Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/EvtIx1nr6w8raKSA4qHAeKbK9ls.roa
File: EvtIx1nr6w8raKSA4qHAeKbK9ls.roa (raw, json)
Hash identifier: vTmThkLDMMG9L+CE1NVAxIUzLHLhRJFGWpGrHdmXFn0=
Subject key identifier: 12:FB:48:C7:59:EB:EB:0F:2B:68:A4:80:E2:A1:C0:78:A6:CA:F6:5B
Certificate issuer: /CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Certificate serial: BAAA77
Authority key identifier: 63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/EvtIx1nr6w8raKSA4qHAeKbK9ls.roa
Signing time: Fri 07 Jan 2022 13:33:57 +0000
ROA not before: Fri 07 Jan 2022 13:33:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 91.221.116.0/23 maxlen: 24
91.221.232.0/24 maxlen: 24
109.107.132.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12233335 (0xbaaa77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Validity
Not Before: Jan 7 13:33:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=12fb48c759ebeb0f2b68a480e2a1c078a6caf65b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1f:fe:d6:87:1f:f2:a4:81:27:d9:16:17:f7:
0d:66:a5:f2:db:0e:52:b2:49:02:23:87:59:9f:cc:
61:fa:fc:82:58:2e:33:a9:09:80:f3:f1:26:5e:76:
52:22:1e:66:c5:5f:c1:34:e4:6e:e0:4b:e7:fd:44:
f2:e7:98:87:51:37:f6:2a:3b:a7:51:10:5e:31:08:
ea:b1:6a:75:d8:ce:dc:e1:5f:5b:32:0a:fd:e2:89:
da:6a:93:52:de:e8:2f:7f:bc:91:82:1f:27:24:b3:
79:a2:69:cd:95:18:94:94:ab:b6:6c:2c:e6:d1:13:
4f:e4:45:0c:c4:98:ef:35:dc:ea:2b:4a:d4:68:b7:
a6:57:1e:98:83:5b:cc:7e:88:c5:d8:e8:8e:c3:68:
a1:ab:c1:e0:a4:bc:cc:3f:d2:a4:25:bc:2f:71:30:
47:fb:9e:29:8c:5d:57:28:fb:00:b4:9c:92:12:a1:
ba:5a:b8:42:38:62:0e:da:f3:52:49:3f:62:43:63:
77:6e:61:f7:b5:04:c6:bf:2d:bf:c3:74:36:80:3f:
c1:b3:05:df:d6:97:63:ea:6c:e0:77:9d:ab:d2:32:
af:b6:c7:71:ae:bf:53:8c:35:9b:44:ba:15:52:b2:
ba:00:88:41:55:b5:60:d1:56:e9:03:75:d3:a0:63:
25:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:FB:48:C7:59:EB:EB:0F:2B:68:A4:80:E2:A1:C0:78:A6:CA:F6:5B
X509v3 Authority Key Identifier:
keyid:63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/EvtIx1nr6w8raKSA4qHAeKbK9ls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.221.116.0/23
91.221.232.0/24
109.107.132.0/24
Signature Algorithm: sha256WithRSAEncryption
84:44:1a:f8:fe:ae:28:01:7e:65:28:ca:be:c7:44:e1:b5:1f:
91:e4:e0:d7:25:7d:e6:c4:bd:7d:a2:d9:01:36:2f:1a:04:12:
fd:02:db:ea:92:a2:a9:6c:b8:e4:65:18:13:77:b8:d3:ed:fe:
89:7c:80:39:14:aa:0c:2c:15:48:57:7f:84:6f:ff:64:03:24:
4a:55:c3:cc:31:ad:bf:d1:0f:8e:cf:a6:30:0a:b3:1c:0f:89:
d7:f1:b4:0f:d6:d4:e3:6d:d0:51:f5:2d:77:ae:5e:c9:65:5c:
38:3b:04:97:c7:59:d3:bf:38:2a:5f:61:ea:48:50:88:00:80:
f9:e7:61:27:d8:f6:5d:a5:f7:3a:43:e1:ab:91:98:49:27:e7:
c9:6b:46:8d:7c:ff:73:60:ba:6a:ab:37:47:43:be:9c:c3:ea:
73:f0:91:35:de:bd:5b:9a:32:7a:cc:9e:36:d3:5b:a2:66:31:
02:92:b1:22:eb:ea:70:cf:21:1e:79:72:7d:a0:7c:ee:ea:77:
cf:cc:a2:7a:60:99:e9:a1:1c:9a:33:e0:c9:02:02:86:bb:4a:
a4:e4:53:63:49:18:23:51:4e:3f:0e:bc:28:59:18:ac:e1:08:
4a:31:74:d2:68:ec:ae:17:3a:73:9a:67:a5:98:7a:2d:2c:24:
50:50:6c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:38 2024 by rpki-client on console-ams.rpki-client.org