Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/pw2_tGfGFOxOFm4XdkUIVuSKRs4.roa
File: pw2_tGfGFOxOFm4XdkUIVuSKRs4.roa (raw, json)
Hash identifier: td1wG0DiG4vk1rnCumzpMj8RLOSEMs2kq8/aqJhLca8=
Subject key identifier: A7:0D:BF:B4:67:C6:14:EC:4E:16:6E:17:76:45:08:56:E4:8A:46:CE
Certificate issuer: /CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
Certificate serial: 0183B0D62798243BA6E7EE6E1B094F596404
Authority key identifier: E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/pw2_tGfGFOxOFm4XdkUIVuSKRs4.roa
Signing time: Fri 07 Oct 2022 05:06:08 +0000
ROA not before: Fri 07 Oct 2022 05:06:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 36007
IP address blocks: 45.91.171.0/24 maxlen: 24
91.223.169.0/24 maxlen: 24
91.202.170.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:b0:d6:27:98:24:3b:a6:e7:ee:6e:1b:09:4f:59:64:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
Validity
Not Before: Oct 7 05:06:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a70dbfb467c614ec4e166e1776450856e48a46ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d7:8d:fe:aa:1d:28:7e:d6:00:c5:bf:0f:b4:
5a:e2:82:c0:b2:af:ad:25:5f:4a:1e:4d:93:87:5d:
d7:06:4e:74:09:1b:99:29:ed:78:bf:49:f0:9c:6b:
fd:93:44:02:82:9b:f8:26:f2:12:d9:d9:ca:5c:f0:
89:99:b3:a6:e3:b6:c9:de:a7:a9:da:88:ec:de:3f:
b0:99:df:18:dc:68:8b:40:47:da:02:4b:ea:88:09:
66:68:b6:f7:99:01:cc:1e:3f:c5:73:3d:43:01:e8:
ae:c8:8d:b9:c9:0f:f8:a6:21:3a:19:7e:75:25:24:
54:ab:95:f4:5e:8d:42:ed:6e:97:dd:27:1f:ff:c3:
46:b1:1e:10:41:12:9e:c3:ba:a8:5b:de:e1:4b:ee:
4b:06:a9:7b:53:9e:29:41:42:fd:44:58:72:77:3d:
7e:e8:28:9b:73:fc:c8:4d:51:6b:f1:be:fa:f5:81:
a1:33:90:f2:b2:cc:0e:a4:42:e6:60:14:f1:91:09:
97:1b:2e:f4:d5:6c:b4:5a:84:94:72:a7:e7:f7:b1:
8f:2f:4e:a9:d8:7d:29:e7:c1:5d:6b:7a:49:29:d3:
a2:7e:b3:c1:a6:b1:92:28:34:0e:3f:43:17:2f:60:
19:b1:6b:6e:e9:ec:a4:6c:71:19:a6:16:0e:3b:84:
1e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:0D:BF:B4:67:C6:14:EC:4E:16:6E:17:76:45:08:56:E4:8A:46:CE
X509v3 Authority Key Identifier:
keyid:E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/pw2_tGfGFOxOFm4XdkUIVuSKRs4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.171.0/24
91.202.170.0/24
91.223.169.0/24
Signature Algorithm: sha256WithRSAEncryption
28:28:c3:7e:d5:f9:89:31:3b:88:71:50:34:1d:9d:6f:67:71:
57:8c:9a:50:5a:9b:e2:3d:9d:36:1a:36:6d:e1:ad:65:08:60:
b8:07:22:94:04:2c:65:b5:db:6d:15:57:a3:8f:64:f5:c5:16:
8c:8b:5a:39:6f:1c:86:a2:16:0f:75:8e:ee:5d:3c:d1:c5:b2:
f9:7c:30:24:57:b1:21:c6:53:32:79:8e:da:2a:1c:0d:a3:07:
0b:d0:6d:40:1d:07:f4:ee:f5:2c:bb:6e:63:f5:f7:d1:13:65:
99:a0:4c:e6:98:2f:40:30:45:90:0c:6e:bc:3e:3f:24:f7:7e:
30:2d:7e:21:19:b7:f5:9a:53:70:9e:98:33:1e:36:e2:00:46:
00:ea:75:34:68:b4:ae:65:10:7a:27:7e:f3:fd:a7:bd:98:44:
dd:da:02:fd:82:be:ca:fb:5d:10:84:8f:4a:4d:00:af:55:67:
50:a4:fc:ab:4b:b3:84:b4:6b:55:4a:0c:85:7f:2f:7c:01:9b:
5c:98:d3:57:79:df:b0:24:60:9c:34:e0:e6:6d:a7:ee:47:7d:
c4:8e:96:30:e2:14:71:78:8c:52:c2:fa:77:a8:90:68:27:09:
bc:2b:3e:f1:4d:3c:51:0d:23:fb:c0:b1:b9:7a:2c:7e:d4:1e:
fb:8e:d1:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:31 2023 by rpki-client on console-fra.rpki-client.org