Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/C1x32-KglzSqnzx28cX5M-viAc8.roa
File: C1x32-KglzSqnzx28cX5M-viAc8.roa (raw, json)
Hash identifier: BUfmFXoz8eMwb74WW1onL5ZR466pkj9Kj9mh5sf8xq4=
Subject key identifier: 0B:5C:77:DB:E2:A0:97:34:AA:9F:3C:76:F1:C5:F9:33:EB:E2:01:CF
Certificate issuer: /CN=38180c074fbe598824c7003195b30aa4a366152c
Certificate serial: 035746F0
Authority key identifier: 38:18:0C:07:4F:BE:59:88:24:C7:00:31:95:B3:0A:A4:A3:66:15:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OBgMB0--WYgkxwAxlbMKpKNmFSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/C1x32-KglzSqnzx28cX5M-viAc8.roa
Signing time: Sat 01 Jan 2022 10:04:36 +0000
ROA not before: Sat 01 Jan 2022 10:04:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20682
IP address blocks: 91.235.251.0/24 maxlen: 24
91.235.248.0/24 maxlen: 24
91.235.249.0/24 maxlen: 24
91.235.250.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56051440 (0x35746f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38180c074fbe598824c7003195b30aa4a366152c
Validity
Not Before: Jan 1 10:04:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0b5c77dbe2a09734aa9f3c76f1c5f933ebe201cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:98:18:a2:4c:15:14:ae:29:09:38:aa:3c:29:
ee:92:88:35:11:55:65:d3:12:65:8a:be:90:01:64:
93:a7:05:3e:a8:bb:3d:2c:96:e0:22:0a:f7:b1:62:
e9:8b:a2:b0:06:78:24:30:eb:6c:ba:5e:13:27:44:
61:2d:c0:e2:6c:a4:9f:ed:88:54:85:d9:b5:c5:55:
96:0e:e4:c8:16:42:7a:95:90:3b:29:b8:85:a0:d6:
16:4e:71:ff:2d:4f:09:59:a2:3b:df:2a:8b:94:e6:
1c:6c:b6:e8:f0:ac:8f:fe:01:39:25:56:50:7f:ad:
70:99:2c:de:21:d9:23:54:d7:47:ef:18:da:80:b2:
41:62:7a:e5:22:15:94:38:67:cc:5b:97:1c:e6:6f:
ec:55:4f:71:53:6e:b3:5a:a9:79:22:cc:19:32:26:
34:ae:e3:9e:e1:d9:5e:e4:71:84:aa:5a:1e:47:fc:
cf:f8:8f:21:06:0c:84:e7:29:1c:95:3a:a1:c1:81:
d3:f1:82:bd:a6:b1:48:f6:2a:77:9b:ab:bd:ae:03:
bc:97:ee:3b:34:f2:cb:b1:4e:22:b3:a2:f4:24:87:
7e:fd:4e:98:1e:d2:52:d8:19:cc:73:6a:c9:d8:31:
31:1d:cc:77:3f:76:15:e0:eb:d5:be:e3:0f:3d:5d:
c0:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:5C:77:DB:E2:A0:97:34:AA:9F:3C:76:F1:C5:F9:33:EB:E2:01:CF
X509v3 Authority Key Identifier:
keyid:38:18:0C:07:4F:BE:59:88:24:C7:00:31:95:B3:0A:A4:A3:66:15:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBgMB0--WYgkxwAxlbMKpKNmFSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/C1x32-KglzSqnzx28cX5M-viAc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.235.248.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:d0:55:c5:73:4f:bd:63:eb:45:00:e6:00:5b:03:5f:83:3d:
e4:d3:6c:51:c8:65:2f:c9:7b:cf:1c:96:db:86:03:06:e1:ac:
c1:8f:8f:d0:ed:ab:8b:ec:f6:9f:e7:49:49:44:ab:cf:ac:3b:
bb:9c:6b:0a:dd:37:49:bb:b5:3d:90:2e:6b:26:4c:91:2f:73:
82:3d:4a:57:23:77:35:1f:4a:39:d5:fe:c3:e3:b2:c1:05:a6:
ac:3b:6a:30:0a:dd:97:e4:2a:17:9b:f0:03:90:60:bd:f6:25:
62:b0:d7:bf:f5:dc:35:67:8e:57:4f:50:47:d9:b4:8d:29:30:
fd:99:d6:17:93:a6:a7:76:93:ab:89:62:f4:96:11:f0:c2:07:
17:7e:55:66:1b:8d:d8:3a:45:1e:9d:9c:4d:73:bd:8f:ba:1e:
9c:cc:82:7d:34:e5:6f:d2:29:e5:c6:26:95:d8:fa:83:b8:89:
c7:c5:6e:19:09:28:dd:73:02:2e:f6:3b:76:6c:95:d3:93:44:
07:f2:2c:45:0b:19:dd:e4:22:6f:a4:1d:75:e6:19:e9:34:10:
78:70:24:da:d3:28:4f:e5:87:da:ee:91:50:a6:8e:9f:20:c5:
03:f8:bb:2b:13:4e:6f:73:ea:aa:d2:b4:dd:ff:cf:4a:bd:0a:
50:29:17:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:04 2024 by rpki-client on console-fra.rpki-client.org