Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/a2sEkB4Z7oMVBGekQFMEkMX4rxc.roa
File: a2sEkB4Z7oMVBGekQFMEkMX4rxc.roa (raw, json)
Hash identifier: wCR2pO8s312lnbOD2s0GmVsvD0K7TSS29d6E3VHmMUA=
Subject key identifier: 6B:6B:04:90:1E:19:EE:83:15:04:67:A4:40:53:04:90:C5:F8:AF:17
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 09763109
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/a2sEkB4Z7oMVBGekQFMEkMX4rxc.roa
Signing time: Wed 25 May 2022 06:22:14 +0000
ROA not before: Wed 25 May 2022 06:22:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3356
IP address blocks: 91.186.220.0/22 maxlen: 24
94.241.176.0/21 maxlen: 24
178.253.32.0/24 maxlen: 24
178.253.33.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158740745 (0x9763109)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: May 25 06:22:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6b6b04901e19ee83150467a440530490c5f8af17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4e:3a:f7:99:10:c1:cb:ae:c9:93:0e:4a:d7:
9f:81:57:56:ec:50:b9:55:53:8d:0a:58:c9:df:ca:
17:bf:a5:97:fb:c1:b2:98:81:45:30:81:c2:0b:fa:
4e:d8:91:26:f7:90:92:3d:bb:ad:94:4a:9e:21:f0:
7d:f5:7d:6f:73:81:71:d6:9f:ab:b8:71:15:f4:7a:
4f:29:2e:3d:8b:b5:28:dd:cd:32:de:c2:00:40:3b:
00:da:0d:f6:39:47:72:2b:9e:c5:c4:e9:90:de:c6:
a3:ab:78:9c:7e:af:fc:87:4c:27:21:35:c5:62:6e:
d8:dc:41:f2:31:21:d4:f1:e1:a7:7b:b1:38:19:07:
0d:eb:88:c9:cf:a2:3f:be:28:fc:1f:3e:71:31:90:
cd:86:0c:b0:bf:65:5f:f5:3d:85:3b:91:75:50:de:
af:9e:9b:be:9b:4c:81:60:33:c8:d9:b0:66:63:59:
c4:a1:a8:bf:b0:7d:ed:28:65:13:11:ac:75:78:35:
d1:c4:f6:76:44:67:93:14:c1:04:3a:c3:2e:6a:4e:
a2:29:63:0d:63:4a:a4:4a:d1:dd:ef:e6:af:67:45:
be:90:85:ef:06:f6:bb:47:da:e5:50:fb:ed:2d:23:
ca:0b:ad:78:df:83:a8:56:82:1c:47:06:72:c8:2c:
99:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:6B:04:90:1E:19:EE:83:15:04:67:A4:40:53:04:90:C5:F8:AF:17
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/a2sEkB4Z7oMVBGekQFMEkMX4rxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.186.220.0/22
94.241.176.0/21
178.253.32.0/23
Signature Algorithm: sha256WithRSAEncryption
9f:3d:7c:e9:c9:90:03:31:16:57:0b:f4:22:3a:0d:ee:e8:6e:
90:fb:33:0f:6f:0a:a2:5f:7f:f2:a5:6c:87:6f:28:0a:4a:5f:
47:70:5e:d2:9f:0f:93:5c:34:bf:7a:19:98:93:78:ec:d8:b9:
ac:7a:ba:36:c8:c1:1f:27:ec:0d:a6:a3:73:02:67:c9:cf:fa:
66:7b:dc:4f:aa:dc:df:08:19:c3:2d:c2:d5:3f:96:8f:62:a0:
64:24:9c:d7:97:5b:46:75:35:77:4e:6c:9b:ef:15:ee:3f:67:
f5:d8:34:25:55:83:ca:f0:58:c8:c8:cf:ab:b5:c0:87:7e:0b:
ba:95:6b:67:52:f0:c4:f3:7b:4d:75:86:30:11:9d:fd:ea:cd:
ed:15:77:c6:97:8f:17:d3:3b:d9:96:25:d7:f8:bd:e7:77:bb:
6d:da:c0:92:b3:c1:aa:ca:67:0e:6c:66:4b:19:15:c0:66:21:
8e:47:8a:a0:8f:bb:b3:60:92:78:89:46:4c:61:0a:ba:6e:52:
5b:5b:f2:44:b8:1c:84:f9:fe:f5:41:4c:d9:c1:b6:e3:14:84:
98:ec:97:d7:a2:78:1a:fc:f7:18:25:1f:37:6c:08:39:c1:f5:
68:bc:b2:8a:52:83:ef:c2:00:21:83:f3:ea:4e:db:87:41:2f:
ff:eb:7c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:38 2023 by rpki-client on console-ams.rpki-client.org