Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/81a0df-04b5-47ef-8695-4b5864b9d1d9/1/WSrQ1ztBwbK_9SyfsAJ7AELYwdU.roa
File: WSrQ1ztBwbK_9SyfsAJ7AELYwdU.roa (raw, json)
Hash identifier: jXmQKBJVrPi62eLQtDu0m9eai55bIorQ7JJC2FtuVB4=
Subject key identifier: 59:2A:D0:D7:3B:41:C1:B2:BF:F5:2C:9F:B0:02:7B:00:42:D8:C1:D5
Certificate issuer: /CN=56f2666f6da410b35a40b77265fafed6f1b9426c
Certificate serial: C1D1
Authority key identifier: 56:F2:66:6F:6D:A4:10:B3:5A:40:B7:72:65:FA:FE:D6:F1:B9:42:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VvJmb22kELNaQLdyZfr-1vG5Qmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/81a0df-04b5-47ef-8695-4b5864b9d1d9/1/WSrQ1ztBwbK_9SyfsAJ7AELYwdU.roa
Signing time: Thu 28 Apr 2022 16:49:13 +0000
ROA not before: Thu 28 Apr 2022 16:49:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51626
IP address blocks: 91.220.13.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49617 (0xc1d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56f2666f6da410b35a40b77265fafed6f1b9426c
Validity
Not Before: Apr 28 16:49:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=592ad0d73b41c1b2bff52c9fb0027b0042d8c1d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:29:57:14:d2:52:be:12:74:ce:b0:65:02:12:
f0:80:3b:d1:75:ec:95:01:f1:c7:73:40:b1:87:59:
55:99:91:b4:71:10:4f:6e:43:47:50:de:76:d8:f0:
b1:e8:36:69:74:89:31:48:cf:46:ca:12:88:eb:b8:
39:14:4f:98:84:a3:72:b7:53:0e:f0:6f:f7:af:a6:
48:71:f0:4a:61:19:a8:54:89:b1:f7:46:69:e3:f3:
18:fa:24:3a:cf:7a:0b:fc:c9:b3:b7:ec:d7:d1:35:
ff:ec:5c:2d:85:de:c1:bd:54:de:bc:ea:ac:c4:bd:
a9:3d:14:8f:68:bf:6e:34:b6:af:c1:04:a8:6d:be:
c7:c7:aa:40:ae:08:36:08:7c:0f:c2:4f:a0:e3:4f:
45:d8:70:51:8f:e2:12:8a:f8:f2:f6:9b:80:6f:47:
c6:e1:91:3b:83:61:78:20:cf:61:12:8d:1f:78:fc:
1d:28:4d:5b:1b:33:39:9b:e6:46:1c:10:d3:7f:40:
3f:60:d5:4e:84:12:d8:5a:32:36:ca:78:dc:49:46:
a2:99:b9:bd:1b:0e:a1:a2:ba:dc:e8:3b:25:d1:08:
87:0b:e1:5d:e9:22:ab:1c:31:1b:89:cf:8f:63:c5:
41:a4:2b:f7:ed:14:30:9b:1e:30:2c:a4:79:4f:f3:
6c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:2A:D0:D7:3B:41:C1:B2:BF:F5:2C:9F:B0:02:7B:00:42:D8:C1:D5
X509v3 Authority Key Identifier:
keyid:56:F2:66:6F:6D:A4:10:B3:5A:40:B7:72:65:FA:FE:D6:F1:B9:42:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VvJmb22kELNaQLdyZfr-1vG5Qmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/81a0df-04b5-47ef-8695-4b5864b9d1d9/1/WSrQ1ztBwbK_9SyfsAJ7AELYwdU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/81a0df-04b5-47ef-8695-4b5864b9d1d9/1/VvJmb22kELNaQLdyZfr-1vG5Qmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.13.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:86:dc:23:d3:0f:6c:d9:09:d5:23:5f:2f:4b:cd:f5:53:a3:
c5:02:bc:e0:2b:7c:7d:ce:35:bd:9f:92:c6:c4:a7:ae:1e:00:
46:0c:48:99:99:bf:4c:60:de:d2:30:80:ae:cc:7a:68:9c:c5:
6e:f3:1f:d5:89:44:10:69:22:48:8c:2b:5b:b9:e1:9b:c9:50:
d6:f7:23:f3:4a:90:3d:a7:ae:b0:46:6b:60:47:1f:ba:cf:01:
8a:2c:d9:cf:95:e5:3e:8a:51:90:f4:3b:d1:98:14:0c:0a:c3:
9a:ec:4f:16:66:92:bc:0f:b8:32:b5:0b:0a:fc:a0:11:63:cd:
99:94:d1:bc:ee:e8:24:55:84:af:67:61:07:25:57:64:d9:b6:
37:7d:3a:b2:c8:de:de:9e:14:02:b2:ff:8c:df:49:03:7c:1e:
f8:46:08:e6:e5:53:5a:2d:87:d3:56:2c:d3:15:bb:1e:1f:5a:
ea:c6:2a:73:e5:3c:15:c4:b5:19:e9:d8:c5:88:a7:92:a4:1c:
02:1c:80:23:79:ee:44:d6:8c:d3:da:be:a0:47:74:3b:57:99:
42:05:31:bd:e0:5e:68:be:40:c1:90:77:ec:c0:b4:d2:41:11:
29:8b:9e:1f:6d:43:8f:53:6d:cc:58:b6:2e:56:b5:fc:06:f6:
37:ab:9e:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:56 2023 by rpki-client on console.sobornost.net