Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/7a681a-60ae-4ef3-b957-7a994dd3d32a/1/WjvmKCQM6gAJY9z61K5_o9yRrFE.roa
File: WjvmKCQM6gAJY9z61K5_o9yRrFE.roa (raw, json)
Hash identifier: 6+E7db6CNK4YJPumjcCpMizy8446WoA/Nn6S5EvtBeU=
Subject key identifier: 5A:3B:E6:28:24:0C:EA:00:09:63:DC:FA:D4:AE:7F:A3:DC:91:AC:51
Certificate issuer: /CN=83b31e4956a84e6b2a41244016acbc43ce81abbc
Certificate serial: 0F848498
Authority key identifier: 83:B3:1E:49:56:A8:4E:6B:2A:41:24:40:16:AC:BC:43:CE:81:AB:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g7MeSVaoTmsqQSRAFqy8Q86Bq7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/7a681a-60ae-4ef3-b957-7a994dd3d32a/1/WjvmKCQM6gAJY9z61K5_o9yRrFE.roa
Signing time: Sat 01 Jan 2022 16:05:38 +0000
ROA not before: Sat 01 Jan 2022 16:05:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48642
IP address blocks: 91.193.148.0/22 maxlen: 22
195.206.226.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 260342936 (0xf848498)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83b31e4956a84e6b2a41244016acbc43ce81abbc
Validity
Not Before: Jan 1 16:05:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5a3be628240cea000963dcfad4ae7fa3dc91ac51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6d:5c:4a:3a:f9:2a:d9:73:6b:c2:df:83:c6:
f1:d5:2e:9a:39:7c:c7:b1:60:97:69:7e:56:b2:75:
08:78:74:d4:be:62:93:03:28:67:ad:64:87:e4:8a:
4c:bc:6c:67:0c:ba:e6:0d:c4:47:1c:27:e1:af:86:
6b:30:34:f7:33:ea:9e:6d:73:6d:d5:38:41:23:97:
fe:c9:84:7d:5b:e0:e9:14:9a:5c:26:b9:61:7e:35:
ba:38:b1:aa:1e:8a:89:3b:ad:a4:f2:98:1a:96:20:
1e:d6:52:b3:a0:3f:c6:5d:a3:aa:86:d4:77:be:71:
80:26:3c:ab:2e:b1:b4:3b:78:fc:4f:78:e5:bf:05:
09:ef:c6:e9:55:78:36:ba:11:85:53:f0:5c:e4:8a:
60:b1:ea:0e:3e:1e:2c:69:3c:1b:f9:88:95:1f:31:
cc:f4:e0:0b:58:e9:d9:f6:b8:5e:48:8a:f0:ac:f3:
1e:da:bf:f2:c0:1e:3d:55:f8:07:63:be:8d:70:09:
50:6e:fb:42:e5:c1:91:0b:d2:83:74:dd:c6:c7:b7:
3e:5d:a0:e9:01:d7:e1:30:92:d8:29:ab:fc:4d:43:
39:ac:69:d3:fb:dc:9d:d5:60:26:7a:85:b0:ca:5e:
a8:a4:88:1b:85:a1:55:64:75:ed:33:e6:43:6e:83:
86:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:3B:E6:28:24:0C:EA:00:09:63:DC:FA:D4:AE:7F:A3:DC:91:AC:51
X509v3 Authority Key Identifier:
keyid:83:B3:1E:49:56:A8:4E:6B:2A:41:24:40:16:AC:BC:43:CE:81:AB:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g7MeSVaoTmsqQSRAFqy8Q86Bq7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/7a681a-60ae-4ef3-b957-7a994dd3d32a/1/WjvmKCQM6gAJY9z61K5_o9yRrFE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/7a681a-60ae-4ef3-b957-7a994dd3d32a/1/g7MeSVaoTmsqQSRAFqy8Q86Bq7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.148.0/22
195.206.226.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:12:ff:4f:2c:c1:e3:f7:d2:39:11:a7:42:94:d4:83:69:27:
ae:e0:77:2e:5d:16:62:6e:e4:e2:81:1f:74:02:55:7c:73:a0:
99:7b:7e:67:c8:1e:87:46:e0:c7:79:29:25:64:f1:0d:ed:bd:
04:d4:b4:b3:1a:06:7b:0b:97:e8:fa:ca:cb:f7:bd:af:c5:69:
71:92:5d:9c:ce:ad:63:6e:fb:04:e2:6f:aa:79:c5:4d:6b:16:
cd:af:ae:b5:98:39:2b:82:8e:cb:ae:4d:e1:ee:84:35:c3:a7:
34:c4:43:02:12:1c:2c:20:60:8c:1e:fd:f8:bd:b1:72:ff:cf:
47:0a:65:d0:dd:fb:ed:97:cb:75:46:cc:02:07:68:15:08:10:
87:c7:63:10:90:4a:a0:cc:e8:69:68:a2:ba:51:da:f2:09:7c:
ac:d1:92:37:d3:6f:79:73:4e:e0:d5:36:88:18:74:ee:e2:a1:
fd:2c:5c:e5:99:45:a8:c5:34:e9:e3:40:cb:e0:ad:e7:9e:93:
9c:d3:cb:2a:20:49:d4:0f:6e:cf:cd:2d:c7:ee:93:5f:22:ed:
a3:5a:34:ea:1a:5a:49:54:bb:3f:21:e9:84:70:23:d2:98:fd:
d9:d8:b7:e0:11:c1:c9:b3:79:bb:20:67:c5:a4:15:d9:46:b3:
6f:19:bb:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:59 2024 by rpki-client on console-ams.rpki-client.org