Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/w9WQmes7ijVuNCwkKCg1Z_1H9A4.roa
File: w9WQmes7ijVuNCwkKCg1Z_1H9A4.roa (raw, json)
Hash identifier: zMHJPMKBT/6ZTZ9VEWN0D+fOKQcJzsaPz/4J5g+8uhg=
Subject key identifier: C3:D5:90:99:EB:3B:8A:35:6E:34:2C:24:28:28:35:67:FD:47:F4:0E
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 179C5E28
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/w9WQmes7ijVuNCwkKCg1Z_1H9A4.roa
Signing time: Sat 01 Jan 2022 04:53:58 +0000
ROA not before: Sat 01 Jan 2022 04:53:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 26484
IP address blocks: 91.189.186.0/24 maxlen: 24
5.253.137.0/24 maxlen: 32
185.171.3.0/24 maxlen: 32
185.224.146.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 396123688 (0x179c5e28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 04:53:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c3d59099eb3b8a356e342c2428283567fd47f40e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2c:c3:64:d7:ac:f6:5a:0e:01:e4:f4:0e:1e:
9b:be:72:43:9b:3c:8a:f9:ef:33:24:31:ea:b1:3f:
33:ea:96:57:63:9d:25:ef:2e:28:ce:51:4f:8a:5b:
02:b1:c8:b5:28:59:b4:6a:65:2b:6d:13:cb:f1:ad:
b8:fb:2d:77:b2:2d:3b:cc:19:a0:f3:9f:00:40:67:
a0:ab:a9:3a:be:ed:ea:f9:c2:cf:60:ce:91:77:eb:
3c:ca:ef:2d:e2:ce:6b:2b:9b:a2:a8:68:16:9d:7a:
47:34:8f:e3:cf:16:33:16:22:4a:c2:74:55:28:7a:
31:91:93:65:1a:fa:57:95:b9:1c:77:75:98:f6:34:
ab:2a:b5:1a:82:36:0e:69:c7:a4:81:e3:24:32:52:
be:ac:93:86:02:ed:a9:c2:70:d5:0b:3e:ed:f2:70:
eb:6d:68:04:fc:5f:0f:ab:e4:4d:2c:a2:c7:10:52:
86:9c:9e:a2:dc:18:d5:8c:99:86:9e:4a:68:aa:db:
0e:99:a6:7e:e5:25:c4:02:0e:ff:fa:0c:16:a2:9d:
00:a2:06:43:9f:5d:a5:55:06:72:5a:b4:4b:74:7d:
a6:41:f8:c4:72:e0:15:f4:43:9c:84:e4:a3:ba:5f:
32:de:03:aa:f1:ed:02:b3:bf:dd:33:55:38:a1:ab:
8f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:D5:90:99:EB:3B:8A:35:6E:34:2C:24:28:28:35:67:FD:47:F4:0E
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/w9WQmes7ijVuNCwkKCg1Z_1H9A4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.137.0/24
91.189.186.0/24
185.171.3.0/24
185.224.146.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:7a:97:b6:9e:49:44:42:33:4f:e6:2d:c2:01:ae:60:a5:55:
a1:8f:2a:9e:0d:03:c6:7f:48:89:bb:be:4f:16:89:b8:e1:ae:
00:46:9e:e5:59:6b:a9:7a:cb:e0:2f:4a:c2:37:4c:a2:a5:5f:
d2:c9:33:8f:b9:88:22:c3:0c:9d:ca:53:a5:3d:61:13:13:29:
05:dc:a4:4c:03:84:95:e5:69:68:ea:ff:b2:e9:89:c6:3d:4e:
04:eb:a9:59:4f:2c:5a:e0:13:6a:08:11:09:97:e1:da:56:6b:
ad:36:ce:bb:3f:fb:c5:8d:e3:e2:29:ad:a1:23:65:5b:b9:c2:
1a:e5:d5:e9:ce:c1:c7:d4:a2:2f:3d:3a:dd:0f:6c:5f:63:10:
6e:0c:d2:15:fb:7c:83:b3:d9:39:64:07:a8:8a:16:ea:42:c7:
52:65:54:a8:20:11:b8:5f:a6:2f:36:d2:03:32:ae:45:83:b6:
bb:ae:cc:94:9b:0a:d2:88:b3:63:70:39:aa:53:6e:1e:15:27:
6e:58:80:a2:af:a2:5d:2d:6a:82:9a:52:6f:58:68:17:6c:01:
16:45:a2:43:d8:f1:48:9c:2f:9b:17:72:59:44:e0:b9:1d:75:
7b:8f:49:42:51:39:33:42:31:b4:9e:d5:8f:b9:a8:06:70:4e:
f5:0e:ce:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:18 2023 by rpki-client on console-fra.rpki-client.org