Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/4NRloHi3phCb0SQpFYIvIfbJi6k.roa
File: 4NRloHi3phCb0SQpFYIvIfbJi6k.roa (raw, json)
Hash identifier: +W44DDOFu/mbuX4tLMFaS2TpkPLvQZccR/eVk6dTCAU=
Subject key identifier: E0:D4:65:A0:78:B7:A6:10:9B:D1:24:29:15:82:2F:21:F6:C9:8B:A9
Certificate issuer: /CN=5a4c4f96aa5a02cada83d4b88d49e6a73abd25f0
Certificate serial: 013F98
Authority key identifier: 5A:4C:4F:96:AA:5A:02:CA:DA:83:D4:B8:8D:49:E6:A7:3A:BD:25:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WkxPlqpaAsrag9S4jUnmpzq9JfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/4NRloHi3phCb0SQpFYIvIfbJi6k.roa
Signing time: Tue 22 Feb 2022 21:37:19 +0000
ROA not before: Tue 22 Feb 2022 21:37:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43522
IP address blocks: 91.198.45.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81816 (0x13f98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a4c4f96aa5a02cada83d4b88d49e6a73abd25f0
Validity
Not Before: Feb 22 21:37:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e0d465a078b7a6109bd1242915822f21f6c98ba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:57:56:4a:08:93:9d:2f:3a:6e:12:7c:8e:e4:
78:ae:c6:fd:76:d6:02:1b:ad:7b:86:e3:2a:49:b1:
cb:f5:12:47:ef:ee:89:4a:77:5e:54:34:9d:50:8f:
e1:2f:c8:9e:f8:ed:25:ba:aa:4a:47:ae:22:2e:47:
0c:5e:21:3b:62:11:3b:54:cc:a1:29:00:c5:42:e3:
a7:10:09:63:5a:cf:c1:e8:56:83:46:76:a1:86:d4:
b5:11:0d:74:5a:3c:3f:f1:af:36:af:89:b8:a8:51:
e0:a7:a3:cb:72:01:cd:18:61:76:fb:bb:7d:61:7c:
7d:b5:3b:0d:41:14:83:a1:17:6a:9e:4f:59:29:91:
cc:97:43:d1:7c:f6:20:5c:eb:18:da:a5:de:00:ac:
96:97:2b:dd:05:fe:61:c4:c3:b5:93:4b:62:a2:fe:
38:e6:31:a9:4a:64:50:41:79:d8:55:1c:fe:a8:46:
fa:98:ed:7d:d1:77:8b:5d:97:28:46:a8:c5:be:4c:
87:43:8e:bb:ee:eb:19:8f:24:27:40:cf:03:6c:09:
cc:08:27:57:f0:85:e7:84:14:aa:de:9a:36:52:2b:
de:18:7e:41:b2:10:04:ae:af:b7:b8:c9:18:28:c2:
07:25:de:7f:e5:08:9c:a9:4e:00:b3:2c:41:fa:bc:
8f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:D4:65:A0:78:B7:A6:10:9B:D1:24:29:15:82:2F:21:F6:C9:8B:A9
X509v3 Authority Key Identifier:
keyid:5A:4C:4F:96:AA:5A:02:CA:DA:83:D4:B8:8D:49:E6:A7:3A:BD:25:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WkxPlqpaAsrag9S4jUnmpzq9JfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/4NRloHi3phCb0SQpFYIvIfbJi6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/WkxPlqpaAsrag9S4jUnmpzq9JfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.45.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:1d:c1:77:56:3f:4b:26:72:ac:5c:53:1c:bf:fe:46:e9:5d:
fd:c7:f5:e3:52:2a:64:71:36:ab:9c:ba:9a:aa:b6:0c:0c:05:
0f:6d:43:7d:fa:4e:a4:b2:0c:2f:d3:62:d8:90:7d:10:85:e1:
a9:4a:f3:75:b7:44:33:e3:e6:af:39:f7:54:62:49:b4:6b:bb:
8a:c2:7f:7d:3d:d5:69:d2:0b:83:2b:58:70:c6:87:00:87:10:
be:94:8e:ee:a1:7b:d9:3c:cc:d5:4d:f2:47:fa:83:79:e2:b8:
fa:63:1c:97:7a:08:37:53:b4:ff:8c:7c:fd:b7:f7:5d:6e:81:
ed:7e:55:9a:9e:17:65:06:ec:b5:56:38:08:cc:70:c1:d6:1c:
78:5e:9a:d1:e3:3d:3b:8f:69:7c:cb:5f:33:63:0b:dc:65:83:
0d:b3:0b:0e:87:14:b6:72:f8:80:5a:25:96:e9:33:d0:65:39:
43:94:46:1d:2e:bb:e2:58:c5:ac:fc:b9:7b:2d:cd:19:f9:25:
18:71:06:d2:c3:a6:4a:6f:18:75:a4:3c:d8:27:7a:06:34:22:
02:b2:95:d6:f6:fd:d6:d5:78:ab:12:d9:96:5d:28:d7:ae:3f:
54:f7:c2:e7:8b:d5:f8:d2:72:9c:68:d0:d6:7f:61:45:61:19:
13:c4:d0:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:50 2024 by rpki-client on console-ams.rpki-client.org