Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/dda98e-8646-4d07-80ac-a35eaf005af5/1/XWKcjZCoPEcwPlg-t2r1YdMimHQ.roa
File: XWKcjZCoPEcwPlg-t2r1YdMimHQ.roa (raw, json)
Hash identifier: wiH3rrwRJ17rmYT1CA6a0tJjy6NMDtXZHxwy7QRufLE=
Subject key identifier: 5D:62:9C:8D:90:A8:3C:47:30:3E:58:3E:B7:6A:F5:61:D3:22:98:74
Certificate issuer: /CN=bd175e878d33b47d806f2cf3e04628220935123d
Certificate serial: 07B665DA
Authority key identifier: BD:17:5E:87:8D:33:B4:7D:80:6F:2C:F3:E0:46:28:22:09:35:12:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vRdeh40ztH2Abyzz4EYoIgk1Ej0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/dda98e-8646-4d07-80ac-a35eaf005af5/1/XWKcjZCoPEcwPlg-t2r1YdMimHQ.roa
Signing time: Sat 01 Jan 2022 09:54:58 +0000
ROA not before: Sat 01 Jan 2022 09:54:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44496
IP address blocks: 91.199.8.0/24 maxlen: 32
2001:67c:2f84::/48 maxlen: 128
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 129394138 (0x7b665da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd175e878d33b47d806f2cf3e04628220935123d
Validity
Not Before: Jan 1 09:54:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5d629c8d90a83c47303e583eb76af561d3229874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:26:01:03:78:cd:4a:c3:3d:26:3a:e8:b7:54:
48:d2:33:a9:73:cb:e6:7e:53:d4:67:e3:d9:47:87:
98:6f:09:c2:d7:17:14:29:a9:af:74:57:31:42:94:
4d:de:29:80:9b:6e:5f:5c:d1:e3:ae:82:59:bc:94:
09:38:56:ba:05:f4:6c:4d:17:0b:7b:72:88:52:b9:
e8:3d:2a:28:7a:e4:b2:8b:69:ab:ec:9e:44:ea:72:
4b:8f:9b:2b:9b:5a:bd:09:c8:c7:cb:b5:57:11:5d:
c5:b2:f6:ae:21:c1:cd:7b:41:c6:a9:8a:c6:53:53:
13:ea:39:4b:97:94:1f:3f:3f:16:85:8b:22:14:83:
1b:df:6c:15:ad:0b:5e:a4:a4:6b:50:85:50:3c:c2:
55:2c:93:55:a9:55:d6:b4:30:10:85:aa:52:d3:70:
86:92:c1:00:35:6a:01:db:5b:cb:80:ed:69:52:78:
91:5d:26:3a:71:b6:d1:77:00:a7:0f:a7:e6:8a:b9:
1b:8b:99:ae:93:0a:c9:94:03:b4:13:2a:e5:58:6b:
4a:7b:20:c1:27:b8:72:59:5b:6c:e8:db:d8:c0:36:
3c:84:e0:5a:28:56:d0:51:5e:e4:8b:97:da:52:54:
1f:40:db:ba:e0:78:19:1d:85:5e:29:9f:3b:5f:ad:
e2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:62:9C:8D:90:A8:3C:47:30:3E:58:3E:B7:6A:F5:61:D3:22:98:74
X509v3 Authority Key Identifier:
keyid:BD:17:5E:87:8D:33:B4:7D:80:6F:2C:F3:E0:46:28:22:09:35:12:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vRdeh40ztH2Abyzz4EYoIgk1Ej0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dda98e-8646-4d07-80ac-a35eaf005af5/1/XWKcjZCoPEcwPlg-t2r1YdMimHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dda98e-8646-4d07-80ac-a35eaf005af5/1/vRdeh40ztH2Abyzz4EYoIgk1Ej0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.8.0/24
IPv6:
2001:67c:2f84::/48
Signature Algorithm: sha256WithRSAEncryption
12:ca:04:aa:cd:cb:f7:67:c6:fb:47:24:4f:d7:53:ec:ef:56:
c0:94:d4:35:39:a2:ed:1e:0b:a7:13:79:0f:15:41:bf:46:8a:
b6:12:bd:3a:4f:84:22:7f:fd:f5:d4:d6:9d:2b:e0:bd:a9:bf:
45:ca:7d:b0:92:3e:db:83:db:15:62:0f:72:67:e1:f3:39:72:
2d:5b:8d:0d:35:a9:b2:ed:2b:cb:fb:d3:1f:3f:70:d9:82:c3:
91:c1:34:fb:6a:7e:dc:41:79:06:39:3b:e9:c5:72:1c:0d:1e:
79:22:e5:02:0b:8e:23:91:a2:26:df:13:43:f2:5c:7a:b2:be:
fb:70:cc:aa:57:dc:52:34:f8:0c:0c:6e:38:1f:a9:67:0e:6a:
7c:76:bc:90:23:1b:38:bb:6f:d0:d7:c1:71:13:6f:ee:9d:a3:
25:c2:41:01:b3:e5:b9:86:1f:c3:85:6f:c0:30:f4:42:a1:6b:
9e:5f:ab:c3:3d:7c:08:fa:53:e4:f6:a0:48:5d:34:e4:a2:c1:
26:70:d0:3a:2b:e0:e6:d4:44:88:47:fe:2c:e9:de:89:bb:7d:
02:86:56:18:bb:1c:55:c3:b5:8e:bd:aa:f1:f7:5c:57:6a:4c:
5a:14:ec:b7:5b:9c:f4:4e:e6:37:f0:56:19:54:6b:fb:42:e2:
2b:9f:b2:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:34 2024 by rpki-client on console-fra.rpki-client.org