Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/CHwN5da9plL54A50vMulWVEaxh8.roa
File: CHwN5da9plL54A50vMulWVEaxh8.roa (raw, json)
Hash identifier: q0juyiDoL9cvsiLoo8G/LUDimHetPiE920DR4jA/19A=
Subject key identifier: 08:7C:0D:E5:D6:BD:A6:52:F9:E0:0E:74:BC:CB:A5:59:51:1A:C6:1F
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 0C0E5E56
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/CHwN5da9plL54A50vMulWVEaxh8.roa
Signing time: Fri 13 May 2022 19:33:40 +0000
ROA not before: Fri 13 May 2022 19:33:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206425
IP address blocks: 91.229.132.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 202268246 (0xc0e5e56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: May 13 19:33:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=087c0de5d6bda652f9e00e74bccba559511ac61f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:80:d6:a6:bd:c6:b2:be:a6:1f:db:81:8f:8f:
25:32:d1:cf:cc:11:04:8d:ff:cf:eb:48:d0:b0:c0:
ee:f8:17:34:36:c2:31:1c:c2:42:f4:22:fd:e5:29:
a9:6c:1e:14:a1:50:ff:89:20:60:0a:14:7c:be:1f:
54:75:d7:8b:90:71:a9:7e:a4:22:cc:d8:e8:dc:ce:
18:55:3e:73:26:5f:85:39:64:8e:35:da:8f:d0:89:
5c:e9:a5:f9:04:d1:1e:78:05:d7:71:af:0c:c3:80:
d9:4d:bf:fc:94:cd:53:26:5a:8c:50:11:69:73:79:
46:43:df:4a:05:6a:28:45:49:84:ac:1f:0e:eb:d9:
e1:c1:da:8f:dc:94:d8:86:48:75:b6:f7:b2:97:45:
4b:ef:89:8d:be:42:c7:55:bb:ff:c4:21:08:eb:32:
7d:ea:e5:29:55:f5:ba:86:36:e4:51:d8:ef:45:fc:
17:a5:68:ce:68:96:04:3b:43:f7:83:65:48:4a:c6:
9a:5a:f5:dc:db:30:3e:95:2a:cb:30:a6:4c:98:b3:
0c:39:c7:2c:e4:a5:96:5e:fc:25:7b:12:63:17:f0:
bb:89:c8:6c:a0:ab:91:ea:c9:10:ff:5f:4e:7f:4d:
28:97:13:05:2f:13:89:b1:0f:bc:78:3f:73:ce:9a:
3e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:7C:0D:E5:D6:BD:A6:52:F9:E0:0E:74:BC:CB:A5:59:51:1A:C6:1F
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/CHwN5da9plL54A50vMulWVEaxh8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.132.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:c3:da:ad:91:c6:c1:dd:db:c5:b7:93:e1:40:39:93:ac:ac:
e3:d6:b2:3c:38:87:ef:94:99:ff:dd:9a:15:d7:10:67:e5:66:
83:fd:29:3d:f0:43:8d:c5:11:4c:08:22:a9:5b:54:ff:5d:9a:
b5:08:89:dc:c3:09:24:d9:3c:ad:b7:11:a6:21:00:54:7e:58:
06:8e:99:05:88:47:92:34:51:74:8f:27:08:fc:59:7b:54:79:
7d:cb:ab:12:88:32:14:a0:20:a8:36:cc:8b:3e:0c:22:33:f3:
8e:29:36:cc:db:49:a4:10:06:a8:19:0e:5a:6c:f9:a0:ac:b2:
66:e0:c8:e1:86:c1:96:a1:3d:20:5e:ad:c6:28:f0:2a:20:4f:
28:d8:31:b3:8d:e3:bd:40:f6:16:e3:f7:aa:3a:1e:f5:a8:38:
a4:0f:da:23:1e:69:d5:3f:ad:75:00:dd:eb:60:51:27:6e:01:
35:87:b6:f9:f8:68:97:b4:5f:a0:cf:68:a0:58:a2:dc:2e:89:
01:ef:b6:42:c8:55:b3:38:64:dd:2a:e3:b8:a9:8b:57:7f:db:
16:83:9b:22:59:4a:5a:88:65:46:31:04:2e:06:58:0e:70:a6:
7a:e0:6c:3f:1e:38:87:03:b5:e9:7b:37:00:a6:fc:6b:f4:dc:
49:e1:53:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:41 2024 by rpki-client on console-ams.rpki-client.org