Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/wX84wEZu0ux7Vmoc9J_M3o6HOxw.roa
File: wX84wEZu0ux7Vmoc9J_M3o6HOxw.roa (raw, json)
Hash identifier: L+ePUF5kFP8T/Gdjrlu+Ror2CZJus8YAIq4SSbDHE7w=
Subject key identifier: C1:7F:38:C0:46:6E:D2:EC:7B:56:6A:1C:F4:9F:CC:DE:8E:87:3B:1C
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 44656540
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/wX84wEZu0ux7Vmoc9J_M3o6HOxw.roa
Signing time: Sat 01 Jan 2022 03:58:13 +0000
ROA not before: Sat 01 Jan 2022 03:58:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 215
IP address blocks: 90.83.218.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1147495744 (0x44656540)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 03:58:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c17f38c0466ed2ec7b566a1cf49fccde8e873b1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:06:22:24:d7:b9:cf:6d:be:d9:fe:0f:d2:67:
40:20:71:69:10:45:99:de:0b:3a:68:ee:e8:90:e3:
d2:0d:2e:50:97:f6:c1:71:57:b2:fa:49:4c:c1:48:
8a:f5:ee:2a:40:61:7c:61:b4:d4:97:77:92:a2:24:
1d:a3:60:26:44:35:29:f1:3b:95:c0:50:c8:05:0a:
1a:56:e5:bf:92:ad:14:d2:46:82:27:28:05:1a:bc:
fb:cf:2f:f8:c7:88:ed:6c:bc:fb:1d:69:f5:c4:2a:
75:96:35:ae:4a:05:21:23:90:07:1b:d0:d5:3f:f0:
e8:0a:81:36:59:a9:e8:87:2e:cc:ff:d5:0a:e9:ed:
4c:9b:fc:42:70:c9:36:23:5a:12:15:26:4f:8f:bd:
a9:f7:3d:bf:03:74:54:d6:26:05:f6:47:23:53:01:
fd:05:a8:5c:55:51:99:04:72:b9:eb:98:03:16:68:
fa:70:0b:a2:d5:11:d1:46:de:f0:a8:3d:20:c0:b0:
9d:ac:b5:42:08:3d:d4:28:e6:5f:56:5c:3d:f2:8a:
c1:6e:d2:ab:d1:a4:76:a4:ba:3a:50:33:b2:43:5b:
4f:db:7c:47:44:97:e3:9e:3d:35:5a:db:89:46:a2:
70:22:9f:2d:29:f6:14:2d:e8:9c:10:a0:83:33:42:
d4:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:7F:38:C0:46:6E:D2:EC:7B:56:6A:1C:F4:9F:CC:DE:8E:87:3B:1C
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/wX84wEZu0ux7Vmoc9J_M3o6HOxw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.83.218.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:7b:be:78:08:14:ee:bd:f8:7d:55:a5:54:4c:c2:ee:91:3c:
af:3b:43:af:6e:6b:c4:99:ce:7e:9a:df:5b:5e:10:5d:a7:62:
d9:58:84:bd:bb:e4:69:96:00:b0:63:38:2f:c1:cf:76:87:30:
9e:7c:53:fa:5f:5a:e3:4a:bf:70:d8:9d:92:75:90:66:c9:bc:
b5:ca:3b:f8:f5:50:7a:18:8d:88:c7:65:6a:85:f1:78:45:35:
f6:ad:c2:ff:81:94:58:3a:1e:e5:13:92:b7:d8:f4:3d:80:59:
31:59:73:f5:33:8e:2f:8d:67:4b:5a:37:ac:a8:f5:bf:32:95:
55:c4:aa:de:aa:08:bc:5b:c8:bc:ff:9e:c1:d1:75:72:57:c7:
3b:5d:ea:67:42:59:ac:b8:00:0a:54:2b:02:1b:d7:10:19:b0:
fb:2e:be:a0:0e:5e:60:00:c4:b7:e0:b2:20:ca:d5:50:56:49:
ff:92:52:bf:d6:f0:d8:7b:a1:4a:90:4d:72:45:5c:3d:ea:0b:
b5:69:0f:a9:b7:d8:e2:b6:bc:6e:d7:eb:f9:7f:c3:6e:a1:ba:
52:24:c5:66:53:4e:36:4a:b9:c6:62:9b:30:a2:a5:e3:e6:8c:
8e:d0:55:95:0e:d2:07:6c:70:9c:01:31:05:fd:d5:a6:a0:00:
a2:81:95:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:20 2024 by rpki-client on console-ams.rpki-client.org