Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4485be-d779-41f5-a558-e6ac9b6a219e/1/wvvqMYICcGSJk5sUIR3IMdzm00k.roa
File: wvvqMYICcGSJk5sUIR3IMdzm00k.roa (raw, json)
Hash identifier: ghIrqWNRgjxHtFe/9X5qjWyS/KExLNHgqKj2yGUHpYI=
Subject key identifier: C2:FB:EA:31:82:02:70:64:89:93:9B:14:21:1D:C8:31:DC:E6:D3:49
Certificate issuer: /CN=ae17b1bbe78ce40aa1ec6d2778bc1e4ea295167e
Certificate serial: 0156787F
Authority key identifier: AE:17:B1:BB:E7:8C:E4:0A:A1:EC:6D:27:78:BC:1E:4E:A2:95:16:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rhexu-eM5Aqh7G0neLweTqKVFn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4485be-d779-41f5-a558-e6ac9b6a219e/1/wvvqMYICcGSJk5sUIR3IMdzm00k.roa
Signing time: Sat 01 Jan 2022 12:57:55 +0000
ROA not before: Sat 01 Jan 2022 12:57:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44455
IP address blocks: 91.199.124.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22444159 (0x156787f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae17b1bbe78ce40aa1ec6d2778bc1e4ea295167e
Validity
Not Before: Jan 1 12:57:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c2fbea318202706489939b14211dc831dce6d349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:44:82:42:ae:31:f1:73:6a:2a:78:6d:3a:d1:
6f:1f:46:25:d6:9d:78:ea:dc:23:9a:67:bc:63:0f:
be:0d:f8:78:30:3e:b6:93:dd:50:7a:70:6b:84:38:
e9:d1:5b:21:b7:c1:6b:d5:65:f6:04:9f:c5:6b:6e:
f2:78:f7:97:4b:2a:49:7d:7d:a7:63:23:ff:8e:31:
d2:3b:28:17:0a:97:14:76:43:b8:f8:d2:9d:c8:c8:
88:00:f2:e6:95:ca:c9:b3:42:3c:cf:40:00:67:3c:
92:1f:2c:33:e4:23:c1:c9:f1:69:63:93:ae:e6:fd:
6d:ef:8e:7e:4e:27:fa:10:be:4c:17:f0:4c:39:c6:
46:06:73:cb:ef:7e:e2:59:10:87:b9:ad:06:b1:e0:
94:3c:e1:89:ba:5e:e4:e8:9c:6c:91:cd:72:ae:fd:
d7:b4:72:a1:82:40:eb:28:04:79:f1:b3:37:6f:23:
4e:29:89:2b:5b:9d:1d:26:a5:22:5f:64:f1:f2:c7:
84:10:37:63:41:bb:51:c1:af:35:21:22:6e:f9:c3:
e1:06:d0:9c:5c:8f:3f:1a:8c:50:eb:c4:2a:d7:4b:
f2:8f:50:94:d2:c4:5f:ef:05:da:d4:8e:13:c4:71:
87:4b:04:0c:e6:18:a6:25:ad:8d:17:91:ff:a3:a7:
db:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:FB:EA:31:82:02:70:64:89:93:9B:14:21:1D:C8:31:DC:E6:D3:49
X509v3 Authority Key Identifier:
keyid:AE:17:B1:BB:E7:8C:E4:0A:A1:EC:6D:27:78:BC:1E:4E:A2:95:16:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rhexu-eM5Aqh7G0neLweTqKVFn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4485be-d779-41f5-a558-e6ac9b6a219e/1/wvvqMYICcGSJk5sUIR3IMdzm00k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4485be-d779-41f5-a558-e6ac9b6a219e/1/rhexu-eM5Aqh7G0neLweTqKVFn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.124.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:60:af:7d:b6:2d:31:e4:68:01:64:02:bf:94:c5:1a:19:32:
ae:94:0d:b6:06:cc:83:81:11:a3:f6:5e:e9:0e:0b:d7:f7:18:
e5:28:44:e1:98:15:1f:1f:5b:d5:50:91:e3:06:a3:02:3e:80:
0e:df:89:f7:46:93:66:8a:cd:c2:d2:ea:5d:5f:04:7d:60:3b:
f4:a7:46:d2:c9:34:60:ab:2d:80:0e:e2:f5:7a:f3:0d:de:f9:
0d:cb:7c:92:03:28:98:91:0e:79:eb:7b:f9:3f:7d:91:3f:99:
25:04:9b:75:18:72:a0:a0:93:94:f4:a0:e1:34:3e:2d:88:a9:
03:b3:0e:77:e0:b8:26:6a:81:e3:98:14:6a:5c:1a:e0:cb:f4:
02:7e:0e:a2:c2:e0:8c:b6:90:70:f0:1c:ca:fd:4f:19:6b:fd:
61:88:59:1d:bd:ba:6e:b0:b7:56:79:e7:1d:8a:d8:2a:51:b8:
27:9f:e5:dc:c4:34:cc:3d:4f:c0:bc:c6:cd:d5:47:5f:29:2f:
0e:ed:99:19:c3:bc:81:b7:1c:ab:42:8b:16:32:9b:9c:35:a9:
fe:66:10:3e:bd:bb:44:0c:b2:1e:7a:38:5a:10:a5:6b:ce:b7:
f1:73:88:fc:4e:fd:70:53:20:7e:72:bf:e6:9b:d7:b6:b2:f5:
cb:10:45:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:05 2024 by rpki-client on console-fra.rpki-client.org