLyPFakp4fg140TB1Y74vU.roa (raw, json)
Hash identifier: Q7nRv9yzjxIrGG4X31DBSkbY8HpKW5Vf0soJCb5kZxQ=
Subject key identifier: 91:6C:D1:46:22:F2:3C:56:A4:A7:87:E0:D7:8D:13:07:56:3B:E2:F5
Certificate issuer: /CN=3aebf22e86444255fdf78a30c4cb0b2d91e5b757
Certificate serial: 0A70190D
Authority key identifier: 3A:EB:F2:2E:86:44:42:55:FD:F7:8A:30:C4:CB:0B:2D:91:E5:B7:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OuvyLoZEQlX994owxMsLLZHlt1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/kWzRRiLyPFakp4fg140TB1Y74vU.roa
Signing time: Sat 01 Jan 2022 15:04:39 +0000
ROA not before: Sat 01 Jan 2022 15:04:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16089
IP address blocks: 194.0.58.0/24 maxlen: 24
195.144.8.0/24 maxlen: 24
91.240.224.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 175118605 (0xa70190d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aebf22e86444255fdf78a30c4cb0b2d91e5b757
Validity
Not Before: Jan 1 15:04:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=916cd14622f23c56a4a787e0d78d1307563be2f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:cf:c8:0f:f6:c3:fe:2c:e9:a1:13:d5:f6:f9:
58:85:a0:7e:4d:30:c3:07:0e:e9:1d:ed:85:d8:25:
5b:e3:94:f4:85:5b:4e:55:5b:4e:80:0b:d9:4e:58:
ac:8a:99:41:ff:08:f8:c1:95:f3:28:fd:a2:5f:3c:
77:0a:32:20:2d:0c:0a:fe:b2:75:c2:00:7c:ca:f9:
08:b1:62:30:85:12:d0:78:76:1c:37:84:f1:cd:3c:
8e:63:74:b3:28:1b:0e:c0:65:3e:63:0d:c7:ff:77:
c5:09:43:2f:92:20:42:e7:3d:bf:e2:41:78:59:9a:
60:c3:ba:7c:7d:07:c4:9b:02:9c:08:ff:32:62:2c:
d5:23:bb:e1:95:74:e7:84:62:1e:fb:a3:1d:db:de:
c2:6d:63:29:86:16:e2:12:62:6a:21:98:2f:f4:34:
6f:3c:0b:08:fc:e9:93:e2:a9:93:ac:7d:fe:ba:cc:
4d:17:ea:ca:41:c3:ba:f0:ca:98:76:11:4a:42:7a:
62:0f:c8:b6:78:f6:93:6a:66:bb:c7:8e:d1:48:0e:
ae:d7:df:53:f6:95:29:19:36:fa:ef:b1:5b:31:2b:
eb:05:13:f1:3d:95:23:92:67:d2:27:a2:a4:b7:fd:
95:f0:d7:d4:74:4c:28:4d:a0:35:b9:23:38:b5:56:
12:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:6C:D1:46:22:F2:3C:56:A4:A7:87:E0:D7:8D:13:07:56:3B:E2:F5
X509v3 Authority Key Identifier:
keyid:3A:EB:F2:2E:86:44:42:55:FD:F7:8A:30:C4:CB:0B:2D:91:E5:B7:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OuvyLoZEQlX994owxMsLLZHlt1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/kWzRRiLyPFakp4fg140TB1Y74vU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/OuvyLoZEQlX994owxMsLLZHlt1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.240.224.0/24
194.0.58.0/24
195.144.8.0/24
Signature Algorithm: sha256WithRSAEncryption
65:28:da:fb:71:cd:8b:9a:75:1c:07:e6:59:d7:94:ee:8c:d1:
76:d7:bd:a9:e5:63:e5:54:76:9c:ee:1f:db:64:78:aa:8f:74:
8a:56:b0:12:6f:a1:2a:46:d8:aa:dd:fb:22:ac:94:94:af:aa:
f2:29:37:53:65:ac:01:19:82:69:37:7d:3b:6f:cd:b0:37:7a:
76:aa:98:35:1f:d3:de:9b:bb:67:e3:b1:23:3d:77:3f:bd:9d:
91:35:f0:e7:39:5c:54:d1:d5:32:7b:d4:eb:ce:fd:e6:8d:b1:
f9:89:05:b0:3e:fc:3a:26:31:9c:fe:e3:0e:98:30:d8:70:d9:
43:d6:b0:40:c1:74:48:3c:f5:9a:15:77:34:11:07:00:a7:e8:
c1:78:fa:5b:81:a5:e0:7d:89:e7:9c:9f:0b:0c:60:a2:3e:f2:
28:25:bf:be:bb:7f:b5:cd:82:a7:33:5e:79:45:1b:f6:dc:64:
d1:b6:fc:3f:a5:b0:75:d6:6a:ba:dc:49:64:73:d8:7b:6f:53:
6c:70:5f:fc:3d:af:58:ae:06:60:76:1e:50:f9:71:0a:69:c6:
ef:ea:f6:98:ca:2e:b6:88:79:39:ee:d6:8e:22:4e:37:9c:f7:
e0:7a:99:5b:3d:2f:1e:f1:7c:b6:59:bb:52:50:4b:62:ba:18:
64:5b:3f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:14 2023 by rpki-client on console-ams.rpki-client.org