Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/81f76f-d878-44a1-82c7-2ccb5f0c5f6b/1/lW-36hSjpPtNN79lKuVfndGB_zM.roa
File: lW-36hSjpPtNN79lKuVfndGB_zM.roa (raw, json)
Hash identifier: pXmx+CTS+BzHxMqOsvoF/Kf0AW5FQxGvoTDDM2XVWdY=
Subject key identifier: 95:6F:B7:EA:14:A3:A4:FB:4D:37:BF:65:2A:E5:5F:9D:D1:81:FF:33
Certificate issuer: /CN=5ab25a6c392b8e67a3ad21f60fd3311d6b7f1e5c
Certificate serial: 4F28AF
Authority key identifier: 5A:B2:5A:6C:39:2B:8E:67:A3:AD:21:F6:0F:D3:31:1D:6B:7F:1E:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WrJabDkrjmejrSH2D9MxHWt_Hlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/81f76f-d878-44a1-82c7-2ccb5f0c5f6b/1/lW-36hSjpPtNN79lKuVfndGB_zM.roa
Signing time: Sat 01 Jan 2022 01:56:16 +0000
ROA not before: Sat 01 Jan 2022 01:56:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41737
IP address blocks: 91.202.160.0/22 maxlen: 24
194.145.220.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5187759 (0x4f28af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ab25a6c392b8e67a3ad21f60fd3311d6b7f1e5c
Validity
Not Before: Jan 1 01:56:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=956fb7ea14a3a4fb4d37bf652ae55f9dd181ff33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b1:68:04:ae:60:65:a2:53:64:94:ab:62:67:
3f:3b:62:39:dc:9b:a3:2a:18:0e:15:ec:81:cf:51:
5f:cc:ee:e0:25:4a:f8:f2:9d:c8:2e:8d:e6:4b:d0:
ed:5f:93:32:46:68:30:51:6c:c3:2c:7e:db:9d:26:
8e:82:35:41:f6:b4:bb:0d:06:2e:99:be:81:bb:4e:
37:40:43:c3:03:bb:fa:70:e7:00:1a:6f:5d:a5:b3:
39:14:75:75:87:48:93:c2:0a:34:ab:64:37:f5:ca:
d4:06:3a:12:99:f3:ce:3b:41:c8:cb:29:29:8c:25:
e8:52:9e:98:43:d5:45:2f:90:7c:7c:5a:36:86:7a:
c7:2b:ff:f9:dd:c7:79:dd:6a:54:eb:ef:18:b7:40:
b6:43:ca:9a:a5:be:86:93:0a:ac:96:20:72:16:ba:
87:9c:8a:13:b2:1f:8c:be:21:78:cd:73:32:63:25:
50:fa:81:05:8f:49:82:f3:af:fb:7e:e2:bf:f5:fd:
b8:63:01:4b:e4:3c:18:93:21:9c:7c:8d:d8:ff:a1:
6b:cc:aa:86:6b:28:92:b3:44:a1:75:30:b2:e6:dd:
ab:93:4f:54:6f:68:19:9a:6c:51:20:16:d6:2f:10:
e7:d7:e9:ed:39:57:cd:f4:f0:4e:e4:6e:64:64:8f:
84:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:6F:B7:EA:14:A3:A4:FB:4D:37:BF:65:2A:E5:5F:9D:D1:81:FF:33
X509v3 Authority Key Identifier:
keyid:5A:B2:5A:6C:39:2B:8E:67:A3:AD:21:F6:0F:D3:31:1D:6B:7F:1E:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WrJabDkrjmejrSH2D9MxHWt_Hlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/81f76f-d878-44a1-82c7-2ccb5f0c5f6b/1/lW-36hSjpPtNN79lKuVfndGB_zM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/81f76f-d878-44a1-82c7-2ccb5f0c5f6b/1/WrJabDkrjmejrSH2D9MxHWt_Hlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.202.160.0/22
194.145.220.0/23
Signature Algorithm: sha256WithRSAEncryption
47:0f:56:a5:a6:61:d2:30:a4:cd:36:e3:29:b0:30:15:04:8f:
a6:49:a3:15:d4:29:ba:41:c7:1d:09:3e:6e:2f:38:c2:75:f6:
35:2a:c9:58:fa:3e:9c:68:b0:7f:4f:8f:36:ef:fa:cf:aa:fc:
29:40:46:0a:d3:17:6c:3d:6e:b3:f2:a0:bc:f3:48:3c:ef:e2:
64:80:e3:c2:ff:b0:e2:93:93:8e:98:24:50:23:fc:34:08:8a:
70:0d:93:74:74:02:59:7f:c9:39:e3:c4:24:52:f2:64:de:05:
e4:a9:f5:7b:26:21:cf:ae:59:40:4a:c4:7d:b6:46:3a:c6:d0:
c5:af:eb:1c:f2:fd:5f:0e:6b:bf:87:6d:0f:7a:b3:7b:07:73:
e3:6f:58:22:fd:08:69:62:d9:1e:fe:97:38:77:4e:d4:5a:fb:
1d:78:21:f9:18:13:22:ce:e8:eb:07:4a:8b:fb:12:dc:81:af:
c0:fd:f2:e8:93:9b:63:82:45:d0:b0:ac:b0:58:33:83:84:04:
dc:26:b9:2e:c1:88:74:b6:1c:3a:bf:e2:95:f6:30:39:40:bd:
97:2c:d5:77:6b:78:25:fb:9e:cd:1a:62:5e:d6:ff:7d:f3:2f:
10:a1:92:af:b1:c0:23:94:22:d0:f4:58:9f:15:61:91:4a:4f:
9c:04:90:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:59 2024 by rpki-client on console-fra.rpki-client.org