Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/913cd7-593f-4e99-b5ee-0d050358e656/1/YjyCiertthQzyzK_keyOznP1Nyk.roa
File: YjyCiertthQzyzK_keyOznP1Nyk.roa (raw, json)
Hash identifier: kfsKL0//YRrQWPCQe03oLrX43aqQwIBpD5ZWYkZqtDI=
Subject key identifier: 62:3C:82:89:EA:ED:B6:14:33:CB:32:BF:91:EC:8E:CE:73:F5:37:29
Certificate issuer: /CN=8e7fced4f34e7f37e751b5b45f30b99c6311f97e
Certificate serial: 01856ECB8ACC10DDDD35B036BEA994B024A9
Authority key identifier: 8E:7F:CE:D4:F3:4E:7F:37:E7:51:B5:B4:5F:30:B9:9C:63:11:F9:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jn_O1PNOfzfnUbW0XzC5nGMR-X4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/913cd7-593f-4e99-b5ee-0d050358e656/1/YjyCiertthQzyzK_keyOznP1Nyk.roa
Signing time: Sun 01 Jan 2023 19:25:11 +0000
ROA not before: Sun 01 Jan 2023 19:25:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198126
IP address blocks: 91.231.228.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:cb:8a:cc:10:dd:dd:35:b0:36:be:a9:94:b0:24:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e7fced4f34e7f37e751b5b45f30b99c6311f97e
Validity
Not Before: Jan 1 19:25:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=623c8289eaedb61433cb32bf91ec8ece73f53729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:88:ee:e2:b1:bf:57:c1:f8:79:3a:b0:e2:db:
67:99:77:a5:41:e1:0f:f2:44:f6:77:62:62:d7:0f:
98:d5:77:63:d4:7d:4b:d2:18:49:4a:00:f0:41:21:
47:04:bd:d8:8f:e1:32:89:70:4e:e3:34:1f:ae:c6:
4a:8b:59:3c:46:f5:1d:41:8d:db:57:60:a4:de:35:
71:42:c2:d9:c3:a4:a5:16:88:c9:ac:1e:5f:f3:c8:
2b:cc:a8:bf:f3:2b:ab:29:71:d5:cb:26:46:9e:8e:
2c:87:fd:35:00:ce:6d:3e:49:09:ff:c9:5f:db:a0:
a4:25:0f:9f:a0:77:69:da:65:19:1b:6f:91:60:fc:
ba:2e:85:a4:f5:ab:e8:d5:49:d6:18:09:55:6f:31:
20:2c:d6:02:04:6b:30:28:4f:a9:02:5e:5e:28:ca:
7b:1c:7e:a8:c2:85:a0:b2:e9:05:e0:7f:93:91:cd:
76:16:c2:4f:b1:70:1e:1d:32:a9:61:69:31:a1:92:
30:81:87:3f:91:7b:41:82:48:90:f7:29:13:d4:72:
38:0d:21:52:3f:f1:3b:01:03:22:0d:19:ce:56:36:
f3:e0:c9:2b:a5:21:ca:56:b6:8a:e7:21:89:5f:16:
a5:99:6a:82:77:0f:4c:b1:ed:fc:2f:cc:9b:ff:98:
8d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:3C:82:89:EA:ED:B6:14:33:CB:32:BF:91:EC:8E:CE:73:F5:37:29
X509v3 Authority Key Identifier:
keyid:8E:7F:CE:D4:F3:4E:7F:37:E7:51:B5:B4:5F:30:B9:9C:63:11:F9:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jn_O1PNOfzfnUbW0XzC5nGMR-X4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/913cd7-593f-4e99-b5ee-0d050358e656/1/YjyCiertthQzyzK_keyOznP1Nyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/913cd7-593f-4e99-b5ee-0d050358e656/1/jn_O1PNOfzfnUbW0XzC5nGMR-X4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.228.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:fe:b5:2c:fa:29:0d:1c:45:73:6a:06:6d:21:f4:c9:05:e1:
3e:3b:a5:38:44:32:d7:cb:e5:a0:fa:31:84:26:a9:13:97:09:
bb:3e:c9:fc:7d:c3:57:4e:84:f6:a8:f8:2e:f5:a9:93:98:9b:
44:eb:97:9c:45:2d:50:b5:49:31:2a:f1:dc:59:74:2c:96:d3:
79:f1:86:fa:1a:f2:a8:c5:cf:bd:54:38:65:69:c1:7d:2f:ae:
a2:a1:f8:17:b9:6b:4d:77:8a:95:a4:13:51:a4:a0:6b:04:f2:
1b:e6:20:3d:b9:56:0a:fd:66:67:7e:f9:b0:38:d2:d6:da:2e:
c8:94:53:ea:8a:53:ac:c9:da:e3:82:37:aa:03:42:97:ad:5b:
bc:74:be:6e:8d:26:00:8a:ee:78:05:57:d1:14:42:59:4e:68:
4c:73:76:4e:be:a6:30:3a:96:a9:b9:f6:73:2f:b4:a6:78:75:
2c:47:6f:44:b5:a3:0e:85:8f:58:51:42:50:31:07:d9:58:ad:
bf:bb:62:79:ca:0d:40:c5:bc:24:20:eb:0e:bb:cc:3b:0d:10:
fb:1c:c3:15:87:65:7f:a9:79:bf:62:ab:82:05:b5:e5:0a:55:
6d:c2:87:12:ec:55:51:99:f8:2e:6a:6f:03:e6:0a:a8:dd:21:
4f:15:37:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:28:09 2025 by rpki-client