Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/d430d9-d214-41c0-8e51-267a16b4629f/1/Cl326JqmJLKuPSY1GWIdk1q6ArY.roa
File: Cl326JqmJLKuPSY1GWIdk1q6ArY.roa (raw, json)
Hash identifier: b4GukLbp3Hps73xsI7RAutuci6nv4mW3lvHy8u5UMRA=
Subject key identifier: 0A:5D:F6:E8:9A:A6:24:B2:AE:3D:26:35:19:62:1D:93:5A:BA:02:B6
Certificate issuer: /CN=c092d8d5511b19ece456960f23bfa886ee1d570b
Certificate serial: 0184DC48A512799162EC9B47921A85DF2047
Authority key identifier: C0:92:D8:D5:51:1B:19:EC:E4:56:96:0F:23:BF:A8:86:EE:1D:57:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wJLY1VEbGezkVpYPI7-ohu4dVws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/d430d9-d214-41c0-8e51-267a16b4629f/1/Cl326JqmJLKuPSY1GWIdk1q6ArY.roa
Signing time: Sun 04 Dec 2022 08:37:38 +0000
ROA not before: Sun 04 Dec 2022 08:37:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210402
IP address blocks: 91.106.36.0/24 maxlen: 24
91.106.37.0/24 maxlen: 24
91.106.38.0/24 maxlen: 24
91.106.39.0/24 maxlen: 24
91.106.57.0/24 maxlen: 24
91.106.58.0/24 maxlen: 24
91.106.56.0/24 maxlen: 24
91.106.60.0/24 maxlen: 24
91.106.61.0/24 maxlen: 24
91.106.62.0/24 maxlen: 24
91.106.63.0/24 maxlen: 24
91.106.59.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:dc:48:a5:12:79:91:62:ec:9b:47:92:1a:85:df:20:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c092d8d5511b19ece456960f23bfa886ee1d570b
Validity
Not Before: Dec 4 08:37:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0a5df6e89aa624b2ae3d263519621d935aba02b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b9:ae:7b:a1:bb:88:52:af:4c:5d:4c:47:9c:
f9:dd:6a:a0:3f:21:91:e5:46:49:a9:1d:ce:b8:49:
6f:66:ab:0d:d0:ae:3b:ce:b4:fc:85:bb:0c:60:ab:
ae:d9:62:c7:2a:e7:c8:57:79:81:af:f1:18:4a:03:
c3:e7:2f:e5:a6:d2:7f:15:df:0f:cd:bf:0d:74:78:
4f:75:9a:df:fd:dc:29:be:42:ee:e0:9f:64:9e:0b:
b7:18:d3:7d:14:9d:39:7c:ab:e3:2e:b6:a4:28:71:
b5:ff:d6:3a:d0:6f:fc:b5:f3:4d:fd:70:94:b1:55:
91:a3:1f:34:84:ab:e5:d0:14:55:55:a1:ad:b0:14:
4a:f9:7b:2c:4a:0a:18:ea:ab:ca:d4:4b:7d:e5:03:
b4:6c:f7:eb:28:65:ca:9b:09:b3:45:46:f2:18:98:
87:46:9e:24:a7:4d:42:c7:bc:71:18:b8:12:48:ac:
2a:b2:47:e7:fa:53:c6:27:ab:26:7d:2d:07:d1:41:
ba:4c:fb:59:4f:c5:ad:06:24:6e:b5:0a:81:b5:ee:
ff:90:7c:45:02:2e:3e:a0:ba:1a:46:62:b4:33:9a:
5a:b1:bc:ea:24:3a:37:d9:23:87:75:a9:5c:c3:84:
f4:31:ca:0c:57:58:4d:55:42:2c:b3:70:1e:23:f8:
13:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:5D:F6:E8:9A:A6:24:B2:AE:3D:26:35:19:62:1D:93:5A:BA:02:B6
X509v3 Authority Key Identifier:
keyid:C0:92:D8:D5:51:1B:19:EC:E4:56:96:0F:23:BF:A8:86:EE:1D:57:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wJLY1VEbGezkVpYPI7-ohu4dVws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d430d9-d214-41c0-8e51-267a16b4629f/1/Cl326JqmJLKuPSY1GWIdk1q6ArY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d430d9-d214-41c0-8e51-267a16b4629f/1/wJLY1VEbGezkVpYPI7-ohu4dVws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.106.36.0/22
91.106.56.0/21
Signature Algorithm: sha256WithRSAEncryption
0a:b9:14:f3:73:90:86:e9:3b:e3:c7:15:c9:7f:d7:6c:e9:7a:
89:23:7e:1d:75:ac:ab:84:0f:07:09:79:42:ce:12:7d:6d:92:
c9:04:0e:3a:d7:7f:c7:69:04:01:7a:3e:a3:61:69:fb:5e:39:
80:a3:f4:17:e0:f6:4e:e4:38:7a:eb:04:03:14:56:a6:44:2b:
d3:9b:f8:dd:b4:12:21:6f:45:0f:54:46:eb:9d:9f:93:da:51:
4c:a4:f0:7b:66:96:c6:2a:64:f9:ef:ef:7d:72:11:b2:9d:0d:
b9:dd:c4:67:87:39:9d:93:2a:f2:ec:90:fd:bf:b6:55:15:6c:
7b:53:1c:fc:3b:50:e5:83:e0:ff:29:66:d0:c4:1c:67:72:73:
60:ba:dc:37:f9:73:c3:d0:ba:d5:98:e8:a4:4a:a1:4b:49:18:
46:8e:56:78:5b:48:57:95:d8:b3:fd:af:1d:4a:de:5e:07:e6:
11:fa:3b:46:58:f2:d8:6d:7a:a9:dd:e2:33:cc:72:3d:5c:e7:
b8:e0:5f:d7:17:07:7d:f1:e3:96:d6:36:5d:47:02:f9:2c:cd:
22:74:7a:f6:b3:41:4a:5e:d4:eb:d9:82:37:32:32:2b:ed:38:
02:1b:65:1e:9a:b4:72:a2:76:d1:3a:b2:bc:c0:72:8a:fb:2b:
ff:71:af:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:02 2024 by rpki-client on console-fra.rpki-client.org