Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/4s2n2wAGSxJpVVPZZmV64CFEW9A.roa
File: 4s2n2wAGSxJpVVPZZmV64CFEW9A.roa (raw, json)
Hash identifier: 6sPCPKvp5ZzXp6AqFNtsWQmWWvEz1pJdUNwNzKWWutU=
Subject key identifier: E2:CD:A7:DB:00:06:4B:12:69:55:53:D9:66:65:7A:E0:21:44:5B:D0
Certificate issuer: /CN=2ce71b1f4eea0159246125fc5ae9ad51a44792ce
Certificate serial: 074642A1
Authority key identifier: 2C:E7:1B:1F:4E:EA:01:59:24:61:25:FC:5A:E9:AD:51:A4:47:92:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LOcbH07qAVkkYSX8WumtUaRHks4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/4s2n2wAGSxJpVVPZZmV64CFEW9A.roa
Signing time: Sat 01 Jan 2022 08:02:34 +0000
ROA not before: Sat 01 Jan 2022 08:02:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197735
IP address blocks: 91.226.27.0/24 maxlen: 24
91.226.26.0/24 maxlen: 24
91.226.26.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122045089 (0x74642a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ce71b1f4eea0159246125fc5ae9ad51a44792ce
Validity
Not Before: Jan 1 08:02:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e2cda7db00064b12695553d966657ae021445bd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7a:5a:01:b3:ed:fa:54:d1:43:3d:84:c5:8f:
4d:77:33:55:01:f8:42:21:b3:c3:2f:e6:5a:93:d7:
e2:b7:de:aa:82:92:2b:b9:fe:10:a1:f7:0d:dd:95:
38:67:d3:df:6f:cc:59:d2:a2:6f:26:a3:e5:0d:9e:
cd:d4:06:f1:22:74:0a:e4:b9:fe:5f:9d:06:e6:99:
ed:3a:a9:ba:f7:e2:87:59:6b:75:d6:1e:e5:d4:37:
bf:e4:78:78:73:28:31:b8:2c:dc:df:15:35:41:32:
20:ae:7f:cb:82:28:92:91:e5:1b:8d:29:05:6b:67:
5c:8c:b4:02:3c:70:5b:e5:28:13:7e:92:ce:25:ec:
eb:88:57:a7:41:85:a6:54:00:7b:a4:61:9f:b4:35:
23:ba:e2:6f:88:f1:10:1a:ad:8a:f1:4e:bd:c9:1c:
51:00:72:5d:26:c2:43:66:e3:ac:11:8a:fc:25:e5:
fc:36:35:dc:41:6c:68:32:c2:bd:ea:e4:2f:c0:20:
30:dd:69:1d:31:d0:f8:c6:ce:8a:4e:6b:00:34:07:
80:9f:61:a8:20:62:a3:d8:0c:c2:2d:43:2e:1b:4b:
6f:43:d1:96:8a:3a:7c:d6:2c:cf:f1:b5:a7:23:16:
1c:c4:0f:5d:0c:a4:26:42:49:27:63:a8:8a:dc:4a:
65:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:CD:A7:DB:00:06:4B:12:69:55:53:D9:66:65:7A:E0:21:44:5B:D0
X509v3 Authority Key Identifier:
keyid:2C:E7:1B:1F:4E:EA:01:59:24:61:25:FC:5A:E9:AD:51:A4:47:92:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LOcbH07qAVkkYSX8WumtUaRHks4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/4s2n2wAGSxJpVVPZZmV64CFEW9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.26.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:cd:1f:a2:ac:e1:86:9e:5e:f6:f0:0e:86:66:af:ec:da:47:
8c:e3:89:3c:7e:9c:63:cc:5d:0c:1b:9e:f5:0b:04:73:7b:86:
ca:d5:a3:88:c4:50:7c:94:7f:c3:fb:d1:8d:fc:01:16:1e:ee:
12:86:a3:98:f6:9a:a8:1e:1f:d0:64:b1:45:4d:b3:1d:1f:25:
df:43:38:4d:2e:3e:15:5d:95:9f:66:53:0e:e9:40:75:96:8d:
65:16:63:4f:b0:85:25:9d:2e:58:24:de:1b:b4:15:6c:8a:c1:
1f:9f:b3:9e:aa:39:b1:48:dc:ea:46:30:06:8d:9a:d1:70:2d:
79:f1:fa:16:a5:4b:23:2d:dd:32:fd:35:8e:b1:53:bc:ac:b3:
5e:25:22:27:7e:dd:c4:8a:f0:62:53:12:c4:04:55:81:76:6d:
c9:af:a6:0a:33:e7:90:ff:7b:de:d2:86:b9:12:fd:98:f9:75:
8e:8b:36:9e:f1:5d:72:c5:2a:2c:c7:c9:a5:c1:a6:00:f4:5d:
c6:83:ed:bf:f4:65:7f:08:a3:c5:d5:5c:71:af:43:02:5a:6d:
ef:6f:df:a3:43:27:65:28:19:39:02:d6:44:b0:8e:d0:2f:30:
18:0a:1c:f1:ce:8a:39:50:7c:a4:f0:45:af:fa:fc:f4:f4:40:
35:6e:64:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:14 2024 by rpki-client on console-fra.rpki-client.org