Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b81e6e-2fef-464c-8935-0779029ae222/1/jUwjdUAYK1nAwxVZnVWPkU5fmwk.roa
File: jUwjdUAYK1nAwxVZnVWPkU5fmwk.roa (raw, json)
Hash identifier: yYM8bwbkPQLw+qqXamNOyN/hoCvJvPTRX6GZQ2P7Yco=
Subject key identifier: 8D:4C:23:75:40:18:2B:59:C0:C3:15:59:9D:55:8F:91:4E:5F:9B:09
Certificate issuer: /CN=6eb86b7bb00a442e08cb3b85a63e7b4848742e76
Certificate serial: 4B6C
Authority key identifier: 6E:B8:6B:7B:B0:0A:44:2E:08:CB:3B:85:A6:3E:7B:48:48:74:2E:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/brhre7AKRC4IyzuFpj57SEh0LnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b81e6e-2fef-464c-8935-0779029ae222/1/jUwjdUAYK1nAwxVZnVWPkU5fmwk.roa
Signing time: Mon 02 May 2022 08:33:51 +0000
ROA not before: Mon 02 May 2022 08:33:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51654
IP address blocks: 91.220.26.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19308 (0x4b6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eb86b7bb00a442e08cb3b85a63e7b4848742e76
Validity
Not Before: May 2 08:33:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8d4c237540182b59c0c315599d558f914e5f9b09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:1d:28:61:05:3a:d1:0b:68:a6:07:30:a9:2d:
0f:4d:8a:07:ae:3b:1a:e8:0b:97:57:36:e1:96:0a:
78:ab:2e:1d:26:76:f7:99:be:e3:30:a2:5d:23:17:
05:6d:56:4b:89:b3:51:ec:6a:20:df:80:c4:97:44:
38:b1:da:47:c7:f1:35:c1:b4:4b:27:f7:8c:22:db:
b8:b6:2b:50:72:7c:35:32:c9:04:06:a4:16:9b:7e:
81:c3:b1:db:29:d7:ec:0b:92:83:ef:16:6e:81:02:
2d:66:dc:15:da:33:4c:7c:c6:db:69:c0:70:8d:34:
a8:c6:2e:3a:c1:7d:f0:bb:70:f9:8d:99:4e:13:a7:
90:13:2e:7f:19:d6:21:57:6c:90:85:bf:b7:52:e6:
d4:24:ab:7e:c2:f9:61:77:e2:35:79:52:63:18:19:
fa:f2:7f:0d:dc:d7:d2:29:5e:80:89:86:53:e3:54:
16:6d:87:c1:f2:d0:6f:74:0f:b6:e4:05:d1:8f:2b:
9d:7a:c2:bc:4c:b6:b0:28:47:87:b6:60:17:71:36:
7d:33:04:e5:8e:cc:2d:dd:8b:45:ef:b8:e7:0e:e9:
25:32:fa:a8:52:df:46:53:9d:af:47:96:35:93:4c:
b1:26:cb:ff:15:6e:85:5a:95:fe:86:5d:46:a7:e3:
61:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:4C:23:75:40:18:2B:59:C0:C3:15:59:9D:55:8F:91:4E:5F:9B:09
X509v3 Authority Key Identifier:
keyid:6E:B8:6B:7B:B0:0A:44:2E:08:CB:3B:85:A6:3E:7B:48:48:74:2E:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brhre7AKRC4IyzuFpj57SEh0LnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b81e6e-2fef-464c-8935-0779029ae222/1/jUwjdUAYK1nAwxVZnVWPkU5fmwk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b81e6e-2fef-464c-8935-0779029ae222/1/brhre7AKRC4IyzuFpj57SEh0LnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.26.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:7a:2b:ca:e5:46:39:d7:ef:6d:bc:2f:ce:56:5d:92:fc:05:
ae:08:9b:39:ec:24:39:20:70:fa:b0:4e:84:be:80:ae:1e:75:
f9:05:c0:bc:09:32:a8:1e:67:3c:1a:93:49:66:f0:e4:a8:df:
5c:e3:38:e1:2a:de:6c:12:24:f1:ee:2d:ae:26:62:ab:fa:d8:
07:2c:26:59:a1:0d:05:65:d3:5f:44:1e:8e:9c:a2:09:fb:00:
c8:4a:36:07:5d:02:44:60:e6:82:18:2e:64:d4:67:37:e4:3b:
c2:01:d3:53:45:58:51:42:2b:31:40:02:5a:c1:f2:ce:a4:be:
92:36:b1:ef:d8:b9:75:f8:1e:95:53:3d:74:0f:52:c0:18:7a:
d1:98:39:1f:dc:15:43:4a:ba:63:35:37:cd:0a:19:ae:72:e0:
3e:c0:4c:3a:8f:d3:e2:e2:80:36:6d:c9:dd:ba:8b:86:0f:84:
36:cb:d8:60:d3:e2:2a:68:09:91:ad:04:a9:2d:b1:fc:79:8f:
b3:20:b0:c6:8a:51:b5:9f:27:3c:d5:0e:b3:4c:71:b2:5b:2e:
c0:1b:ed:e9:78:8d:ff:ca:94:6e:24:be:37:e0:56:5a:17:e5:
82:c2:0e:06:ca:cf:7b:d0:76:f7:7e:c1:29:24:28:bd:43:7c:
24:d4:e5:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:21:18 2025 by rpki-client