Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8d58b5-4f13-47b2-a57e-283bb0923817/1/WnBeIsqMBIFX97K8bYN8fOY49SM.roa
File: WnBeIsqMBIFX97K8bYN8fOY49SM.roa (raw, json)
Hash identifier: yZJhqm1/66Y4fzs1aEozQwZZLUfmzFstugENAB8xhb0=
Subject key identifier: 5A:70:5E:22:CA:8C:04:81:57:F7:B2:BC:6D:83:7C:7C:E6:38:F5:23
Certificate issuer: /CN=6c1024a0bdfbad95f01064d518cf6ea966b4488a
Certificate serial: 0BFF5898
Authority key identifier: 6C:10:24:A0:BD:FB:AD:95:F0:10:64:D5:18:CF:6E:A9:66:B4:48:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBAkoL37rZXwEGTVGM9uqWa0SIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/8d58b5-4f13-47b2-a57e-283bb0923817/1/WnBeIsqMBIFX97K8bYN8fOY49SM.roa
Signing time: Sat 01 Jan 2022 01:57:32 +0000
ROA not before: Sat 01 Jan 2022 01:57:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56702
IP address blocks: 91.226.223.0/24 maxlen: 24
91.226.222.0/23 maxlen: 23
91.226.222.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 201283736 (0xbff5898)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c1024a0bdfbad95f01064d518cf6ea966b4488a
Validity
Not Before: Jan 1 01:57:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5a705e22ca8c048157f7b2bc6d837c7ce638f523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d1:a4:7d:f9:59:a0:f4:4c:17:ec:01:05:66:
80:b2:88:c3:f4:2f:ce:92:be:54:d6:c5:25:af:69:
c2:d0:8e:39:5d:a3:dc:1d:d0:bc:79:37:1c:16:aa:
ad:fe:02:07:67:a6:cd:58:11:6b:bd:67:99:a9:ea:
7f:f6:ff:35:8a:fc:dd:cc:fe:eb:c4:89:c3:2a:b8:
10:12:3b:c8:8f:d6:d3:98:e1:6d:6c:d1:bb:6f:2c:
f0:f1:c3:70:78:61:e2:cf:30:4c:43:80:73:71:12:
16:13:f4:e2:76:4e:fa:a8:c1:48:1c:22:0b:34:25:
d4:88:01:88:52:2c:03:ad:11:f5:81:77:71:19:93:
86:a7:48:df:3b:bf:e4:b2:aa:f5:fe:f2:34:33:77:
ae:4b:c6:ee:7e:3e:02:98:45:ed:76:16:25:a8:05:
72:eb:27:57:00:27:4b:ef:54:66:11:84:fd:21:6b:
82:80:49:b5:4e:12:fa:7f:eb:82:a7:54:55:d2:83:
fd:29:92:67:09:d9:4f:f5:35:7f:9f:20:8e:d4:0f:
9c:e2:68:33:31:f5:87:86:d3:63:61:e8:0b:12:a5:
f4:91:e2:fd:df:e6:af:f5:47:e1:20:78:84:3a:9c:
6a:85:e8:cf:49:b1:3b:c6:3a:8f:34:e9:67:e4:68:
13:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:70:5E:22:CA:8C:04:81:57:F7:B2:BC:6D:83:7C:7C:E6:38:F5:23
X509v3 Authority Key Identifier:
keyid:6C:10:24:A0:BD:FB:AD:95:F0:10:64:D5:18:CF:6E:A9:66:B4:48:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBAkoL37rZXwEGTVGM9uqWa0SIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8d58b5-4f13-47b2-a57e-283bb0923817/1/WnBeIsqMBIFX97K8bYN8fOY49SM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8d58b5-4f13-47b2-a57e-283bb0923817/1/bBAkoL37rZXwEGTVGM9uqWa0SIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.222.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:3f:c7:cb:1a:a8:cf:ee:ff:87:b7:02:83:1c:82:4d:3f:e1:
d3:89:14:fa:0a:76:29:bd:c4:c2:f2:44:66:c4:90:4b:32:c4:
ad:5b:27:48:fa:f7:0b:6f:69:f2:bb:b0:06:8f:8a:ef:f1:57:
7b:f6:d3:ec:73:a4:cf:77:49:e3:a3:24:18:43:e9:01:9e:11:
90:29:de:e3:49:cd:d7:5d:35:90:4f:5b:66:8a:ff:65:2e:d1:
7c:00:b5:06:8e:15:fe:cf:1d:90:b0:b0:e2:07:d5:2d:87:ef:
ca:19:00:84:53:c4:95:cd:53:33:7d:f0:e8:55:91:72:8e:2d:
df:0d:d9:7a:ee:d7:17:73:20:54:c9:f6:0d:75:ad:b5:d0:9e:
93:a1:80:53:12:c8:5e:90:e7:50:95:03:5e:fe:a9:70:cb:21:
38:ec:58:43:8e:d8:02:50:2d:f9:f2:73:14:b0:2c:d7:68:a1:
a7:46:28:3e:1a:5b:12:8c:d2:dc:4a:01:bd:16:8d:e2:85:8c:
7c:c7:77:05:03:60:65:6f:e3:ed:18:8d:5d:0c:94:13:90:98:
29:33:d6:f5:89:1e:0d:f1:5f:1a:9a:d8:f7:5d:59:93:30:7d:
e0:4f:23:81:ce:d9:33:f3:62:94:11:97:66:94:9c:1b:08:0a:
7d:d3:d6:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:54 2023 by rpki-client on console.sobornost.net