Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/a3af20-a4a9-4e2e-b344-30b1886d797a/1/wXVPVcfBqC7WzNhw2vcZ9Zj7xsw.roa
File: wXVPVcfBqC7WzNhw2vcZ9Zj7xsw.roa (raw, json)
Hash identifier: AUJyTUSWGXMwFHOAwTPKi8DbWvjZI4HVG2/3NaKJHV0=
Subject key identifier: C1:75:4F:55:C7:C1:A8:2E:D6:CC:D8:70:DA:F7:19:F5:98:FB:C6:CC
Certificate issuer: /CN=8b9facca22cc0c60e237a7b20416a260045a5c68
Certificate serial: 083E48
Authority key identifier: 8B:9F:AC:CA:22:CC:0C:60:E2:37:A7:B2:04:16:A2:60:04:5A:5C:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5-syiLMDGDiN6eyBBaiYARaXGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/a3af20-a4a9-4e2e-b344-30b1886d797a/1/wXVPVcfBqC7WzNhw2vcZ9Zj7xsw.roa
Signing time: Sat 01 Jan 2022 01:51:21 +0000
ROA not before: Sat 01 Jan 2022 01:51:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15404
IP address blocks: 91.212.113.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 540232 (0x83e48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b9facca22cc0c60e237a7b20416a260045a5c68
Validity
Not Before: Jan 1 01:51:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c1754f55c7c1a82ed6ccd870daf719f598fbc6cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ec:3c:79:7f:54:68:df:7e:13:78:90:2d:39:
f6:fb:d2:ad:5c:8a:3b:84:a1:3d:02:5d:10:a7:7d:
b2:dc:77:53:25:25:d1:1a:0c:5b:2b:a3:2c:5a:7e:
23:d9:be:b0:2a:bd:9a:00:58:ff:26:e2:45:2d:80:
d3:31:c7:9e:f0:33:db:12:b0:0f:1a:af:9d:c7:ee:
4d:81:57:eb:52:d4:a9:c6:ac:7a:59:47:0b:17:72:
8e:fe:88:f9:52:6d:66:85:ad:cf:c5:0e:ca:28:cc:
c6:cf:96:76:23:3e:80:f0:c1:cd:93:54:5f:5c:1c:
39:e4:43:0d:36:90:6a:c8:9c:1c:60:b2:1f:5d:d3:
53:54:50:7c:2b:31:1c:99:1b:31:51:a5:f7:c1:86:
67:42:ea:07:95:6b:df:2a:6b:9a:af:08:b8:da:ef:
15:ab:f3:36:c6:39:51:98:d3:9f:58:ed:75:65:26:
60:4a:e1:c0:31:21:1b:ff:c7:d4:18:f3:e8:ac:f9:
80:15:7f:fe:84:5e:9a:8b:d9:1c:17:50:97:e7:96:
5a:d4:82:7c:40:ea:39:2e:02:ba:d6:c6:87:e9:23:
11:5d:2b:ed:20:b2:63:12:d9:9b:c2:c0:36:1b:4a:
21:63:3a:e6:3f:7e:0b:68:60:77:da:5e:f3:32:ca:
5b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:75:4F:55:C7:C1:A8:2E:D6:CC:D8:70:DA:F7:19:F5:98:FB:C6:CC
X509v3 Authority Key Identifier:
keyid:8B:9F:AC:CA:22:CC:0C:60:E2:37:A7:B2:04:16:A2:60:04:5A:5C:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5-syiLMDGDiN6eyBBaiYARaXGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a3af20-a4a9-4e2e-b344-30b1886d797a/1/wXVPVcfBqC7WzNhw2vcZ9Zj7xsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a3af20-a4a9-4e2e-b344-30b1886d797a/1/i5-syiLMDGDiN6eyBBaiYARaXGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.113.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:9b:b9:05:96:25:aa:32:e5:59:10:06:75:48:d2:14:dd:f1:
af:ba:97:19:e3:0c:b8:80:2d:55:57:f8:88:66:47:71:46:0d:
98:68:9d:49:1e:2a:34:9a:82:96:64:ec:72:d1:db:f0:f6:4b:
36:d4:01:6c:f1:21:42:c7:0f:f6:5a:c2:a0:6c:82:85:ba:76:
b4:e8:aa:f4:5a:f5:9d:8e:61:e2:a1:a9:92:65:d5:92:d4:8f:
eb:0e:99:6e:6e:f3:51:80:cc:0e:88:f0:43:38:db:fe:45:b7:
c3:29:9e:36:0d:b2:ab:4a:03:5e:f4:c5:81:36:a1:39:6c:5c:
6e:b2:d2:fd:b3:d2:97:d7:34:18:f0:23:7f:e4:29:bf:9d:8b:
f0:aa:f8:38:04:f4:de:37:5e:c2:10:28:3e:e7:3a:46:5c:b4:
ad:5e:66:81:51:8c:6e:91:41:a9:28:c8:ef:0c:69:c0:c9:9c:
3b:56:27:a7:d4:02:af:94:e3:a1:e2:65:47:c9:1d:d7:7d:ff:
52:53:28:00:e3:ff:2f:bb:e5:e6:e1:44:49:a3:48:71:eb:f0:
9c:b7:0b:4c:5a:e5:2b:6f:1f:ee:07:13:d9:d3:6f:54:39:26:
a6:6a:38:47:0c:57:52:18:88:5a:2c:ff:1c:d9:74:e8:d1:6a:
1e:39:a1:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:47 2024 by rpki-client on console-fra.rpki-client.org