Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/WDr0USE4UoXF8FKEYEnqEjmLk-k.roa
File: WDr0USE4UoXF8FKEYEnqEjmLk-k.roa (raw, json)
Hash identifier: f32Zbo+4F/iQ/4YJi/ON5hwEaUg35coE/rcQeNEPVMs=
Subject key identifier: 58:3A:F4:51:21:38:52:85:C5:F0:52:84:60:49:EA:12:39:8B:93:E9
Certificate issuer: /CN=92b143d7db115957c5db9af895f4e7e15b7b6b17
Certificate serial: 92AC
Authority key identifier: 92:B1:43:D7:DB:11:59:57:C5:DB:9A:F8:95:F4:E7:E1:5B:7B:6B:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/krFD19sRWVfF25r4lfTn4Vt7axc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/WDr0USE4UoXF8FKEYEnqEjmLk-k.roa
Signing time: Tue 08 Feb 2022 23:58:30 +0000
ROA not before: Tue 08 Feb 2022 23:58:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51824
IP address blocks: 91.221.85.0/24 maxlen: 24
91.221.84.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37548 (0x92ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92b143d7db115957c5db9af895f4e7e15b7b6b17
Validity
Not Before: Feb 8 23:58:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=583af45121385285c5f052846049ea12398b93e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b6:6c:28:fe:33:17:9b:dc:00:70:8b:ad:58:
2c:fa:09:2a:97:0e:23:90:e5:74:98:76:fd:01:1f:
99:d2:b6:1b:26:2c:f7:18:0e:99:89:3a:81:e5:9b:
e5:0e:a1:a6:c2:b8:9e:be:f8:30:97:3f:79:26:ac:
f6:70:34:31:72:5a:f6:2b:8e:59:64:61:9d:bb:5a:
f7:6a:38:c1:52:05:bc:ca:c9:2d:99:11:3f:d4:f2:
d9:1c:b8:af:82:5b:ff:56:88:2f:36:b0:2a:b2:fd:
b7:82:38:67:b2:f5:e3:0f:6d:96:e8:cd:a5:66:e1:
a5:b2:ad:46:11:78:4b:8d:c1:df:d8:e9:a5:ea:1f:
83:06:f2:54:02:e4:54:a9:38:90:8f:9b:50:b7:d4:
b7:d7:6f:62:2e:0c:42:55:a6:08:54:b6:a6:da:1c:
63:c6:f6:f9:e7:9d:f3:83:15:2b:cf:7e:4d:28:f9:
64:81:83:cb:d2:9d:01:ad:bd:df:28:fb:18:5e:41:
49:8e:6b:cd:fc:4c:b8:78:98:d0:aa:f4:cf:bb:92:
6b:e9:6f:31:d4:5e:cd:6d:f8:c6:f5:f3:36:d5:43:
20:a6:66:24:04:eb:f6:06:64:f7:cb:b3:01:2a:d9:
e8:74:a1:5a:a1:27:ad:5d:2f:6e:2b:cf:ee:51:32:
74:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:3A:F4:51:21:38:52:85:C5:F0:52:84:60:49:EA:12:39:8B:93:E9
X509v3 Authority Key Identifier:
keyid:92:B1:43:D7:DB:11:59:57:C5:DB:9A:F8:95:F4:E7:E1:5B:7B:6B:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/krFD19sRWVfF25r4lfTn4Vt7axc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/WDr0USE4UoXF8FKEYEnqEjmLk-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.221.84.0/23
Signature Algorithm: sha256WithRSAEncryption
70:66:25:53:a6:92:9c:67:6d:b0:c8:bb:10:ce:ad:95:2d:0a:
28:dd:88:fd:a9:5e:a2:82:a8:7a:13:a9:03:be:07:ae:b5:a9:
c9:ed:ad:36:02:fe:4a:e9:78:ad:a5:d6:ca:2b:25:5d:05:da:
38:85:23:d1:2a:e5:d1:bd:22:51:1e:38:05:09:73:89:6a:ae:
be:0f:4a:39:35:59:e2:e6:c3:41:af:9f:dd:d2:eb:85:a9:e3:
07:1f:b0:74:9e:05:d8:b4:82:e7:b9:e0:04:5a:ae:b6:dc:aa:
75:20:89:3b:da:a5:ea:9e:d1:7b:3b:2e:bc:ef:f2:d8:ef:61:
bc:91:ad:ff:1c:67:d9:d2:06:4c:ab:a3:dc:b7:21:1a:b5:ed:
1e:a9:ed:ca:67:af:9a:5c:c3:a7:89:d2:dc:c3:b0:f8:a3:ba:
06:cd:17:9c:aa:28:e5:0c:f3:51:b5:70:b5:73:e7:5d:05:eb:
aa:19:d4:5d:00:c7:8b:d8:94:35:80:cc:8c:e7:6e:bc:0f:79:
98:eb:e5:6d:f9:a5:9f:14:5a:f4:ae:8e:25:82:b5:a5:ed:f9:
f1:4c:ce:31:71:0e:db:a8:66:83:33:6d:58:70:00:8b:a8:b5:
b0:1d:2e:c8:21:38:3e:4b:f2:a1:05:b4:e5:2d:52:5e:5f:b5:
30:8d:67:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:33 2023 by rpki-client on console.sobornost.net