Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/Vwk5_4xTIWQ8CpMAsv7-RQ-6ddE.roa
File: Vwk5_4xTIWQ8CpMAsv7-RQ-6ddE.roa (raw, json)
Hash identifier: gfnApgxnaHF5RcUOx8KDJXdmO9ZkKPGex9UnUzGXSUk=
Subject key identifier: 57:09:39:FF:8C:53:21:64:3C:0A:93:00:B2:FE:FE:45:0F:BA:75:D1
Certificate issuer: /CN=9dd504860a7c924e721cbfaea5f49a72c8296c35
Certificate serial: 03E74C4A
Authority key identifier: 9D:D5:04:86:0A:7C:92:4E:72:1C:BF:AE:A5:F4:9A:72:C8:29:6C:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ndUEhgp8kk5yHL-upfSacsgpbDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/Vwk5_4xTIWQ8CpMAsv7-RQ-6ddE.roa
Signing time: Sat 01 Jan 2022 14:06:09 +0000
ROA not before: Sat 01 Jan 2022 14:06:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48964
IP address blocks: 91.204.122.0/24 maxlen: 24
91.204.123.0/24 maxlen: 24
91.204.120.0/24 maxlen: 24
91.212.80.0/24 maxlen: 24
193.19.243.0/24 maxlen: 24
193.19.241.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65489994 (0x3e74c4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dd504860a7c924e721cbfaea5f49a72c8296c35
Validity
Not Before: Jan 1 14:06:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=570939ff8c5321643c0a9300b2fefe450fba75d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d0:25:90:36:b2:eb:84:e9:6d:67:64:0d:8f:
ed:e2:50:61:4f:38:2f:fe:57:aa:a0:cd:31:ce:22:
3f:ce:f1:29:c3:17:58:ff:3e:82:d5:61:25:59:12:
52:03:c3:47:06:28:f1:b0:09:87:10:09:aa:f6:03:
84:8d:02:34:b5:a5:31:40:93:9f:aa:3e:31:3d:74:
eb:80:0b:7a:b8:7a:f8:22:38:c4:4f:9e:a8:c4:72:
b1:1c:9a:b3:22:9d:9f:4e:6f:fb:ea:ce:d3:83:e5:
c6:b5:65:fe:78:3d:3f:65:35:4c:bc:6b:c3:75:da:
38:b5:09:86:b8:b1:80:08:4c:51:46:04:fb:f0:99:
51:3b:4c:0d:84:89:25:95:ea:3f:58:75:89:94:dc:
08:ab:3f:95:13:f9:a8:98:3d:93:fa:9b:f6:c5:e0:
1e:9b:12:8d:ad:e7:9d:84:11:5f:52:3d:11:66:0a:
d3:05:49:39:c0:a0:98:6a:e7:2c:34:82:4b:ca:e9:
4d:20:55:0d:20:9e:ad:b6:6f:ff:47:f2:1b:43:24:
6b:73:6b:59:1a:6e:1d:7d:2b:51:77:05:21:d6:96:
4c:5e:f2:a8:f4:57:44:87:8b:fd:42:ad:87:cf:e4:
75:f3:00:25:48:9c:a1:b9:64:be:d4:05:e0:8d:e5:
21:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:09:39:FF:8C:53:21:64:3C:0A:93:00:B2:FE:FE:45:0F:BA:75:D1
X509v3 Authority Key Identifier:
keyid:9D:D5:04:86:0A:7C:92:4E:72:1C:BF:AE:A5:F4:9A:72:C8:29:6C:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ndUEhgp8kk5yHL-upfSacsgpbDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/Vwk5_4xTIWQ8CpMAsv7-RQ-6ddE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.204.120.0/24
91.204.122.0/23
91.212.80.0/24
193.19.241.0/24
193.19.243.0/24
Signature Algorithm: sha256WithRSAEncryption
46:d6:96:3f:e3:a4:04:67:5c:ad:72:c3:93:0d:42:e4:8a:b5:
c6:be:7c:0d:9a:32:55:7b:bf:01:56:1e:d3:05:44:ed:72:20:
1f:49:cd:0b:58:42:cb:e3:79:8d:c1:b3:8d:91:6b:44:02:bf:
21:c6:49:8c:87:6e:6b:11:ce:9d:4c:24:cb:a8:7e:94:70:75:
82:dc:54:77:04:cc:f4:18:2f:80:1c:dd:ac:52:0a:f8:64:47:
8b:64:04:eb:ad:f9:81:14:26:4e:2b:dc:26:25:ec:fb:c5:74:
93:0c:58:d0:22:eb:32:ed:36:54:7c:5b:b9:92:1b:ae:c2:83:
63:df:ec:5d:8d:34:72:e8:bb:77:70:7b:91:0e:c3:bb:e5:5d:
96:dd:89:a4:ef:d3:1e:b7:31:23:d1:93:c8:b2:aa:19:2f:da:
9d:8f:21:1a:ab:2c:34:6d:f2:93:77:4c:05:32:4c:6e:44:a8:
f4:d5:20:a0:37:93:55:ce:40:d6:49:90:46:fb:43:94:c1:ef:
ec:94:d2:52:d1:86:86:55:b1:0f:7a:80:18:ec:9c:cc:03:54:
3e:22:1f:4c:7f:04:ac:01:ce:e0:c7:d9:58:4d:86:41:e3:ac:
77:76:57:db:66:86:47:de:12:56:7a:11:3f:47:d2:1f:22:91:
93:e2:33:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:22 2024 by rpki-client on console-fra.rpki-client.org