Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/oZ2pQ5hjfraQGbQVCikHdvk8fUE.roa
File: oZ2pQ5hjfraQGbQVCikHdvk8fUE.roa (raw, json)
Hash identifier: wbyUm78bcHc8IaBd9tGYmUej+JG8oKwW6u9K//RMPAE=
Subject key identifier: A1:9D:A9:43:98:63:7E:B6:90:19:B4:15:0A:29:07:76:F9:3C:7D:41
Certificate issuer: /CN=adb365acf6f918499707dda13f033e2cd6110308
Certificate serial: 0861311F
Authority key identifier: AD:B3:65:AC:F6:F9:18:49:97:07:DD:A1:3F:03:3E:2C:D6:11:03:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rbNlrPb5GEmXB92hPwM-LNYRAwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/oZ2pQ5hjfraQGbQVCikHdvk8fUE.roa
Signing time: Sat 01 Jan 2022 04:57:25 +0000
ROA not before: Sat 01 Jan 2022 04:57:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15600
IP address blocks: 91.138.0.0/18 maxlen: 24
185.90.108.0/22 maxlen: 22
2a05:dcc0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 140587295 (0x861311f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adb365acf6f918499707dda13f033e2cd6110308
Validity
Not Before: Jan 1 04:57:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a19da94398637eb69019b4150a290776f93c7d41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:29:61:b1:ed:05:53:8a:e9:44:8c:cd:58:36:
20:fb:d9:73:19:3d:4f:85:4c:23:92:16:13:61:96:
99:5b:03:7b:99:a8:3f:a6:6c:e5:17:a2:d7:41:3c:
db:f4:b8:a5:c7:91:2f:99:42:0c:27:c8:30:d2:f9:
df:cc:16:89:94:31:0c:72:76:59:60:40:63:58:34:
43:21:ad:fd:48:b6:81:30:9a:71:6d:0a:da:81:ca:
b8:cb:ca:52:a9:e2:be:95:5e:8f:8e:dd:05:33:cf:
63:bf:ae:96:1d:22:50:09:d6:04:f4:3b:a7:e3:25:
8a:85:e6:23:b2:7a:f3:a4:55:c5:63:08:bc:16:95:
af:d7:e8:bf:63:95:00:d1:e8:c8:05:ce:92:85:3d:
c8:e5:d1:2c:98:9e:00:4c:33:ca:9b:56:6e:f1:da:
ae:d5:ee:a6:dd:ab:19:bd:17:54:78:68:08:02:87:
b6:22:38:2d:f6:29:d8:73:a7:55:95:fd:93:c0:6a:
c6:bc:ed:1c:0d:55:7d:c3:e6:ee:38:0b:bd:c8:14:
ea:ca:4a:00:9f:42:4a:14:0c:0b:8d:70:cc:62:28:
26:e2:a8:a2:b0:93:6a:4b:64:09:40:06:95:d5:c3:
d2:46:2e:50:ee:5b:90:29:7b:3c:8c:83:bf:df:eb:
63:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:9D:A9:43:98:63:7E:B6:90:19:B4:15:0A:29:07:76:F9:3C:7D:41
X509v3 Authority Key Identifier:
keyid:AD:B3:65:AC:F6:F9:18:49:97:07:DD:A1:3F:03:3E:2C:D6:11:03:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rbNlrPb5GEmXB92hPwM-LNYRAwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/oZ2pQ5hjfraQGbQVCikHdvk8fUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.138.0.0/18
185.90.108.0/22
IPv6:
2a05:dcc0::/29
Signature Algorithm: sha256WithRSAEncryption
d5:6f:bf:ae:c3:74:44:fd:96:df:1c:21:69:3a:21:09:50:68:
a7:36:4d:81:2e:27:b1:e1:50:fd:da:f0:7a:9e:a7:29:f3:5f:
86:4c:9b:9d:7c:8a:16:47:bb:90:35:af:0f:37:0a:d7:d9:46:
ce:39:0b:10:29:d4:5b:2b:e7:39:76:71:3b:d7:0b:81:9c:5d:
ae:b3:0d:f5:a5:73:fc:c1:8f:57:b9:3d:f1:3c:76:fa:47:3f:
29:f3:cb:21:e1:d1:3d:25:e2:62:04:dc:f3:e7:64:b3:bf:c8:
b4:e5:32:fd:54:6b:02:4a:20:39:dd:90:68:a3:88:23:a3:eb:
15:6d:f0:28:27:9a:98:1d:cc:8e:2a:20:ab:e1:e7:33:cd:45:
82:1c:11:7f:e8:09:6a:8c:ad:9e:49:c7:06:6e:fc:c4:cd:26:
1b:89:e6:de:23:52:f6:87:10:14:66:16:43:24:d7:07:65:8e:
c6:c8:b2:9e:c3:db:7e:3a:e5:2a:46:d4:0d:bb:8c:76:5c:d3:
04:dc:e3:92:fd:78:f4:d5:dc:e3:59:b7:63:0b:bc:09:5b:4e:
1f:09:ca:21:b2:79:88:14:cb:ab:22:07:4f:95:16:a4:e4:75:
82:38:7c:b9:c6:fa:77:c4:3d:31:6e:d5:fc:51:06:5f:fd:a4:
a7:d4:f9:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:04 2024 by rpki-client on console-fra.rpki-client.org