Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/4b1b49-bb7a-4a6e-ba9c-f224de60b49b/1/wBCHj3LtYOTaSdE8gwMM8pmYldw.roa
File: wBCHj3LtYOTaSdE8gwMM8pmYldw.roa (raw, json)
Hash identifier: 9j4wPRn1cPHnoqFfk66OE/xyUHdxYEAHfyPRRY9ZtKo=
Subject key identifier: C0:10:87:8F:72:ED:60:E4:DA:49:D1:3C:83:03:0C:F2:99:98:95:DC
Certificate issuer: /CN=39cef2e2df5b4ada21e4736b00b7eb89e4d3eb39
Certificate serial: 07174ADD
Authority key identifier: 39:CE:F2:E2:DF:5B:4A:DA:21:E4:73:6B:00:B7:EB:89:E4:D3:EB:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oc7y4t9bStoh5HNrALfrieTT6zk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/4b1b49-bb7a-4a6e-ba9c-f224de60b49b/1/wBCHj3LtYOTaSdE8gwMM8pmYldw.roa
Signing time: Fri 24 Jun 2022 08:56:47 +0000
ROA not before: Fri 24 Jun 2022 08:56:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3223
IP address blocks: 91.226.182.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118967005 (0x7174add)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39cef2e2df5b4ada21e4736b00b7eb89e4d3eb39
Validity
Not Before: Jun 24 08:56:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c010878f72ed60e4da49d13c83030cf2999895dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b0:39:4b:e4:37:94:ea:d3:54:94:1f:a7:6b:
30:35:2c:69:e0:b2:6d:4c:66:98:9f:10:ff:43:68:
69:b4:87:e4:8c:12:9f:5e:d5:86:a8:95:99:61:83:
ab:45:63:f3:d9:4f:56:2b:62:2a:48:a8:a4:67:5e:
2d:41:7e:10:73:16:a6:81:54:d4:3b:3a:d4:d6:a5:
1c:13:18:66:50:ac:eb:ee:67:42:02:00:e6:e1:21:
59:11:1f:65:cb:63:a2:d9:7f:3b:6f:83:a3:fe:bc:
ae:12:a7:44:6b:e2:92:14:35:f2:22:0d:e5:6b:9f:
a3:34:02:e0:fe:b7:5d:84:71:5d:4a:16:c6:22:a3:
87:f9:80:60:a0:3c:0d:81:13:b8:92:20:de:62:15:
36:88:dc:30:d4:e1:d6:82:9f:ad:47:db:86:40:17:
2a:14:09:69:98:09:4d:14:cf:9c:71:c5:79:84:b1:
80:1d:21:a2:18:b7:ca:41:ad:f3:90:2e:45:31:03:
e9:4c:7e:db:fe:83:73:1a:f2:ea:3b:17:8a:59:63:
1f:a3:a9:0d:17:51:c1:0c:08:16:6c:ee:30:87:a5:
05:b3:3c:d9:41:57:d1:f8:6f:8a:ba:71:79:d4:a6:
a6:45:ee:68:27:91:fb:c4:d3:12:30:9c:6e:0e:17:
21:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:10:87:8F:72:ED:60:E4:DA:49:D1:3C:83:03:0C:F2:99:98:95:DC
X509v3 Authority Key Identifier:
keyid:39:CE:F2:E2:DF:5B:4A:DA:21:E4:73:6B:00:B7:EB:89:E4:D3:EB:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oc7y4t9bStoh5HNrALfrieTT6zk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4b1b49-bb7a-4a6e-ba9c-f224de60b49b/1/wBCHj3LtYOTaSdE8gwMM8pmYldw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4b1b49-bb7a-4a6e-ba9c-f224de60b49b/1/Oc7y4t9bStoh5HNrALfrieTT6zk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.182.0/23
Signature Algorithm: sha256WithRSAEncryption
83:cf:12:4c:4b:a3:4c:43:b1:a1:57:1d:f8:c3:19:63:df:6d:
d7:a8:56:05:7f:06:77:9e:93:f8:a7:fa:08:1c:41:71:85:91:
ee:e9:2e:fb:18:f2:3f:4c:12:ad:8a:24:ee:79:ec:8b:59:b0:
15:b1:bb:5c:5b:27:2a:22:1e:9c:31:93:2d:a8:d9:ea:e2:df:
01:48:ba:02:d8:36:e8:10:33:d3:56:43:9a:f8:e2:0c:79:c6:
f0:dd:cc:65:9f:59:ef:f4:92:35:35:96:c3:f8:46:61:a5:6e:
c8:fc:ff:b7:6c:3f:06:e6:cd:a1:ce:bf:74:ec:61:90:e9:e8:
88:77:59:60:53:04:35:b7:59:ce:15:8c:22:2b:b5:a2:29:c1:
30:9b:5b:09:e8:4e:85:07:06:d5:47:86:5d:07:3c:ed:ce:36:
86:1a:bd:a7:28:f9:d4:f5:de:d5:e4:38:97:0f:d4:8e:d0:24:
bb:33:e3:aa:a2:ce:f7:60:ce:c8:55:41:06:50:e1:d3:9e:b8:
37:9e:00:27:bb:8f:70:6e:89:a9:37:8c:82:57:aa:38:e9:27:
20:47:bc:29:92:1e:8f:65:93:f4:56:a1:13:d6:0d:bc:40:c1:
af:42:25:00:ac:3f:d4:93:5b:c2:14:78:07:df:0b:63:ca:e8:
f4:b5:44:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:07 2024 by rpki-client on console-fra.rpki-client.org