Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/w0g-XsJD1gaGvYG-YDTeWRiI71E.roa
File: w0g-XsJD1gaGvYG-YDTeWRiI71E.roa (raw, json)
Hash identifier: 7jATr3JFC4/+2/9c2g5Of+TDepgjjkyiTB/CL//bP7Q=
Subject key identifier: C3:48:3E:5E:C2:43:D6:06:86:BD:81:BE:60:34:DE:59:18:88:EF:51
Certificate issuer: /CN=dcfae7d4e69d42e4f4c95d99f482b9a944dbefc8
Certificate serial: 038E47F4
Authority key identifier: DC:FA:E7:D4:E6:9D:42:E4:F4:C9:5D:99:F4:82:B9:A9:44:DB:EF:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Prn1OadQuT0yV2Z9IK5qUTb78g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/w0g-XsJD1gaGvYG-YDTeWRiI71E.roa
Signing time: Sat 01 Jan 2022 05:54:46 +0000
ROA not before: Sat 01 Jan 2022 05:54:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212329
IP address blocks: 91.236.64.0/22 maxlen: 24
185.216.48.0/24 maxlen: 24
2a10:a700::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59656180 (0x38e47f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcfae7d4e69d42e4f4c95d99f482b9a944dbefc8
Validity
Not Before: Jan 1 05:54:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c3483e5ec243d60686bd81be6034de591888ef51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7c:6c:fb:69:f5:77:fd:f6:8a:73:ba:04:a3:
b4:f7:ff:2b:96:c3:de:43:45:e6:f6:42:89:e3:37:
34:36:c0:76:39:5d:45:d0:10:dc:d5:11:00:8c:62:
18:ad:e6:e5:f7:17:fa:56:bd:30:4a:17:9c:6f:21:
c7:1c:98:64:b2:3b:bb:ef:de:ec:45:f7:0f:5e:b3:
ac:47:21:43:00:3c:13:96:6d:99:d9:61:1a:54:98:
b5:e1:1f:f8:5d:f4:21:c4:f7:1b:d7:5f:4d:1a:2d:
74:3e:d5:97:b6:0b:4a:87:ae:a8:c3:c4:f1:0a:ca:
f8:12:b5:46:57:d4:ec:16:4d:7c:a2:eb:56:5b:fc:
64:fc:9e:0f:e3:ed:0b:5a:00:4e:42:31:f4:1a:8d:
7b:80:bc:b9:5f:39:21:18:80:91:be:be:11:19:32:
72:bb:08:a6:84:e9:52:a2:aa:53:1b:ef:bd:50:40:
9b:97:7b:3a:08:d7:0c:50:54:bf:81:c5:88:3e:5e:
fc:97:81:e4:d0:3c:a3:3c:14:41:01:60:f3:df:77:
6f:ae:08:9b:3a:75:e5:4d:70:dc:a4:7b:ec:67:3b:
d5:f9:dc:e1:ca:75:ec:29:c0:f9:1a:ea:0f:01:ed:
1f:1a:c1:7f:0b:d2:0f:18:75:b1:3a:48:ef:d9:c1:
25:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:48:3E:5E:C2:43:D6:06:86:BD:81:BE:60:34:DE:59:18:88:EF:51
X509v3 Authority Key Identifier:
keyid:DC:FA:E7:D4:E6:9D:42:E4:F4:C9:5D:99:F4:82:B9:A9:44:DB:EF:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Prn1OadQuT0yV2Z9IK5qUTb78g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/w0g-XsJD1gaGvYG-YDTeWRiI71E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/3Prn1OadQuT0yV2Z9IK5qUTb78g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.64.0/22
185.216.48.0/24
IPv6:
2a10:a700::/29
Signature Algorithm: sha256WithRSAEncryption
07:5a:42:53:b7:c8:56:1b:51:58:41:37:d3:b6:bf:0c:61:65:
bc:fe:1c:b9:35:e4:08:6a:3b:c1:75:b2:a6:69:6f:21:57:62:
73:53:1e:2f:37:21:14:b3:c0:4f:2c:c4:a3:fe:f7:63:19:06:
ad:e7:78:cd:50:1d:e9:95:2a:a8:87:05:f8:32:79:b9:1b:b3:
25:55:a4:36:60:c7:83:f5:bb:f4:6b:b0:12:35:c7:c9:3a:f4:
b7:3f:8c:56:35:85:1d:2d:ce:60:c0:49:95:1e:42:9e:41:86:
43:ec:91:f7:e0:51:8e:83:8f:65:54:43:6e:55:73:33:46:97:
6f:2c:29:2e:25:27:ce:d3:6e:24:7b:fd:5c:fc:f8:07:bb:a4:
70:b7:af:9e:88:4f:77:0a:63:f1:f2:12:28:e5:3d:e0:4b:10:
b9:4d:fa:47:6a:1c:6c:54:6e:bd:b6:12:9e:ac:ef:7a:1c:ac:
c8:96:36:2f:4f:39:ef:e9:42:a2:b8:14:ca:47:15:b3:60:30:
2a:33:3a:c8:4d:dd:16:ad:32:49:b4:0a:fc:52:8e:5e:0c:81:
42:7c:bf:a7:56:ca:ec:f9:7d:d4:79:e3:53:d4:92:03:bc:a1:
97:e1:ec:43:bd:b5:3e:69:99:68:7a:88:0f:cd:28:ca:ec:4e:
f3:23:ee:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:02 2024 by rpki-client on console-fra.rpki-client.org