Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/OmlLeqvck_pCUvplXZMxfjk0LXI.roa
File: OmlLeqvck_pCUvplXZMxfjk0LXI.roa (raw, json)
Hash identifier: fL5NI6WB+Zf3DEj++LerAa7fE+OhAlU55cJVMh0KsmQ=
Subject key identifier: 3A:69:4B:7A:AB:DC:93:FA:42:52:FA:65:5D:93:31:7E:39:34:2D:72
Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Certificate serial: 1B6AED45
Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/OmlLeqvck_pCUvplXZMxfjk0LXI.roa
Signing time: Sat 01 Jan 2022 10:02:40 +0000
ROA not before: Sat 01 Jan 2022 10:02:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44768
IP address blocks: 91.120.29.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 459992389 (0x1b6aed45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Validity
Not Before: Jan 1 10:02:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3a694b7aabdc93fa4252fa655d93317e39342d72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:53:9a:17:25:5b:56:a3:89:dc:11:21:54:a9:
67:f4:0a:54:d2:db:40:24:27:1d:2a:5d:59:31:5b:
c9:85:de:60:8e:b9:53:d5:84:01:c9:30:b3:25:9b:
0f:02:61:d9:6d:9b:83:29:57:6e:69:00:c2:be:ef:
33:4b:a2:04:d6:0b:3d:8f:ad:b9:fb:1e:da:9c:55:
e8:3e:10:d8:15:ba:19:df:cd:f3:99:f6:09:d1:07:
35:8f:2b:26:ed:0d:c2:78:28:b4:ac:a9:89:39:22:
2e:d5:9f:c8:5f:ff:8f:ff:90:ba:56:ae:3c:2c:db:
f6:3e:9e:c0:e8:3b:6c:d7:80:76:10:94:81:05:d9:
0c:83:d2:ee:dc:81:ee:39:6d:05:a8:64:92:f0:22:
a8:21:a0:21:f3:d0:e3:28:fe:1e:2a:52:a8:8b:91:
0c:95:21:30:2b:1d:fe:aa:22:7c:e9:8c:af:e5:df:
9e:f6:b8:38:a3:86:29:c0:29:c5:9d:08:74:8d:d2:
db:40:be:50:9f:e2:e3:2b:73:21:31:38:cd:73:e8:
63:fa:84:55:02:2f:6a:50:52:f9:e2:3f:5d:6f:dc:
c8:fb:a9:73:3f:32:ca:71:f4:85:6c:59:ec:ce:45:
3f:dc:1e:20:bf:82:0e:06:aa:02:87:6b:7d:a7:9d:
ce:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:69:4B:7A:AB:DC:93:FA:42:52:FA:65:5D:93:31:7E:39:34:2D:72
X509v3 Authority Key Identifier:
keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/OmlLeqvck_pCUvplXZMxfjk0LXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.120.29.0/24
Signature Algorithm: sha256WithRSAEncryption
87:41:da:e9:d7:cb:da:40:b0:25:06:c1:b0:e0:4e:f8:a6:50:
9d:11:ab:5d:2c:d4:0d:76:a6:64:4e:39:a7:9a:1f:b0:ef:f9:
41:63:00:de:14:42:08:32:d6:e0:53:d9:9b:c1:f3:3a:aa:4a:
f3:00:9e:e5:bc:f1:e9:c7:21:d0:80:3b:74:30:a5:19:7f:9d:
1f:a7:05:b0:e7:fa:c6:ba:2d:ea:66:53:86:ad:5b:66:9c:ce:
bc:96:1d:f5:c8:c2:25:d5:7b:75:84:e8:5f:5d:6b:6f:b2:2e:
53:50:6f:65:b0:d5:ca:fc:b9:7d:50:de:29:ac:3c:4f:53:b2:
20:8c:f8:75:c3:8c:99:1e:65:c2:13:01:a7:a9:6c:a1:52:ac:
a9:40:14:9b:e2:9c:46:7b:bf:ff:31:f4:92:b3:15:a0:01:30:
bc:2a:05:8a:a2:80:d1:0c:61:4b:c8:b8:ed:72:83:f7:ce:a1:
ef:a1:7c:5e:cc:c4:09:2a:6d:49:00:83:6d:a2:77:c6:49:c8:
b0:67:e8:37:0e:d2:39:2c:95:73:df:94:4d:75:20:f1:42:6a:
47:3c:b0:bc:64:7b:a0:4e:36:90:9f:50:ab:8a:14:05:81:eb:
9f:1c:57:c4:28:c0:16:9c:e1:f8:40:97:d4:54:6a:87:cb:a2:
e0:ce:52:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:17 2023 by rpki-client on console-fra.rpki-client.org