Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Yv5gYXqH8yJrAnjgxBELezMKFFU.roa
File: Yv5gYXqH8yJrAnjgxBELezMKFFU.roa (raw, json)
Hash identifier: Yb4d+Koihb2IsIy7ZtIiQ/KRcurpRhUvg3582Hdukxo=
Subject key identifier: 62:FE:60:61:7A:87:F3:22:6B:02:78:E0:C4:11:0B:7B:33:0A:14:55
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 1E408214
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Yv5gYXqH8yJrAnjgxBELezMKFFU.roa
Signing time: Tue 03 May 2022 05:41:23 +0000
ROA not before: Tue 03 May 2022 05:41:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 26548
IP address blocks: 91.92.195.0/24 maxlen: 24
87.121.222.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 507544084 (0x1e408214)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 3 05:41:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62fe60617a87f3226b0278e0c4110b7b330a1455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:04:a8:6e:f9:cb:2e:79:e9:f4:75:ab:89:76:
9e:16:ac:98:94:ab:80:a1:f5:cd:d9:28:ce:22:e6:
6a:b9:ba:7c:5c:6b:73:4d:f3:db:ed:8a:fe:ee:34:
76:28:a5:a9:a7:10:e5:7d:bd:e9:5f:b9:9e:f5:27:
de:51:06:ae:26:31:68:90:31:2f:95:09:fe:9e:37:
40:73:71:3e:47:7a:7a:7e:9e:da:29:bd:ba:e3:29:
21:4c:e8:c6:ae:b5:0d:2d:62:67:08:c8:59:1d:4f:
56:25:d6:6c:c1:09:f7:9f:f5:61:51:66:d2:bc:f1:
69:f0:61:37:d7:ff:77:ad:b3:73:b8:f2:db:56:9d:
55:51:77:a7:2f:13:7c:a2:99:6b:1d:a7:ec:83:0d:
b2:17:9a:db:37:5f:d0:6c:f6:ac:ee:36:f1:2f:c3:
31:d0:4f:e7:78:0d:f3:5d:5f:4c:37:f4:82:a5:ca:
7c:ec:da:1f:a5:64:8b:38:59:13:60:71:c7:72:cc:
2a:c5:8a:b1:63:3d:87:d7:ea:10:ca:ce:41:f1:59:
c3:7e:cc:55:18:ef:52:ac:04:35:24:52:5e:83:52:
1a:18:ab:e3:0f:06:66:f4:db:30:7d:21:6c:67:37:
1e:5e:5b:c7:fc:d8:56:8a:36:f9:dd:94:8c:42:f1:
61:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:FE:60:61:7A:87:F3:22:6B:02:78:E0:C4:11:0B:7B:33:0A:14:55
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Yv5gYXqH8yJrAnjgxBELezMKFFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.222.0/24
91.92.195.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:1a:77:73:f7:38:2a:86:2a:33:e6:9b:ac:33:45:2a:0b:d3:
44:cf:ad:e2:dd:4e:b4:2a:d0:70:ef:13:17:a3:33:3f:c4:20:
b4:3a:e2:2c:f6:e1:5b:e3:02:07:24:a8:c4:1c:d2:7e:13:eb:
13:1f:93:da:fd:6a:9d:de:cc:99:22:52:63:e6:e2:8c:c5:32:
fe:d5:30:e7:92:75:e7:9c:d6:44:b6:a2:64:0c:02:09:67:02:
d0:67:b2:8b:d1:79:3f:2c:5d:6a:e1:28:11:d7:44:76:8c:f4:
40:7d:f7:f1:8e:5d:81:2c:ba:44:38:92:94:1a:57:6a:17:d8:
c0:95:1a:b7:a8:d8:25:64:a6:ed:e0:72:9a:85:5b:06:f7:e5:
cd:ac:8b:d9:bc:37:e5:d3:de:7d:ed:1d:f7:ba:11:59:ef:73:
c3:d3:07:82:1f:18:4b:b2:33:f2:80:d9:eb:87:c6:79:d4:6a:
83:a6:a7:41:21:b4:5b:dc:da:4f:ea:85:61:89:7d:ca:e2:8b:
b7:52:35:6a:af:10:18:59:07:48:53:9f:d4:ed:85:7b:4b:1c:
41:0f:0f:b9:a1:fb:92:a6:61:89:5a:1b:88:7e:07:95:33:33:
7c:9a:5b:e9:c0:f4:54:35:19:ee:d1:d8:33:ab:6e:56:fd:82:
bb:b2:a3:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:38 2023 by rpki-client on console-ams.rpki-client.org