Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b5559e-950b-48f4-a2ab-b26f1a70af0d/1/nwnAiqJlivQvF6kEjIQsfEQ7WTw.roa
File: nwnAiqJlivQvF6kEjIQsfEQ7WTw.roa (raw, json)
Hash identifier: 1WHNEG/5jTzBYI01elZoF//njmfg6AcUh0A14MF/Ltg=
Subject key identifier: 9F:09:C0:8A:A2:65:8A:F4:2F:17:A9:04:8C:84:2C:7C:44:3B:59:3C
Certificate issuer: /CN=e31722d79bff4384a597cb544d9e7974490d8734
Certificate serial: 01D965E7
Authority key identifier: E3:17:22:D7:9B:FF:43:84:A5:97:CB:54:4D:9E:79:74:49:0D:87:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xci15v_Q4Sll8tUTZ55dEkNhzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b5559e-950b-48f4-a2ab-b26f1a70af0d/1/nwnAiqJlivQvF6kEjIQsfEQ7WTw.roa
Signing time: Thu 16 Jun 2022 07:22:44 +0000
ROA not before: Thu 16 Jun 2022 07:22:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198459
IP address blocks: 91.239.53.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31024615 (0x1d965e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e31722d79bff4384a597cb544d9e7974490d8734
Validity
Not Before: Jun 16 07:22:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9f09c08aa2658af42f17a9048c842c7c443b593c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cf:77:e8:44:68:e0:37:98:b1:a6:5f:e9:48:
88:67:4e:42:6d:e7:a3:af:e2:6f:1c:6f:e9:5e:fb:
77:13:63:5b:dd:12:84:aa:e2:c6:5c:be:a9:40:d7:
62:79:fb:84:9d:dd:ec:85:8e:06:8b:3c:cf:5c:9b:
2a:84:5e:91:c1:54:88:25:a9:aa:47:1e:8e:0e:5e:
4c:6d:f0:d0:ef:98:a4:b8:fa:16:aa:4d:d0:a3:84:
f1:cb:ae:98:b6:c1:a6:f2:dd:b3:b4:18:f5:b4:2c:
fd:99:7a:1c:9d:3c:e1:89:24:da:28:c0:98:87:30:
f3:6a:10:4c:93:7a:b7:8f:99:4b:03:83:5a:b2:a6:
ee:e7:fc:ee:bf:4b:9c:ac:91:8a:61:62:fe:ed:0f:
d2:96:85:ad:ca:23:58:97:a8:c2:d7:a4:c5:48:92:
d6:62:50:e3:4d:89:ad:f5:d1:b6:de:94:01:c0:1e:
b4:96:af:a2:98:2d:d3:b2:90:7a:8c:23:74:a9:be:
01:98:24:9f:13:bb:f4:59:36:e7:c8:29:61:5b:0e:
8b:94:e3:2c:68:bc:d7:9a:e8:8c:11:0c:3e:50:92:
cf:ac:a1:72:41:2e:7a:da:79:25:ea:62:bc:c3:fb:
6e:f2:16:1f:b0:d4:58:11:fd:5f:ca:5f:c5:4d:3d:
57:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:09:C0:8A:A2:65:8A:F4:2F:17:A9:04:8C:84:2C:7C:44:3B:59:3C
X509v3 Authority Key Identifier:
keyid:E3:17:22:D7:9B:FF:43:84:A5:97:CB:54:4D:9E:79:74:49:0D:87:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xci15v_Q4Sll8tUTZ55dEkNhzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b5559e-950b-48f4-a2ab-b26f1a70af0d/1/nwnAiqJlivQvF6kEjIQsfEQ7WTw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b5559e-950b-48f4-a2ab-b26f1a70af0d/1/4xci15v_Q4Sll8tUTZ55dEkNhzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.53.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:ee:8b:5e:32:b6:cb:94:36:d7:b7:1e:cf:bd:23:9f:43:0b:
cf:98:f2:b3:4e:2c:51:02:3d:ff:27:d1:ad:a3:df:ec:84:9e:
05:f2:bf:73:e2:6e:39:a9:36:dd:96:a6:0f:8e:15:ee:0d:b7:
c1:a1:cf:96:9f:ca:fa:61:9f:83:ac:22:79:05:08:43:64:31:
d2:f4:b8:c4:8f:c8:71:1c:8d:7f:ad:30:5b:29:a6:fb:b1:4e:
c8:29:75:70:8d:81:1a:47:f9:0e:48:7e:bc:37:99:ca:08:71:
22:1d:1c:10:bb:1c:3e:de:2f:68:1f:93:98:51:0d:5f:c5:dd:
ab:42:0b:a7:82:5e:5a:71:7f:59:df:25:6c:2c:c5:d5:0b:1b:
7c:41:4b:15:2f:20:82:f5:3f:42:93:e5:74:5a:bd:9d:1d:22:
6d:49:b1:95:da:4e:b1:e6:a5:bb:28:e9:e9:0c:0c:3a:a6:87:
f4:ee:af:d4:39:0d:d6:af:53:cd:d6:9f:de:2a:79:4e:54:6a:
03:fd:83:a9:05:cc:d5:78:92:77:30:62:37:04:ce:57:54:fb:
10:96:18:b6:5c:62:db:fe:a2:9e:5c:87:7d:15:c1:50:c9:72:
a4:a0:f0:f9:4b:08:11:9c:a2:57:52:87:42:73:c5:5e:82:f4:
2b:fe:fd:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:02 2023 by rpki-client on console-fra.rpki-client.org