Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/w1QvOwejBUnzUuxgb_zlD7x6cZs.roa
File: w1QvOwejBUnzUuxgb_zlD7x6cZs.roa (raw, json)
Hash identifier: TsRNJb5XD/0lXTB30YZGaqu+yOHEMvUclqQ+/vcBKes=
Subject key identifier: C3:54:2F:3B:07:A3:05:49:F3:52:EC:60:6F:FC:E5:0F:BC:7A:71:9B
Certificate issuer: /CN=f29859b70ea450e13ada8724c0eb6beecc8daa91
Certificate serial: 018BFAE2110B45A8C2CF8BADA7CD01296A1D
Authority key identifier: F2:98:59:B7:0E:A4:50:E1:3A:DA:87:24:C0:EB:6B:EE:CC:8D:AA:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8phZtw6kUOE62ockwOtr7syNqpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/w1QvOwejBUnzUuxgb_zlD7x6cZs.roa
Signing time: Thu 23 Nov 2023 06:33:21 +0000
ROA not before: Thu 23 Nov 2023 06:33:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43807
IP address blocks: 91.198.160.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:fa:e2:11:0b:45:a8:c2:cf:8b:ad:a7:cd:01:29:6a:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f29859b70ea450e13ada8724c0eb6beecc8daa91
Validity
Not Before: Nov 23 06:33:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c3542f3b07a30549f352ec606ffce50fbc7a719b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:94:8d:5b:33:9c:09:ea:34:b6:ad:dd:69:5e:
86:c4:b4:60:04:a9:10:f7:ac:da:05:db:36:d3:83:
e5:9a:5f:42:e0:f3:eb:73:4f:1d:6e:81:e8:f9:96:
ba:d1:e9:7c:b9:a0:9c:5c:5a:f0:c5:2d:38:9f:e7:
35:2d:e6:28:5b:86:42:96:f5:e4:5f:f4:86:30:2a:
46:8a:a8:dd:42:4f:56:b4:66:0a:2a:12:8f:a1:69:
4d:18:d5:d2:ee:b2:53:4c:3a:91:72:9d:9e:79:05:
c3:ce:37:22:f1:9c:1b:3c:de:6c:69:68:8f:72:d0:
2a:55:aa:21:3e:8c:7a:ce:4a:5c:71:d8:d1:7f:8c:
dc:5f:a4:b0:61:9f:c2:ac:72:b5:11:54:5a:11:a1:
0e:f8:75:99:7c:ff:f6:ca:a1:89:ea:dc:9d:ba:bb:
cb:f2:5f:66:58:db:ed:cb:1a:86:2b:89:5f:47:73:
5d:7d:3d:51:b0:69:d8:54:90:ca:f6:f9:27:75:fc:
fa:a4:c2:a0:e8:2b:9a:6c:fc:d6:70:66:75:f6:0c:
c9:78:aa:b2:4b:81:ac:ea:c5:a4:3e:72:fc:23:1b:
66:56:39:9f:bf:e5:1c:96:db:10:41:2b:8a:c6:99:
a3:2f:93:d6:6e:79:20:a1:b2:8a:3d:10:b0:87:a0:
59:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:54:2F:3B:07:A3:05:49:F3:52:EC:60:6F:FC:E5:0F:BC:7A:71:9B
X509v3 Authority Key Identifier:
keyid:F2:98:59:B7:0E:A4:50:E1:3A:DA:87:24:C0:EB:6B:EE:CC:8D:AA:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8phZtw6kUOE62ockwOtr7syNqpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/w1QvOwejBUnzUuxgb_zlD7x6cZs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/8phZtw6kUOE62ockwOtr7syNqpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.160.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:a6:18:27:1d:32:68:47:c1:0b:44:c9:0f:34:83:51:af:67:
49:90:41:74:0f:7c:38:41:de:47:b6:94:ce:78:9d:94:5c:a2:
7a:7b:71:53:28:fd:bc:bf:49:93:dd:cb:25:20:a4:dc:16:01:
4c:7f:61:91:3f:91:06:46:71:67:7f:1d:0a:09:c2:31:48:ca:
1c:ad:ab:c6:64:ff:80:55:8a:93:1b:9f:63:da:0e:11:08:a4:
5a:59:71:8d:64:84:43:a4:56:1d:29:76:ab:34:ba:eb:0c:5b:
a8:83:bf:fb:1f:be:bb:95:ab:5a:e4:66:c3:e5:f0:29:4e:d7:
e3:74:43:1f:16:a4:63:5e:59:98:4e:74:b1:5a:69:a7:0e:be:
7e:0a:f2:6a:22:57:7a:18:37:36:eb:52:f8:83:51:25:a5:68:
ad:04:a6:0d:01:d5:df:25:8d:70:f9:f7:48:05:e9:4b:84:a7:
c4:66:4d:ef:3a:e4:e2:9a:a7:9c:ae:8c:fc:5f:e4:fb:9a:02:
26:bd:fa:82:37:f1:61:36:68:91:0d:c0:67:5b:b1:30:c4:cf:
ee:56:85:f4:da:be:3b:09:cc:71:a3:fa:09:45:22:9b:9e:d8:
d3:59:8a:a2:de:ad:27:7b:89:42:dc:ce:47:8d:68:d8:f9:08:
68:7f:37:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:09:23 2025 by rpki-client