Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/e9M1PXuOldyYRkAxnoydrH1D48k.roa
File: e9M1PXuOldyYRkAxnoydrH1D48k.roa (raw, json)
Hash identifier: 2UZqt85v9JXZjypWRPsvPe+3iyMvN+sTwvASw50xcVs=
Subject key identifier: 7B:D3:35:3D:7B:8E:95:DC:98:46:40:31:9E:8C:9D:AC:7D:43:E3:C9
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 018481C332C3305BA16E80BB79ADDA56D014
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/e9M1PXuOldyYRkAxnoydrH1D48k.roa
Signing time: Wed 16 Nov 2022 18:46:04 +0000
ROA not before: Wed 16 Nov 2022 18:46:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62240
IP address blocks: 91.186.204.0/22 maxlen: 24
94.241.136.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:81:c3:32:c3:30:5b:a1:6e:80:bb:79:ad:da:56:d0:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Nov 16 18:46:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7bd3353d7b8e95dc984640319e8c9dac7d43e3c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:60:5e:46:fe:e7:55:ab:9e:3e:7f:e3:fb:f5:
fc:63:94:dc:a4:5f:2a:09:f7:13:f2:b7:56:1a:12:
5a:24:ac:6a:c5:e7:f6:68:ba:c6:32:69:8a:86:2b:
df:9d:17:2a:ae:1e:fa:16:62:43:ff:06:fe:01:55:
f5:a4:94:4d:54:07:18:33:00:b5:24:69:9f:48:94:
33:57:87:79:e3:4a:95:83:13:cc:f3:2f:af:59:29:
d1:5d:d7:51:53:a8:42:66:33:88:6d:6b:74:6d:f4:
8f:7a:81:51:44:af:2a:f6:8c:9d:d3:8b:f2:fc:ef:
08:37:5d:6f:37:85:0e:e9:0f:97:6e:26:0d:35:a5:
6a:38:2f:a5:91:b7:51:cb:8c:a8:b3:81:91:78:d5:
d6:ed:b9:c4:dc:7b:79:a1:2b:29:8c:67:39:ae:17:
1f:80:3a:20:b4:3a:55:48:e1:86:3b:5b:1d:fe:2c:
31:69:98:82:33:f3:24:ec:42:da:82:88:91:0c:86:
a4:6d:77:e1:50:4d:7b:68:48:ef:88:9c:3a:96:15:
ad:0a:d2:00:97:86:07:00:d3:5a:ee:74:93:3b:a3:
c5:b3:9f:52:5d:6c:a2:18:d2:f8:01:2b:5d:fd:2c:
7c:76:6f:59:90:f3:1b:d7:b5:b2:ca:61:6c:77:a0:
ac:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:D3:35:3D:7B:8E:95:DC:98:46:40:31:9E:8C:9D:AC:7D:43:E3:C9
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/e9M1PXuOldyYRkAxnoydrH1D48k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.186.204.0/22
94.241.136.0/21
Signature Algorithm: sha256WithRSAEncryption
86:1e:fc:88:e5:87:17:0f:6a:5d:8f:f9:c7:2c:04:a7:74:92:
e6:50:a6:50:6f:08:a8:90:13:15:98:a7:7d:ce:73:6f:91:5b:
85:d1:cf:74:22:b0:95:59:1c:5e:45:62:a5:cb:4e:aa:8e:e5:
25:f8:bd:4f:49:a1:3e:fd:9d:77:a8:af:08:9f:85:cc:e5:dd:
f6:ee:16:ac:63:7d:c8:b5:fa:26:a1:63:26:9e:4b:6e:ba:0c:
db:e0:3a:cd:66:40:6a:1f:ea:b5:b2:82:fd:8d:6d:57:2a:f5:
69:88:a0:c8:bb:b1:80:20:81:44:8f:0e:ac:1c:89:82:9e:e9:
f4:eb:98:c5:27:18:4b:9d:16:55:95:b5:65:fe:04:02:72:44:
e5:db:31:bf:b1:58:2a:99:b8:59:82:8e:ec:54:33:b5:db:5a:
03:ae:b0:75:3d:a4:c8:e8:5c:1f:d8:f0:6a:e3:33:93:34:ae:
dc:21:30:ef:f0:82:66:27:d1:6a:ad:de:a0:23:c0:e8:f2:c7:
99:1b:e4:01:bb:85:1c:5a:ee:63:9e:94:8f:dc:1b:23:26:14:
2a:0d:33:21:5e:b8:b7:f6:af:4f:6e:ce:2e:55:fa:39:de:63:
a2:b3:e4:10:d5:32:87:7a:cb:1e:82:fe:65:25:40:2d:b3:40:
95:4e:e8:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:19 2024 by rpki-client on console-ams.rpki-client.org