Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/3ed97d-e867-425f-8743-0daed3aa6249/1/w4DWpdpa7t8xSrUJRBYiqHmhicg.roa
File: w4DWpdpa7t8xSrUJRBYiqHmhicg.roa (raw, json)
Hash identifier: zLuOCExuz5Eaz5bosnYYkqjLGkTEwmxJ2bo10zHCPPU=
Subject key identifier: C3:80:D6:A5:DA:5A:EE:DF:31:4A:B5:09:44:16:22:A8:79:A1:89:C8
Certificate issuer: /CN=2776d64ea8fd028b6888e374557bb91f05ee0ec6
Certificate serial: 0181D7796E89D7FF50A077FA89EEBE1DFC14
Authority key identifier: 27:76:D6:4E:A8:FD:02:8B:68:88:E3:74:55:7B:B9:1F:05:EE:0E:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J3bWTqj9AotoiON0VXu5HwXuDsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/3ed97d-e867-425f-8743-0daed3aa6249/1/w4DWpdpa7t8xSrUJRBYiqHmhicg.roa
Signing time: Thu 07 Jul 2022 07:04:28 +0000
ROA not before: Thu 07 Jul 2022 07:04:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48719
IP address blocks: 91.211.210.0/24 maxlen: 24
91.211.208.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d7:79:6e:89:d7:ff:50:a0:77:fa:89:ee:be:1d:fc:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2776d64ea8fd028b6888e374557bb91f05ee0ec6
Validity
Not Before: Jul 7 07:04:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c380d6a5da5aeedf314ab509441622a879a189c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:81:26:a8:07:9e:a0:9b:35:86:7b:0d:5e:fc:
e0:28:d7:69:49:9d:8a:2e:bf:c5:b0:de:04:1c:d4:
e8:23:93:92:00:50:37:cb:1d:cf:4b:df:12:39:b7:
8b:87:b6:6f:9b:b4:0b:22:e1:06:8d:a3:ba:f7:22:
b8:3a:40:85:b9:a7:f1:31:4f:d7:0b:ab:74:28:d8:
81:b3:0f:b7:12:d1:20:fa:c1:f9:d8:fc:12:b1:4a:
a6:c9:49:36:14:94:9c:ef:6e:e5:82:a5:38:e9:03:
8b:22:6f:d9:f9:0b:d3:f1:67:c2:6f:55:b4:7c:3b:
f7:de:8a:28:de:c8:36:ae:63:f7:1d:bd:15:31:b6:
c2:90:25:1a:33:aa:d5:19:69:c8:57:5b:22:91:03:
8c:63:1d:77:f6:8d:78:21:fc:d8:41:11:5d:95:d1:
ac:24:18:53:af:fa:92:0d:1f:fe:c8:b4:f7:02:dd:
3c:53:a2:aa:83:2b:14:6f:64:a0:26:46:e0:ee:f0:
73:49:42:07:aa:ce:f4:a1:b5:3e:f0:e6:d2:8c:d4:
fb:22:ae:07:3c:6c:f0:c2:17:2d:fc:91:3d:59:f5:
b3:fa:05:5f:b6:81:c7:ac:d7:51:86:04:a3:ba:3c:
50:6b:c3:60:54:7f:52:d5:4f:25:18:9e:db:66:de:
59:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:80:D6:A5:DA:5A:EE:DF:31:4A:B5:09:44:16:22:A8:79:A1:89:C8
X509v3 Authority Key Identifier:
keyid:27:76:D6:4E:A8:FD:02:8B:68:88:E3:74:55:7B:B9:1F:05:EE:0E:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J3bWTqj9AotoiON0VXu5HwXuDsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3ed97d-e867-425f-8743-0daed3aa6249/1/w4DWpdpa7t8xSrUJRBYiqHmhicg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3ed97d-e867-425f-8743-0daed3aa6249/1/J3bWTqj9AotoiON0VXu5HwXuDsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.211.208.0/22
Signature Algorithm: sha256WithRSAEncryption
31:96:60:28:5f:2d:9d:01:7b:76:4d:fd:00:ec:b9:a2:28:52:
05:d7:fc:42:14:2a:0d:6d:98:90:dc:83:9e:92:09:22:d0:a3:
ea:ae:59:43:7e:c8:56:1c:fe:c6:9e:46:7b:eb:c9:03:27:90:
14:d9:47:27:62:4f:1b:09:53:9d:d2:7b:f7:80:21:60:2f:44:
4e:1f:44:cb:f7:e6:3d:b4:d7:c7:de:ee:ff:09:cd:45:0a:d5:
4d:18:16:a2:0a:21:48:5d:a7:8a:25:a3:fb:58:e4:96:07:07:
ec:3e:27:89:98:9a:c7:35:8e:19:7b:91:4c:c7:36:b1:27:34:
d4:47:5e:48:67:e0:a8:25:c4:48:ec:54:c0:f8:08:72:67:87:
2d:8a:f7:b7:43:a4:61:ef:a9:1c:7f:a0:95:d9:b2:81:44:2e:
a0:cd:68:7d:e7:37:7a:4a:d0:30:94:7e:10:26:14:71:f1:67:
89:6f:06:7b:f2:79:0d:5a:d6:b2:b5:19:0e:28:cb:83:f8:58:
44:b4:c6:71:af:40:9a:9a:29:91:cb:ef:c9:a3:d5:04:1d:ac:
8f:62:65:ad:b6:e5:f7:e9:66:33:9d:3b:80:ee:b3:7a:44:22:
20:bd:42:27:65:86:85:b5:2c:cc:06:5e:58:62:e6:bf:6f:34:
8c:dd:e5:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:44 2023 by rpki-client on console-fra.rpki-client.org