Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/kfyJuIH-ZHgfd8Vd0XHS7LC-1zM.roa
File: kfyJuIH-ZHgfd8Vd0XHS7LC-1zM.roa (raw, json)
Hash identifier: J5MSMyBTF3pHNSQ/QLihi/k0gppYAcZCiSjSwKcf6eM=
Subject key identifier: 91:FC:89:B8:81:FE:64:78:1F:77:C5:5D:D1:71:D2:EC:B0:BE:D7:33
Certificate issuer: /CN=ad4c830b11261483a62b6696a4c3720e8ad88a0d
Certificate serial: 066AB7E4
Authority key identifier: AD:4C:83:0B:11:26:14:83:A6:2B:66:96:A4:C3:72:0E:8A:D8:8A:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rUyDCxEmFIOmK2aWpMNyDorYig0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/kfyJuIH-ZHgfd8Vd0XHS7LC-1zM.roa
Signing time: Tue 14 Jun 2022 09:30:44 +0000
ROA not before: Tue 14 Jun 2022 09:30:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8879
IP address blocks: 91.216.108.0/24 maxlen: 24
195.66.76.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107657188 (0x66ab7e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad4c830b11261483a62b6696a4c3720e8ad88a0d
Validity
Not Before: Jun 14 09:30:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=91fc89b881fe64781f77c55dd171d2ecb0bed733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5b:94:49:c6:d5:6d:a7:26:cb:87:99:30:89:
3d:7a:09:0e:a9:6d:4f:64:88:87:a3:07:f1:50:44:
dc:fd:a8:f4:39:32:f3:49:68:a9:aa:0a:4f:0b:49:
eb:8c:c6:f5:ac:0f:45:74:f0:65:30:d0:43:62:e2:
0d:f4:0e:b5:46:77:13:c8:99:b9:16:6c:d6:41:6c:
1d:ef:c9:2a:25:17:43:74:94:d9:c1:e1:c5:1b:70:
73:77:67:9b:80:89:d2:dd:35:17:fa:e3:ba:2d:ec:
b6:c6:28:81:cc:21:4a:21:f5:bd:2a:db:7f:af:e1:
da:a3:c2:79:36:e3:bc:0a:4c:56:30:1e:7b:d1:42:
ad:ba:9b:e1:ad:cd:55:17:b2:aa:0e:cb:31:e9:9a:
30:03:15:7b:7e:67:6c:28:f1:f0:1b:96:77:6b:c6:
75:bc:d4:4a:49:55:9f:1e:00:64:fd:f0:2d:4b:30:
e8:11:18:af:b7:59:dd:09:05:b9:87:6a:6c:a1:7e:
df:3d:fd:39:73:65:06:cb:4d:87:d4:64:be:a8:6e:
b9:a5:05:ff:41:c4:c4:c2:a6:ef:3c:8a:08:02:ae:
12:74:3a:ee:d7:09:b0:91:df:e9:f6:09:74:18:04:
85:40:fa:76:54:b8:bc:55:e6:64:84:6b:d6:bf:a6:
6d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:FC:89:B8:81:FE:64:78:1F:77:C5:5D:D1:71:D2:EC:B0:BE:D7:33
X509v3 Authority Key Identifier:
keyid:AD:4C:83:0B:11:26:14:83:A6:2B:66:96:A4:C3:72:0E:8A:D8:8A:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rUyDCxEmFIOmK2aWpMNyDorYig0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/kfyJuIH-ZHgfd8Vd0XHS7LC-1zM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/rUyDCxEmFIOmK2aWpMNyDorYig0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.108.0/24
195.66.76.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:50:94:c8:07:f4:c7:2c:2d:16:bd:e0:9f:aa:09:31:0e:45:
e7:6b:3f:fb:f8:66:17:aa:2f:bf:1d:6c:8b:95:ef:52:76:9b:
f9:a5:44:f5:3a:30:03:00:b5:e9:2c:90:92:d5:17:b5:a7:f9:
78:c0:7a:b3:5b:f5:84:03:f2:15:c1:13:77:b7:4d:ce:95:cb:
cc:c3:96:ac:5a:67:b9:19:25:84:b1:20:78:f9:5f:35:4a:9a:
55:83:37:49:c8:9e:15:36:50:25:44:80:44:83:55:46:64:66:
92:f8:d4:21:15:56:99:3e:61:0e:ec:c2:46:bf:d0:d3:29:84:
38:ff:33:cc:f0:ee:7e:d6:aa:e3:af:63:97:69:52:8d:2d:f0:
0c:e0:25:51:2e:49:53:34:d0:79:63:86:cb:a5:56:34:8f:aa:
7c:cd:e6:78:3c:2d:0d:35:de:9c:8b:14:c6:a2:bd:d2:8a:25:
0e:fa:ce:1a:f0:78:88:0e:6f:9c:06:85:b1:15:a0:12:b3:72:
b6:55:48:38:ab:33:27:0a:75:c0:48:15:47:3a:14:cc:67:a1:
fa:88:7e:ea:20:c9:e1:14:b4:7a:e4:3e:62:d0:54:13:cc:7c:
30:80:12:50:7f:63:1f:09:4b:fc:3e:95:e9:84:77:54:fe:99:
dc:98:93:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:47 2023 by rpki-client on console-ams.rpki-client.org