Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/wY8e0VQ3u7IPs_cWjFySDvul-D8.roa
File: wY8e0VQ3u7IPs_cWjFySDvul-D8.roa (raw, json)
Hash identifier: 7hbnYwipy8UmVU5Nop8g1uHE+ZmscHSwrNYHcy4EgJo=
Subject key identifier: C1:8F:1E:D1:54:37:BB:B2:0F:B3:F7:16:8C:5C:92:0E:FB:A5:F8:3F
Certificate issuer: /CN=09f26bd6f46837e0afd9589d878efc3ec8967f02
Certificate serial: 03CAA530
Authority key identifier: 09:F2:6B:D6:F4:68:37:E0:AF:D9:58:9D:87:8E:FC:3E:C8:96:7F:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CfJr1vRoN-Cv2Vidh478PsiWfwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/wY8e0VQ3u7IPs_cWjFySDvul-D8.roa
Signing time: Sat 01 Jan 2022 02:55:31 +0000
ROA not before: Sat 01 Jan 2022 02:55:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29314
IP address blocks: 91.226.6.0/23 maxlen: 23
31.41.208.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63612208 (0x3caa530)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09f26bd6f46837e0afd9589d878efc3ec8967f02
Validity
Not Before: Jan 1 02:55:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c18f1ed15437bbb20fb3f7168c5c920efba5f83f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:56:26:8a:e5:35:61:ef:cc:46:a7:ec:51:4e:
1a:19:0c:3a:bb:56:83:ca:cf:9a:b4:4c:6e:65:16:
d4:57:cf:9a:82:47:c8:2f:e5:4a:24:c3:58:b0:04:
97:1a:bf:36:9f:61:80:a0:29:f4:6a:cf:92:f6:29:
ec:37:df:70:59:84:89:d9:04:09:e8:48:d6:82:6a:
56:32:02:01:63:6c:9a:0b:81:b8:bf:75:a8:5b:bc:
d6:27:44:98:c2:6d:84:ca:14:74:4a:f4:1c:50:bc:
25:a1:a8:37:ce:87:b0:f8:fd:32:37:f0:b8:41:5c:
7c:8b:58:0f:16:2d:01:0c:93:67:60:68:43:42:d0:
a9:e2:74:37:9f:d6:22:1b:dc:35:60:6f:cd:0b:ca:
93:0d:62:e3:a7:d2:a3:5b:71:40:19:53:03:b2:17:
ec:2b:ec:4d:89:79:35:d1:28:ba:30:40:4b:62:77:
79:b9:45:85:84:cd:90:58:da:50:94:dd:43:4a:60:
e9:5f:81:65:57:c5:44:e0:79:35:c1:54:95:40:22:
19:d4:bb:20:ed:45:25:1e:a6:83:af:05:b9:c1:41:
51:3b:4d:39:f9:c6:23:ca:b6:7b:a8:de:97:0e:72:
6a:d4:80:12:f7:37:07:df:fb:31:00:79:9a:76:20:
da:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:8F:1E:D1:54:37:BB:B2:0F:B3:F7:16:8C:5C:92:0E:FB:A5:F8:3F
X509v3 Authority Key Identifier:
keyid:09:F2:6B:D6:F4:68:37:E0:AF:D9:58:9D:87:8E:FC:3E:C8:96:7F:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CfJr1vRoN-Cv2Vidh478PsiWfwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/wY8e0VQ3u7IPs_cWjFySDvul-D8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.41.208.0/21
91.226.6.0/23
Signature Algorithm: sha256WithRSAEncryption
85:42:dd:08:1a:ef:56:e4:d5:0d:a4:24:f0:15:1a:ef:42:b2:
fa:6a:79:3d:67:73:ef:b8:73:ef:26:ff:89:34:63:ea:8d:54:
a0:2f:cd:42:9c:7e:b8:cd:35:98:90:4d:b3:c9:4d:3c:87:78:
25:58:49:04:ca:43:63:3c:25:fd:4f:12:b5:3e:23:83:4d:44:
40:e2:31:21:37:db:9e:fe:45:ae:7f:aa:f3:b9:bd:97:49:56:
ad:7f:b2:6a:10:d4:d8:b8:44:b3:a6:7d:9a:d1:71:61:e0:6b:
c0:1f:01:a1:45:b5:dc:f3:d4:fa:cb:ee:2e:cd:4e:6e:f3:26:
52:01:7d:2b:32:79:20:70:ed:f8:c0:f8:7c:4b:f5:f6:8a:57:
38:21:ef:21:51:dc:0d:51:c0:1a:7c:56:bb:c7:43:5e:32:6a:
ea:ed:c3:8c:6b:ee:0b:5b:9f:f2:0c:8b:ff:37:30:b6:f2:2e:
d4:96:25:96:73:59:2d:6b:db:86:a8:12:c8:49:d4:3f:4d:ea:
7e:20:b5:09:8b:9c:d6:79:32:31:2c:9c:af:5b:54:77:f7:0a:
06:9c:ac:d3:b2:67:36:36:d0:a7:de:32:79:c7:42:1a:28:f4:
48:24:30:6a:d4:1d:cf:f4:be:cd:bd:b3:1d:66:28:15:e6:f9:
04:52:9d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:56:49 2023 by rpki-client on console-fra.rpki-client.org