Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/93dfd9-d543-4099-b9de-c7bca03b8836/1/oIemAXbHnEIA_gOZHhNXrNd3nU4.roa
File: oIemAXbHnEIA_gOZHhNXrNd3nU4.roa (raw, json)
Hash identifier: ich5v8NBkkqoL9GIKZcstQ6kZcfVg2Jm5gkhIIuVuZU=
Subject key identifier: A0:87:A6:01:76:C7:9C:42:00:FE:03:99:1E:13:57:AC:D7:77:9D:4E
Certificate issuer: /CN=c2e882c776c64fef5839be49eb8aca3fc75b10a7
Certificate serial: 0184CD4D86E7C25BF947E87C028CE84318F8
Authority key identifier: C2:E8:82:C7:76:C6:4F:EF:58:39:BE:49:EB:8A:CA:3F:C7:5B:10:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wuiCx3bGT-9YOb5J64rKP8dbEKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/93dfd9-d543-4099-b9de-c7bca03b8836/1/oIemAXbHnEIA_gOZHhNXrNd3nU4.roa
Signing time: Thu 01 Dec 2022 10:48:40 +0000
ROA not before: Thu 01 Dec 2022 10:48:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49468
IP address blocks: 91.213.188.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:cd:4d:86:e7:c2:5b:f9:47:e8:7c:02:8c:e8:43:18:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2e882c776c64fef5839be49eb8aca3fc75b10a7
Validity
Not Before: Dec 1 10:48:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a087a60176c79c4200fe03991e1357acd7779d4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8a:98:a4:cb:9a:d6:ef:74:51:62:c2:23:67:
88:dd:38:3b:c1:72:d4:1e:d0:71:2c:7b:61:32:9c:
05:54:b2:dd:25:5f:18:04:aa:82:03:b7:34:55:d9:
48:49:1d:05:c9:a5:6c:af:20:54:e0:97:ab:ac:56:
63:90:ce:8b:bd:9f:19:d1:83:d1:2e:d9:57:27:1c:
ba:8c:de:8e:8a:b9:f1:ba:7d:2a:25:2b:e5:e7:b2:
62:80:12:7f:8d:ab:4c:8a:68:c3:9e:7d:5e:28:cd:
04:a2:9d:06:cb:82:dd:aa:eb:e2:06:71:2e:99:2f:
77:2e:95:30:54:eb:1b:ef:63:15:a9:24:dc:48:99:
f5:31:c5:45:dc:ba:69:c0:85:44:6a:47:0b:63:fc:
fc:b2:cd:dd:c0:c5:91:da:60:35:96:c3:db:21:21:
04:99:87:41:cb:36:0d:69:92:5c:30:c3:8f:92:aa:
6f:12:c9:b2:c4:78:c0:aa:5c:07:cb:79:be:c0:88:
ee:fa:20:83:f4:53:7f:c3:ad:39:0e:82:d2:0b:ce:
3e:5d:50:7c:89:9d:09:dd:85:f6:26:33:1b:d7:87:
20:fc:4a:62:80:00:3b:c3:e7:09:14:0b:cb:73:34:
56:5e:68:2c:b7:d2:d6:cd:dc:c7:13:49:e7:ad:77:
be:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:87:A6:01:76:C7:9C:42:00:FE:03:99:1E:13:57:AC:D7:77:9D:4E
X509v3 Authority Key Identifier:
keyid:C2:E8:82:C7:76:C6:4F:EF:58:39:BE:49:EB:8A:CA:3F:C7:5B:10:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wuiCx3bGT-9YOb5J64rKP8dbEKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/93dfd9-d543-4099-b9de-c7bca03b8836/1/oIemAXbHnEIA_gOZHhNXrNd3nU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/93dfd9-d543-4099-b9de-c7bca03b8836/1/wuiCx3bGT-9YOb5J64rKP8dbEKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.188.0/24
Signature Algorithm: sha256WithRSAEncryption
54:5d:27:1d:cc:ab:e8:b5:12:38:a1:6b:fa:10:34:01:4e:bc:
ab:dc:c3:95:a6:91:84:5d:50:0d:a7:0d:59:10:d8:f8:85:c0:
57:34:1d:f3:3e:90:a6:0b:1f:52:9d:0b:e7:ac:35:04:62:65:
f9:71:6a:eb:72:9a:fb:39:3f:16:3b:fb:60:be:a6:c1:67:9d:
b3:bb:92:19:93:0f:c0:21:88:59:df:ca:57:96:f4:33:5b:35:
e9:67:ef:1e:c5:fd:5d:2a:98:2e:ff:14:23:54:0d:f4:67:09:
b6:58:64:0e:f3:e9:56:37:c6:b4:69:47:39:fa:d5:73:9b:8b:
81:01:8f:81:56:8b:c3:89:cf:8f:c8:c6:b4:ad:e2:01:d3:af:
78:fe:4e:f5:4b:a4:82:9e:64:78:5b:31:68:5c:26:50:de:32:
b6:ef:cb:44:13:6d:71:3b:61:04:2b:a5:00:3b:c5:03:fe:30:
8b:be:b4:9e:4f:c8:d6:48:02:65:cf:65:dd:f7:92:bd:13:8b:
43:39:8b:5b:6b:b4:8b:28:5c:a8:a8:67:13:79:0b:34:fc:18:
08:6c:2c:bc:c2:3a:cb:9b:db:27:c9:45:9f:18:36:e4:e4:8c:
41:0b:98:1f:66:27:ea:fa:35:30:cb:df:58:b5:06:ff:94:38:
27:9f:2c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:09 2024 by rpki-client on console-fra.rpki-client.org