Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/vQOCLzXlQYBnN2m3dIfyAYe-N2U.roa
File: vQOCLzXlQYBnN2m3dIfyAYe-N2U.roa (raw, json)
Hash identifier: AEOrVJlcXADTS5CWU0cd0eb4ziPrKpoRfD4OeFasI3s=
Subject key identifier: BD:03:82:2F:35:E5:41:80:67:37:69:B7:74:87:F2:01:87:BE:37:65
Certificate issuer: /CN=5d82ca6f8eb685a573e5d1d91f8f06121ab02a37
Certificate serial: 02FF1328
Authority key identifier: 5D:82:CA:6F:8E:B6:85:A5:73:E5:D1:D9:1F:8F:06:12:1A:B0:2A:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYLKb462haVz5dHZH48GEhqwKjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/vQOCLzXlQYBnN2m3dIfyAYe-N2U.roa
Signing time: Sat 01 Jan 2022 16:07:35 +0000
ROA not before: Sat 01 Jan 2022 16:07:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198114
IP address blocks: 91.231.192.0/22 maxlen: 22
91.231.192.0/24 maxlen: 24
91.231.193.0/24 maxlen: 24
91.231.194.0/24 maxlen: 24
91.231.195.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50271016 (0x2ff1328)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d82ca6f8eb685a573e5d1d91f8f06121ab02a37
Validity
Not Before: Jan 1 16:07:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bd03822f35e54180673769b77487f20187be3765
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:25:34:0c:1f:8a:7f:fe:b4:ed:40:97:63:76:
ff:a8:13:1b:2f:d4:cb:dd:6c:c1:cf:51:b0:26:5e:
13:b6:dd:40:e9:f0:0d:27:93:ab:56:45:da:6e:72:
89:b5:94:25:a1:49:fc:f5:25:17:58:57:bf:49:95:
3c:40:53:82:eb:76:b7:60:8d:47:01:37:14:21:76:
df:27:6d:3f:c1:8b:e0:84:8b:e4:3e:1f:05:26:0b:
37:78:c4:ed:e7:c5:59:81:b5:42:06:a4:78:fb:fa:
38:48:d4:77:90:b9:bb:e9:e3:cf:44:fd:14:5b:9c:
d8:5b:8a:f5:c0:82:87:eb:7d:69:c6:d7:75:5f:1e:
32:d0:2c:a2:73:fb:0e:4c:78:ea:93:94:b1:a7:f2:
5f:8c:ad:49:90:4a:74:ec:16:dd:65:42:3e:a7:3c:
9c:87:f1:b4:81:ff:4a:30:4d:ef:a1:bb:55:77:a2:
ca:39:6d:a2:d7:e5:f4:a0:f9:c6:52:e1:38:fe:f6:
3f:8f:46:56:37:b2:f6:a5:2d:75:be:50:0a:1f:c9:
f0:25:af:9a:95:43:f4:66:0d:2c:33:11:3a:04:6c:
b1:fe:d2:98:99:0a:62:22:06:1e:1e:74:cd:60:a8:
09:8d:a6:b8:18:b3:48:e2:2e:c9:f0:3b:30:e5:18:
d5:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:03:82:2F:35:E5:41:80:67:37:69:B7:74:87:F2:01:87:BE:37:65
X509v3 Authority Key Identifier:
keyid:5D:82:CA:6F:8E:B6:85:A5:73:E5:D1:D9:1F:8F:06:12:1A:B0:2A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYLKb462haVz5dHZH48GEhqwKjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/vQOCLzXlQYBnN2m3dIfyAYe-N2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.192.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:9d:3f:ab:f9:e3:eb:5f:bf:5a:71:f0:5f:f2:56:09:52:fc:
83:3b:27:19:b2:b7:3a:46:6a:c9:4a:4d:9c:a4:c8:50:62:67:
c7:b1:41:8f:a2:ee:15:c3:8a:b2:73:12:48:80:7c:5e:88:21:
b5:b2:a4:77:7d:fb:2b:7f:ea:28:c6:57:b3:b4:17:33:b3:57:
4c:78:21:95:c7:02:ea:3a:a6:08:1d:71:13:9e:df:1b:b3:8e:
71:41:76:74:61:53:f8:94:5c:a5:14:0e:8f:cc:23:a8:42:f4:
e8:f9:a3:1c:8c:4b:fa:b8:ff:5a:05:75:ec:10:26:87:cd:55:
a7:e4:c5:10:8e:5a:42:da:a1:e3:fb:31:9c:d9:1f:a7:ff:fd:
38:36:ba:44:9a:4c:6a:61:9c:8c:e4:25:39:64:7a:28:08:ec:
5a:d2:04:81:ff:03:6c:e3:74:b4:6d:32:0e:1f:b6:66:b4:4d:
07:cf:da:f5:66:ca:ee:2f:bb:71:15:18:17:75:2e:7e:47:7c:
0f:03:fb:96:54:41:aa:b6:97:c6:50:59:52:50:35:2e:4a:28:
42:40:10:4d:9a:b5:1b:d4:89:c7:37:e1:90:8f:ed:2d:be:af:
34:49:44:9a:66:81:41:c1:f5:7b:3b:cd:4a:d7:5a:34:6d:56:
4e:46:65:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:40 2024 by rpki-client on console-ams.rpki-client.org