Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/w7GkeKJkecB6_YRuRwGJOZEZFUM.roa
File: w7GkeKJkecB6_YRuRwGJOZEZFUM.roa (raw, json)
Hash identifier: Vca3FTWAYBBYN4nRJ45QFUYgYUBHxQCSP5oKY1/AYZk=
Subject key identifier: C3:B1:A4:78:A2:64:79:C0:7A:FD:84:6E:47:01:89:39:91:19:15:43
Certificate issuer: /CN=8504ebf9db1710a47bae4508cdaf8131e1674a54
Certificate serial: 09981AA5
Authority key identifier: 85:04:EB:F9:DB:17:10:A4:7B:AE:45:08:CD:AF:81:31:E1:67:4A:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hQTr-dsXEKR7rkUIza-BMeFnSlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/w7GkeKJkecB6_YRuRwGJOZEZFUM.roa
Signing time: Sat 01 Jan 2022 02:58:19 +0000
ROA not before: Sat 01 Jan 2022 02:58:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2119
IP address blocks: 193.160.9.0/24 maxlen: 24
91.229.21.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 160963237 (0x9981aa5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8504ebf9db1710a47bae4508cdaf8131e1674a54
Validity
Not Before: Jan 1 02:58:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c3b1a478a26479c07afd846e4701893991191543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:71:40:98:0b:01:99:eb:60:19:07:6e:4d:e8:
3c:8f:32:11:3a:0d:a4:4b:8d:9a:8b:03:3c:60:55:
67:0e:9c:01:90:b8:b4:f1:5a:eb:ac:69:26:07:06:
b7:9e:c1:a3:58:3b:6e:5c:86:e7:93:f8:c8:8e:71:
ec:bc:91:2b:50:89:08:93:9d:2d:49:ae:24:b1:66:
57:f3:af:61:dc:2e:a1:77:33:85:2e:c6:38:65:ed:
2f:b5:4d:48:61:9b:ab:05:ee:14:2b:2b:ec:62:60:
95:f2:42:5d:f5:f7:2c:1a:b5:71:a4:58:28:d6:2a:
8e:c3:22:29:8b:2d:f6:40:ae:1f:79:71:4b:90:03:
83:bb:be:99:3f:f2:9c:fc:12:e4:0e:b7:95:dd:4c:
a0:7b:39:e4:59:76:6b:e0:7a:0b:56:ec:52:a6:79:
f6:94:25:60:1a:53:b8:8e:9a:ef:56:46:75:72:f7:
94:dc:21:e1:31:f5:52:0b:1a:47:74:b0:8a:04:62:
85:d7:32:a6:d8:f0:cf:93:0d:75:66:54:f5:3a:be:
f0:64:e4:5c:d9:4d:38:57:5e:ca:e5:55:14:b7:a2:
e7:da:fe:90:ae:72:c7:a4:6c:93:b6:b7:50:4f:68:
84:f5:b7:c4:47:ed:7a:87:92:14:94:cc:51:72:ae:
66:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:B1:A4:78:A2:64:79:C0:7A:FD:84:6E:47:01:89:39:91:19:15:43
X509v3 Authority Key Identifier:
keyid:85:04:EB:F9:DB:17:10:A4:7B:AE:45:08:CD:AF:81:31:E1:67:4A:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hQTr-dsXEKR7rkUIza-BMeFnSlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/w7GkeKJkecB6_YRuRwGJOZEZFUM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.21.0/24
193.160.9.0/24
Signature Algorithm: sha256WithRSAEncryption
92:ff:0b:4c:63:16:de:97:44:08:43:9e:2c:c3:7b:a8:b0:e8:
e4:ef:48:b5:04:76:d5:e5:d9:83:91:f8:92:3b:dd:c4:8e:34:
f2:97:67:5e:0e:cc:79:1d:9e:bd:3e:00:3a:2f:4e:5b:7a:e1:
97:1f:bc:4c:f4:3c:3f:e7:ab:c6:54:77:e1:c3:10:9a:2d:3f:
e1:66:11:b1:0c:85:7e:02:07:57:e3:06:3b:7d:2a:d2:87:86:
51:d8:68:55:54:d0:1d:d7:ee:78:02:c2:bc:f7:37:fb:1f:a5:
3f:8f:62:92:81:b3:59:fa:1f:53:d7:75:78:cc:4c:3f:e5:09:
f1:78:05:0d:48:22:72:7e:53:34:24:17:f9:fd:c1:ea:ad:60:
a9:21:63:ad:30:47:1c:f2:38:03:55:1c:6d:04:3b:ea:82:fe:
4c:ed:8a:88:27:21:e3:89:a1:9a:e8:48:d5:96:88:5a:a9:ad:
f3:59:45:2f:a3:57:4e:c9:88:04:9f:f8:73:f0:24:5e:8d:1f:
82:8a:27:4f:88:8a:0f:28:4c:65:5d:4a:7e:87:13:ec:b0:af:
b5:c5:47:20:bb:bb:c1:bc:48:a3:cc:b6:4a:ef:83:ad:18:80:
aa:35:af:ef:5f:c7:8d:e0:49:54:74:ee:6d:d2:8c:a9:3e:d1:
3e:5e:0a:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:42 2024 by rpki-client on console-ams.rpki-client.org