Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/jAyHmW4qoQF6-59m73KRRN18qus.roa
File: jAyHmW4qoQF6-59m73KRRN18qus.roa (raw, json)
Hash identifier: u6/PSqCj5eNO/tbE0FW64VcTHtFzIHOcFn5T4PTcOMc=
Subject key identifier: 8C:0C:87:99:6E:2A:A1:01:7A:FB:9F:66:EF:72:91:44:DD:7C:AA:EB
Certificate issuer: /CN=237f7db033314c473cda194e0df79f1c375da3f4
Certificate serial: 0C6B33AD
Authority key identifier: 23:7F:7D:B0:33:31:4C:47:3C:DA:19:4E:0D:F7:9F:1C:37:5D:A3:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I399sDMxTEc82hlODfefHDddo_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/jAyHmW4qoQF6-59m73KRRN18qus.roa
Signing time: Wed 27 Apr 2022 07:06:00 +0000
ROA not before: Wed 27 Apr 2022 07:06:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6453
IP address blocks: 91.140.128.0/17 maxlen: 17
194.54.192.0/18 maxlen: 18
194.54.217.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 208352173 (0xc6b33ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237f7db033314c473cda194e0df79f1c375da3f4
Validity
Not Before: Apr 27 07:06:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8c0c87996e2aa1017afb9f66ef729144dd7caaeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:77:aa:c1:c5:25:3d:c1:20:e0:19:19:ac:9d:
de:ea:e3:99:0e:9d:9e:ae:ab:d5:77:4a:c4:d0:24:
71:0a:e9:19:5b:86:4c:9c:2a:6e:fa:a5:6e:e5:88:
83:1d:22:f5:2b:05:0a:a8:7a:38:70:af:5e:27:8c:
76:a6:d9:61:f7:2a:3c:ce:c3:46:7f:fe:86:81:98:
4d:49:2a:0c:3c:fc:67:50:ab:2e:d0:c8:80:80:3c:
b2:72:7b:42:9b:bd:92:ef:e7:6c:69:60:1c:cb:1e:
19:ef:fc:89:8c:f9:44:79:d4:83:f8:0b:f1:8f:31:
fb:dd:29:74:1d:50:a6:a8:c1:ff:d6:8b:df:eb:cb:
f2:d6:33:34:bf:bf:cf:76:7f:52:e9:44:6b:ab:93:
81:4e:9a:18:1d:ca:0d:2d:ce:f7:a8:0a:d5:97:aa:
90:e8:90:ab:c2:47:3e:97:9b:2e:92:91:76:80:30:
5e:f0:6f:4c:b4:06:9a:e3:dc:58:d7:3e:d9:17:5b:
03:64:8e:42:ea:f7:1a:7f:f0:61:a5:00:c2:72:6f:
33:62:c8:5b:02:b4:fe:0d:19:8a:78:fd:b6:eb:d5:
44:ed:78:da:50:03:53:36:9b:ac:38:2c:6f:6e:5e:
90:60:eb:b3:50:51:a1:4e:5d:e1:7f:1b:b5:98:6f:
5e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:0C:87:99:6E:2A:A1:01:7A:FB:9F:66:EF:72:91:44:DD:7C:AA:EB
X509v3 Authority Key Identifier:
keyid:23:7F:7D:B0:33:31:4C:47:3C:DA:19:4E:0D:F7:9F:1C:37:5D:A3:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I399sDMxTEc82hlODfefHDddo_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/jAyHmW4qoQF6-59m73KRRN18qus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.140.128.0/17
194.54.192.0/18
Signature Algorithm: sha256WithRSAEncryption
1d:79:8a:f3:ef:e5:70:e8:c0:b8:db:fa:6c:26:bf:9a:f6:e7:
93:c4:e4:a4:af:9a:a4:fd:4b:a0:d5:5b:19:f8:e3:18:a3:bb:
5c:46:95:45:ec:8d:bd:31:26:8f:9e:73:28:28:a4:b5:9a:65:
42:1a:d0:aa:d2:15:73:c5:cc:01:66:49:e6:ed:4b:6f:6a:39:
00:91:58:87:f7:b9:d2:03:f2:60:8f:45:2c:14:aa:94:33:e5:
e2:42:4d:b8:47:a6:9f:6c:b6:c9:67:94:fa:d6:8d:98:d8:e1:
91:c6:43:80:83:c2:09:c1:47:82:ec:21:13:11:90:ae:ef:43:
3a:76:9d:aa:37:a6:3c:3a:46:77:49:6f:52:2d:49:ec:82:8b:
8d:fd:65:ed:f6:22:d8:8e:06:21:7e:36:4d:94:75:c6:14:bb:
92:dd:5a:38:08:93:67:c9:9c:51:dc:8a:3e:a8:89:90:e4:b2:
59:22:34:aa:b3:5d:96:f9:1d:10:da:c9:bd:18:97:62:66:7a:
8c:a1:02:4c:53:32:a4:7b:d9:ac:cb:7e:d5:cb:a2:ec:45:44:
9c:18:30:62:21:b6:7c:21:58:f4:c8:e5:0b:d0:e3:a2:dd:09:
f8:4a:32:56:84:fe:6f:d5:a9:b2:ae:b1:98:49:a9:68:b6:3c:
82:23:70:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:58 2024 by rpki-client on console-fra.rpki-client.org