Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/wLHPdp2ohRVGVNmCqtfn4bVFy0c.roa
File: wLHPdp2ohRVGVNmCqtfn4bVFy0c.roa (raw, json)
Hash identifier: MnCY9YEXre2KMXoMC5YcYpyFT1vXFhZXSY1KVeLnKck=
Subject key identifier: C0:B1:CF:76:9D:A8:85:15:46:54:D9:82:AA:D7:E7:E1:B5:45:CB:47
Certificate issuer: /CN=1ea0c823c360b5f8614892d35b103c64774fd65d
Certificate serial: 0928D4E9
Authority key identifier: 1E:A0:C8:23:C3:60:B5:F8:61:48:92:D3:5B:10:3C:64:77:4F:D6:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqDII8NgtfhhSJLTWxA8ZHdP1l0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/wLHPdp2ohRVGVNmCqtfn4bVFy0c.roa
Signing time: Sat 01 Jan 2022 11:04:31 +0000
ROA not before: Sat 01 Jan 2022 11:04:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 28889
IP address blocks: 91.206.236.0/24 maxlen: 24
91.206.237.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153670889 (0x928d4e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ea0c823c360b5f8614892d35b103c64774fd65d
Validity
Not Before: Jan 1 11:04:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c0b1cf769da885154654d982aad7e7e1b545cb47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:3e:ab:a9:ab:ff:6a:18:a2:a4:77:d4:10:a5:
79:c9:7e:30:41:aa:72:bc:2d:37:a6:26:92:6e:e0:
36:ce:7d:91:5c:e4:94:c1:6e:2f:84:b8:ea:07:a5:
18:39:65:32:1c:e5:df:71:ba:04:7c:76:2d:09:cf:
27:5b:49:1c:b6:35:8f:60:b4:46:89:e5:02:78:ab:
ed:bd:3d:5c:ef:67:fc:cb:b2:7d:40:48:d7:8e:9a:
b0:93:96:dc:a1:46:09:b1:34:d3:d3:fe:ba:87:b7:
42:7f:44:04:3d:73:18:8f:77:4c:5e:58:2f:3b:4b:
9d:90:3e:50:65:7e:5c:f1:ea:db:92:af:1e:44:44:
b8:79:2e:f1:0f:ec:01:6f:62:5a:01:78:bf:50:56:
25:02:81:ce:09:6c:0c:32:c7:5a:2f:e7:26:2b:dc:
c6:7a:f7:70:60:72:8d:d0:c1:c3:7f:47:63:66:23:
ec:ea:01:60:ae:26:98:6f:5d:4c:3b:7e:b2:cb:50:
26:4a:95:e6:62:d5:7d:bf:5d:44:d2:70:46:46:b2:
f3:5a:82:d4:b4:6a:bf:3b:eb:51:60:cc:1b:de:b7:
9b:5f:98:09:19:d1:78:c9:a2:35:1f:56:70:92:1f:
77:80:9b:8a:40:57:24:be:86:87:79:b9:fc:72:3e:
9c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:B1:CF:76:9D:A8:85:15:46:54:D9:82:AA:D7:E7:E1:B5:45:CB:47
X509v3 Authority Key Identifier:
keyid:1E:A0:C8:23:C3:60:B5:F8:61:48:92:D3:5B:10:3C:64:77:4F:D6:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqDII8NgtfhhSJLTWxA8ZHdP1l0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/wLHPdp2ohRVGVNmCqtfn4bVFy0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/HqDII8NgtfhhSJLTWxA8ZHdP1l0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.236.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:3b:d4:76:08:ba:5f:da:65:52:7b:49:2f:2a:f7:f7:27:15:
4b:83:1e:26:ba:aa:8f:32:ea:2e:b9:d2:fd:9a:7e:7a:fe:70:
35:ea:ee:88:bc:24:8e:b5:01:16:91:af:3b:96:74:23:6c:b7:
eb:08:a0:d0:ac:3a:46:62:df:c2:8e:b8:92:00:b4:6b:ac:17:
bc:27:80:7b:6e:b6:c7:0a:03:20:3a:8d:77:bd:d0:02:23:48:
f8:44:07:f9:cd:95:13:2b:5c:1e:31:9c:9c:d0:f6:8b:51:1e:
1b:2c:fe:86:d9:0a:63:e2:16:ae:ed:12:f5:47:7a:35:2a:ee:
47:ca:8c:73:2f:bc:5a:0e:5e:73:a1:46:2b:c4:48:98:60:2d:
0a:94:be:ac:99:ed:5b:86:d1:69:73:f3:3f:ee:8a:9c:01:d1:
10:51:b9:90:8c:f7:56:96:5d:55:8c:60:42:cf:26:b8:41:6d:
da:39:d5:25:c1:80:4d:e1:b1:f4:48:e4:b9:46:50:37:d7:66:
58:dd:b0:a7:cc:7b:e5:cf:bb:eb:d6:e2:49:ff:aa:d4:4e:fd:
87:7e:c0:f0:51:fb:ec:c1:12:df:04:6b:07:aa:56:98:6c:38:
42:92:d2:b3:22:6c:f3:25:b9:c3:90:8d:d1:f3:32:4c:14:68:
f6:9d:f6:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:49 2023 by rpki-client on console-ams.rpki-client.org