Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/wrFCk_oH02phq_JknJajyCn1c70.roa
File: wrFCk_oH02phq_JknJajyCn1c70.roa (raw, json)
Hash identifier: Ujt2acMmnJnYk2fyAtXgIndSHC8P8UKmpbYzdAi0SXg=
Subject key identifier: C2:B1:42:93:FA:07:D3:6A:61:AB:F2:64:9C:96:A3:C8:29:F5:73:BD
Certificate issuer: /CN=112d0c4f16dc8922129ff6050e235562317565e5
Certificate serial: 0CC4AA0C
Authority key identifier: 11:2D:0C:4F:16:DC:89:22:12:9F:F6:05:0E:23:55:62:31:75:65:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ES0MTxbciSISn_YFDiNVYjF1ZeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/wrFCk_oH02phq_JknJajyCn1c70.roa
Signing time: Sat 01 Jan 2022 06:04:10 +0000
ROA not before: Sat 01 Jan 2022 06:04:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51724
IP address blocks: 91.221.36.0/24 maxlen: 24
91.221.37.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 214215180 (0xcc4aa0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=112d0c4f16dc8922129ff6050e235562317565e5
Validity
Not Before: Jan 1 06:04:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c2b14293fa07d36a61abf2649c96a3c829f573bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:75:5a:ce:4b:0c:6e:74:7c:1e:70:b8:d0:1f:
3b:16:ec:04:f7:2c:39:51:a7:b5:bb:9f:e8:0d:d8:
1c:e3:5d:db:ba:b5:dd:f7:27:6f:e8:2f:bb:a4:2d:
3d:41:54:b3:f8:ad:75:53:7f:89:4a:07:43:98:05:
45:81:15:ac:17:19:dc:32:11:bd:30:fe:a8:ff:bf:
e8:dc:d9:e8:37:9a:e7:c8:03:72:58:27:c7:4f:ea:
fa:c2:8c:33:d9:76:47:84:27:87:ec:4b:2b:a1:a8:
4d:81:71:65:83:70:36:71:d8:63:bd:89:88:c7:bf:
32:97:a0:7a:55:3d:ed:3e:33:94:dc:f6:6f:4e:6c:
55:7a:7a:ca:e1:f8:2a:bd:f2:59:6b:e5:0e:af:64:
92:44:f4:ba:54:41:8f:ea:aa:44:e9:31:d0:bd:9c:
71:d7:4e:29:2a:a8:b7:bb:a2:a1:f7:44:35:2f:a7:
61:83:56:1e:f0:37:e4:71:38:4f:36:e1:79:e3:1a:
1f:3a:c5:52:eb:4a:1f:67:ea:2f:36:91:95:9b:46:
a2:b1:bb:cd:41:81:9e:45:44:85:64:a3:d0:ac:ca:
ed:2f:54:6a:55:82:51:a0:4d:ee:59:af:22:84:9a:
57:74:ac:aa:6e:23:62:86:5e:e2:e5:2a:6e:27:63:
6e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:B1:42:93:FA:07:D3:6A:61:AB:F2:64:9C:96:A3:C8:29:F5:73:BD
X509v3 Authority Key Identifier:
keyid:11:2D:0C:4F:16:DC:89:22:12:9F:F6:05:0E:23:55:62:31:75:65:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ES0MTxbciSISn_YFDiNVYjF1ZeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/wrFCk_oH02phq_JknJajyCn1c70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.221.36.0/23
Signature Algorithm: sha256WithRSAEncryption
08:b7:4b:2a:0d:77:eb:6c:89:c8:ec:8b:e9:c7:7a:cc:13:82:
3e:43:9a:d5:19:3d:4c:71:26:b7:ce:b2:25:2c:d3:5e:60:f1:
3f:c2:79:6a:c4:f1:58:25:81:8d:3e:d9:13:8c:9c:43:bb:5d:
24:9c:cd:9b:43:5b:28:63:98:80:4e:ba:db:99:9e:ce:e5:77:
9d:dd:64:57:ea:a2:4b:ae:e9:6f:d5:e6:53:68:6c:78:87:34:
ea:ba:ef:ff:fa:0a:28:42:f4:9f:7c:0c:9c:6c:7f:0d:a6:44:
05:bc:79:6b:6b:8c:17:fb:8f:9b:16:e7:62:5e:9f:c8:58:08:
95:13:39:fd:09:ed:a6:24:04:e9:ea:b7:9d:43:19:76:54:8e:
8e:58:6f:36:35:ad:af:42:11:4d:54:c3:7d:d9:60:35:22:ad:
09:fa:a9:4e:f1:2f:fd:90:87:02:cb:1a:05:e5:ac:b0:ec:f8:
0e:df:a7:ac:01:42:7d:d4:19:3f:46:3c:39:0b:d4:a8:6b:52:
2c:25:a2:5e:1e:70:9f:9d:e4:fc:0a:e0:f3:5b:b8:57:ae:84:
e4:31:20:93:85:86:34:3f:8a:15:51:dd:01:b8:84:28:1e:62:
45:bb:b1:29:18:e2:d3:75:e6:f4:f6:33:61:d5:da:d5:a5:40:
bb:d3:20:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:36 2023 by rpki-client on console-fra.rpki-client.org