Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/26cc6a-6f17-40a9-b987-6fc717175e58/1/RDWwLE94zWECA4jqOrrI-2VTsPc.roa
File: RDWwLE94zWECA4jqOrrI-2VTsPc.roa (raw, json)
Hash identifier: ZeXnnxu35E00GinraSoGTZh7Eu6YXD78MVvwgrNXMkw=
Subject key identifier: 44:35:B0:2C:4F:78:CD:61:02:03:88:EA:3A:BA:C8:FB:65:53:B0:F7
Certificate issuer: /CN=b537115961c6abf5b87abe4a20053e4aca1b6ec2
Certificate serial: 05DACFFC
Authority key identifier: B5:37:11:59:61:C6:AB:F5:B8:7A:BE:4A:20:05:3E:4A:CA:1B:6E:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTcRWWHGq_W4er5KIAU-SsobbsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/26cc6a-6f17-40a9-b987-6fc717175e58/1/RDWwLE94zWECA4jqOrrI-2VTsPc.roa
Signing time: Sat 01 Jan 2022 12:58:21 +0000
ROA not before: Sat 01 Jan 2022 12:58:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207413
IP address blocks: 91.194.140.0/23 maxlen: 24
91.194.166.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98226172 (0x5dacffc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b537115961c6abf5b87abe4a20053e4aca1b6ec2
Validity
Not Before: Jan 1 12:58:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4435b02c4f78cd61020388ea3abac8fb6553b0f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:27:49:5b:ad:ab:bb:ae:c1:11:1f:67:7e:dc:
9a:9a:e7:ae:d5:fc:6a:57:70:12:7f:d7:88:85:39:
20:39:3d:1d:e7:db:61:e7:5f:5d:44:24:08:a3:39:
9d:cc:86:b4:bb:eb:e8:38:fe:7c:b8:a8:6d:b4:78:
96:0c:db:a6:ed:7c:1e:4c:4f:2c:37:04:91:e7:b3:
a6:61:bc:28:2a:c7:e4:80:a9:55:e4:65:a5:e9:82:
5d:35:aa:79:ca:1c:1a:f5:e4:e2:bf:f2:ef:4f:4c:
6c:97:ad:7f:b0:93:f0:a0:f2:23:87:dd:e6:a0:f6:
21:04:c0:7e:f0:b4:1b:bf:63:c2:51:50:5c:eb:54:
ed:f1:99:4d:67:9f:8d:ba:86:91:e2:62:0a:13:e8:
01:ca:28:aa:ac:8a:40:9d:5b:25:4c:91:fb:f3:5a:
ac:b0:ab:45:ac:ce:cb:d9:24:cf:65:db:77:b6:5a:
62:fb:3e:8e:72:95:a3:95:55:97:07:06:14:b8:31:
96:bb:d9:0a:bb:3e:4f:fc:4a:68:9c:4b:9d:42:86:
24:ed:a4:33:68:f4:c2:4c:0c:2c:a8:88:04:df:01:
75:49:38:91:e3:22:31:77:32:58:5c:a8:2c:45:05:
2e:c2:f2:a3:5f:d1:f3:2d:06:49:92:d2:1a:3e:f8:
a2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:35:B0:2C:4F:78:CD:61:02:03:88:EA:3A:BA:C8:FB:65:53:B0:F7
X509v3 Authority Key Identifier:
keyid:B5:37:11:59:61:C6:AB:F5:B8:7A:BE:4A:20:05:3E:4A:CA:1B:6E:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTcRWWHGq_W4er5KIAU-SsobbsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/26cc6a-6f17-40a9-b987-6fc717175e58/1/RDWwLE94zWECA4jqOrrI-2VTsPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/26cc6a-6f17-40a9-b987-6fc717175e58/1/tTcRWWHGq_W4er5KIAU-SsobbsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.140.0/23
91.194.166.0/23
Signature Algorithm: sha256WithRSAEncryption
96:81:33:43:db:c0:1e:65:0f:1c:10:fd:20:e2:d2:f5:76:8b:
09:ab:34:d9:d6:ea:16:de:e0:a5:4b:aa:7e:7a:c9:02:db:08:
7f:31:9f:11:a6:08:f1:5f:3e:81:8f:71:1e:c7:27:20:bb:2c:
7e:17:a3:e4:78:79:94:cb:5e:f5:c9:d0:d6:70:c2:13:6a:a7:
00:30:3b:08:86:0e:21:53:de:df:12:c5:aa:14:f2:8a:26:c5:
30:45:03:49:7b:bb:9b:3e:68:f6:1d:23:66:4d:5f:f1:da:90:
16:49:67:14:b7:2e:e6:81:51:28:04:98:9a:e4:6a:bc:c7:cd:
9a:58:40:d9:eb:d1:28:6a:ca:32:18:dd:53:77:52:2d:b6:e5:
13:43:20:16:b9:d2:04:41:cc:d7:ac:45:45:ae:58:24:c8:0f:
16:f1:12:01:1f:c8:0e:21:f7:86:ad:cb:e8:b9:f8:9b:82:92:
77:44:a0:67:43:01:7c:5d:ce:5e:47:dd:1d:4f:b7:f8:86:4e:
c9:49:96:e7:94:0f:82:04:35:36:9e:cf:a6:d4:38:dc:13:4b:
48:a7:3a:92:c4:29:55:44:e7:23:17:6e:48:ae:45:85:ad:0c:
f5:fa:22:99:1f:c9:48:d9:28:37:2c:60:1d:05:1d:01:dc:3a:
f0:19:6e:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:32 2024 by rpki-client on console-ams.rpki-client.org