Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/Cw-O_UhgSj7y_59isEOyN832u8o.roa
File: Cw-O_UhgSj7y_59isEOyN832u8o.roa (raw, json)
Hash identifier: FW4+rDDKs4BM0fRU+AJmG/GEOkimvPQUZFfK54IU+vA=
Subject key identifier: 0B:0F:8E:FD:48:60:4A:3E:F2:FF:9F:62:B0:43:B2:37:CD:F6:BB:CA
Certificate issuer: /CN=38506d80ab592de7be0a331bbf4fa0068d41408a
Certificate serial: 0182C98D47D80EFDB9E5F6B32691FB4C1DD9
Authority key identifier: 38:50:6D:80:AB:59:2D:E7:BE:0A:33:1B:BF:4F:A0:06:8D:41:40:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OFBtgKtZLee-CjMbv0-gBo1BQIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/Cw-O_UhgSj7y_59isEOyN832u8o.roa
Signing time: Tue 23 Aug 2022 07:14:15 +0000
ROA not before: Tue 23 Aug 2022 07:14:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57136
IP address blocks: 91.230.248.0/24 maxlen: 24
194.105.143.0/24 maxlen: 24
194.105.142.0/23 maxlen: 23
194.105.142.0/24 maxlen: 24
194.126.205.0/24 maxlen: 24
194.102.117.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:c9:8d:47:d8:0e:fd:b9:e5:f6:b3:26:91:fb:4c:1d:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38506d80ab592de7be0a331bbf4fa0068d41408a
Validity
Not Before: Aug 23 07:14:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0b0f8efd48604a3ef2ff9f62b043b237cdf6bbca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fa:14:bb:bd:c3:07:21:f6:e7:d2:47:77:ee:
a1:63:95:69:10:f2:71:e3:30:37:c8:fa:8e:2b:48:
02:0d:57:b0:e7:50:18:c7:7b:d0:4a:6d:bc:85:b2:
f4:6e:a3:37:7d:fb:22:c2:22:b1:a5:be:ee:9b:2e:
89:0c:17:ab:9f:e9:2c:7b:5d:0e:7e:52:bb:66:d1:
2e:ea:ce:b4:48:9e:27:e9:79:79:ed:d3:fe:e3:ba:
fd:95:68:f5:5d:28:9b:37:2f:fb:83:63:df:39:79:
93:2a:6d:83:d3:ed:b5:8d:a7:96:2c:9d:cd:7b:67:
b4:f3:f5:8e:ad:ed:05:3c:73:f2:89:fe:cf:e4:27:
68:2a:08:1e:55:93:9f:c0:6f:8e:48:f1:10:52:cc:
92:df:41:a7:11:94:90:16:1b:1e:52:a9:df:9b:de:
2a:25:d7:3c:33:0c:c5:21:1d:3d:c2:27:09:34:5c:
db:a1:fc:c0:ee:91:4d:bd:96:15:0e:ec:bf:69:f4:
2a:a6:fe:49:8a:11:53:b4:58:4f:e2:67:b0:7d:97:
4e:13:50:1e:ff:42:4f:50:6d:d9:96:ac:6b:88:c8:
2a:3f:52:51:4a:a1:af:ac:6c:e3:96:ba:b9:3c:7d:
0e:1d:09:fe:6b:ef:d8:8c:cd:65:85:96:8c:ac:9b:
c8:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:0F:8E:FD:48:60:4A:3E:F2:FF:9F:62:B0:43:B2:37:CD:F6:BB:CA
X509v3 Authority Key Identifier:
keyid:38:50:6D:80:AB:59:2D:E7:BE:0A:33:1B:BF:4F:A0:06:8D:41:40:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OFBtgKtZLee-CjMbv0-gBo1BQIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/Cw-O_UhgSj7y_59isEOyN832u8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.248.0/24
194.102.117.0/24
194.105.142.0/23
194.126.205.0/24
Signature Algorithm: sha256WithRSAEncryption
53:b8:f6:22:86:53:36:16:e5:86:c0:d0:17:a8:2e:92:eb:67:
ce:86:89:67:98:8c:61:60:70:07:7f:9b:5d:d9:19:33:c4:f5:
4d:93:6f:22:6b:be:e6:e4:b6:18:77:79:04:51:6c:9b:aa:35:
55:91:47:3a:96:d1:d1:e0:3b:03:18:53:8d:6a:5c:79:48:33:
2a:c6:2b:28:c5:4c:58:e3:69:65:86:54:f3:0d:5f:4d:ee:a4:
9c:5f:92:db:d0:bb:54:29:e8:51:73:62:d4:e3:fb:84:6f:4f:
65:61:33:74:3d:fd:96:20:ab:0e:b5:b4:bd:12:22:96:d3:55:
9d:3a:37:04:3b:59:bf:0a:9b:e6:66:ef:d2:e6:51:d0:0c:43:
c7:6e:f3:c6:f9:d4:32:34:f5:82:cc:31:05:48:07:e8:80:51:
a9:f7:bf:be:8f:14:a4:38:72:15:a6:ac:99:50:87:fa:cb:f7:
99:a9:cc:57:c0:89:f8:54:7b:cb:39:83:4f:bb:36:9f:24:1a:
11:14:8e:97:36:e2:51:df:5c:c7:c2:13:55:ad:d4:8b:ca:2d:
4e:8c:f0:cf:b5:46:ac:2d:73:82:cb:93:1c:a0:1c:f7:81:8b:
ff:2e:85:c8:5d:19:7f:b3:6f:a7:05:47:2a:02:cf:32:fd:7a:
49:d9:18:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:13:43 2024 by rpki-client on console-ams.rpki-client.org