Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/_fWObaQqp06H4mfNj31bef8b_W0.roa
File: _fWObaQqp06H4mfNj31bef8b_W0.roa (raw, json)
Hash identifier: TmGvSbAAsFngmppn0GzCqGtgFAqBGS0yy/mtVt+jSks=
Subject key identifier: FD:F5:8E:6D:A4:2A:A7:4E:87:E2:67:CD:8F:7D:5B:79:FF:1B:FD:6D
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 07EE9110
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/_fWObaQqp06H4mfNj31bef8b_W0.roa
Signing time: Sat 01 Jan 2022 03:02:01 +0000
ROA not before: Sat 01 Jan 2022 03:02:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3356
IP address blocks: 91.186.194.0/23 maxlen: 24
91.186.220.0/22 maxlen: 24
178.253.12.0/23 maxlen: 24
94.241.176.0/21 maxlen: 24
178.253.32.0/24 maxlen: 24
178.253.33.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133075216 (0x7ee9110)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Jan 1 03:02:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fdf58e6da42aa74e87e267cd8f7d5b79ff1bfd6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:39:74:86:64:7f:06:d1:4a:63:d8:6e:b0:a5:
e5:b6:43:f3:28:17:56:6d:7e:5e:27:46:3d:76:94:
93:4c:73:6d:49:e9:e1:91:b6:c2:48:6e:64:d9:10:
10:dc:0f:d5:09:25:84:31:a2:6d:40:f5:ce:02:e4:
72:d0:74:e8:d9:53:79:61:95:83:dd:c2:a5:b7:08:
52:e9:e4:ef:99:a6:62:ff:80:57:ba:9e:3d:19:b0:
e9:cf:a4:94:6a:17:3d:bb:79:30:52:68:dd:ce:df:
f1:d8:32:ec:78:54:b7:93:d8:c4:08:af:8c:24:fc:
4e:4e:2c:7d:1d:63:fa:7d:ae:6e:62:a9:d0:14:26:
5d:3a:e8:7c:e0:97:28:19:81:4e:5d:f4:ce:f3:82:
a3:e3:59:0e:be:e4:6c:70:98:2c:e3:02:af:19:21:
e7:42:68:ae:5b:ca:82:c2:73:9a:5e:ed:af:fc:e1:
7d:3a:b4:8e:4a:eb:e6:ba:d6:a5:0b:e1:21:a3:a3:
ba:4b:8d:fb:7e:0d:49:23:d5:b6:a1:2a:cd:84:a0:
8d:2f:1d:ef:84:dd:e4:76:03:a3:6a:54:76:b3:b2:
14:9b:bb:70:45:be:61:9e:7b:4e:2d:5f:d0:41:f9:
d9:83:2e:96:73:67:7b:97:f0:1f:ea:ac:1c:db:e5:
33:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:F5:8E:6D:A4:2A:A7:4E:87:E2:67:CD:8F:7D:5B:79:FF:1B:FD:6D
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/_fWObaQqp06H4mfNj31bef8b_W0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.186.194.0/23
91.186.220.0/22
94.241.176.0/21
178.253.12.0/23
178.253.32.0/23
Signature Algorithm: sha256WithRSAEncryption
40:81:3a:9b:c8:87:f0:8a:e0:97:a0:c7:ba:f7:b2:31:46:9b:
98:2c:69:7b:74:d3:1d:00:fb:60:df:91:d5:49:68:cc:a1:a6:
56:0b:ca:6f:0f:1b:3d:2d:15:19:bb:40:e7:fe:a2:a1:5f:e5:
92:36:60:f2:84:e5:d0:0e:2c:9b:a1:ec:ed:d8:99:95:37:f0:
ad:cc:8d:7e:bb:79:bb:2c:01:df:92:9c:a1:7e:e3:a2:f5:5b:
d4:d5:06:f8:e2:10:15:6a:95:22:21:00:9b:19:94:53:af:6c:
a4:b3:04:27:1c:b9:65:60:a5:ca:6f:20:bd:33:f1:66:03:b6:
9e:53:85:11:62:f2:37:64:12:ce:86:f7:fa:10:2b:f9:87:c5:
9f:36:36:dc:7c:40:cb:f4:48:2f:6d:57:f3:19:66:87:e9:97:
7b:94:1b:63:89:4f:c5:30:75:5f:13:ad:ca:82:0d:f4:42:66:
70:1b:11:2a:24:5c:19:03:b1:57:4d:fa:de:31:77:82:95:c4:
24:48:25:96:4b:76:00:41:56:28:48:2a:66:e0:14:c7:71:61:
f1:0b:00:8a:8e:a2:65:b8:17:9f:c6:1d:73:08:3f:46:64:17:
e1:90:88:96:85:7f:34:c3:d9:32:c8:e5:24:86:2f:22:4a:a3:
13:91:47:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:19 2024 by rpki-client on console-ams.rpki-client.org