Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/Jy6VSUKea0DQR2eEl-oz3rK5Cb8.roa
File: Jy6VSUKea0DQR2eEl-oz3rK5Cb8.roa (raw, json)
Hash identifier: neW1Eb1B/LiBkVQRC4d5kVk9ouo7l4iRK+E84KT7mzM=
Subject key identifier: 27:2E:95:49:42:9E:6B:40:D0:47:67:84:97:EA:33:DE:B2:B9:09:BF
Certificate issuer: /CN=1eab01293c9dbd1a9d6adc86182b520cd176c007
Certificate serial: 04215089
Authority key identifier: 1E:AB:01:29:3C:9D:BD:1A:9D:6A:DC:86:18:2B:52:0C:D1:76:C0:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqsBKTydvRqdatyGGCtSDNF2wAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/Jy6VSUKea0DQR2eEl-oz3rK5Cb8.roa
Signing time: Sat 01 Jan 2022 06:06:09 +0000
ROA not before: Sat 01 Jan 2022 06:06:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 196945
IP address blocks: 91.217.155.0/24 maxlen: 24
185.106.16.0/22 maxlen: 22
2a06:3ac0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69292169 (0x4215089)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eab01293c9dbd1a9d6adc86182b520cd176c007
Validity
Not Before: Jan 1 06:06:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=272e9549429e6b40d047678497ea33deb2b909bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6f:05:89:7d:1c:9a:4f:69:c7:e9:93:a9:15:
63:bd:86:ce:c6:0c:c4:19:21:a3:28:93:1f:a5:61:
74:90:96:b3:c5:43:08:42:2a:63:08:aa:98:44:39:
41:ae:35:24:16:a5:d3:5a:52:ec:5d:4f:9d:32:12:
94:d1:1e:1e:6b:58:6b:a3:7f:8f:1a:33:39:a3:4a:
c5:31:73:60:f8:19:7b:93:dc:dd:a1:10:f0:10:d0:
17:d9:15:0f:da:9f:e4:90:67:3f:ce:5f:09:2d:dc:
46:ab:3a:a2:a1:b0:c2:51:c0:a9:76:d7:5f:e2:25:
05:5d:6b:8a:0c:58:29:49:04:29:f9:55:84:95:30:
0c:18:2a:5b:2f:06:ff:69:2b:c2:a2:cb:fd:c4:48:
e2:2b:1f:9f:6d:2b:f3:3e:cd:23:09:1f:cb:33:6f:
8e:11:b1:da:e0:5a:97:20:51:3e:03:f6:ed:82:a3:
68:3f:53:8c:89:e1:74:c6:b1:cb:a2:1f:62:ac:fa:
87:38:19:84:b1:50:fa:4d:f6:af:dd:5a:65:d3:e7:
1b:f3:1c:51:a9:1e:4c:ca:9e:e8:77:74:2b:ff:94:
f7:c9:25:61:2d:2e:87:31:27:4a:5b:a0:4f:c4:c1:
d2:b4:03:59:5c:2a:16:20:d6:b0:19:e2:55:cd:0a:
66:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:2E:95:49:42:9E:6B:40:D0:47:67:84:97:EA:33:DE:B2:B9:09:BF
X509v3 Authority Key Identifier:
keyid:1E:AB:01:29:3C:9D:BD:1A:9D:6A:DC:86:18:2B:52:0C:D1:76:C0:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqsBKTydvRqdatyGGCtSDNF2wAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/Jy6VSUKea0DQR2eEl-oz3rK5Cb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.155.0/24
185.106.16.0/22
IPv6:
2a06:3ac0::/29
Signature Algorithm: sha256WithRSAEncryption
15:ff:5e:10:2b:9f:95:7b:0d:2d:c6:67:40:af:7a:37:6d:6a:
82:7b:af:37:77:62:9e:09:b3:03:30:3a:b8:2f:3b:48:0e:d6:
4a:d5:c8:b1:04:49:53:5d:b0:43:d1:eb:2f:4d:73:b3:6a:7d:
3f:75:0c:17:2a:1e:cf:98:ae:bd:44:b8:00:1c:0d:e6:90:a1:
66:17:68:34:04:33:f5:68:cd:e9:3f:01:79:51:bc:89:83:a3:
1f:f8:44:dd:95:fe:52:e0:4e:28:ff:5d:6d:2e:21:83:4a:2f:
d9:5e:cf:ac:12:2e:bd:84:0c:5d:6d:b1:1a:e7:c2:d8:09:24:
4a:2a:e8:14:73:4a:77:af:6e:2f:4d:cd:f9:e8:0a:a2:01:ec:
8a:a5:fc:ca:55:ad:cb:86:37:d4:d2:a0:e7:ae:f2:fd:d5:77:
57:81:92:50:97:bd:9d:7b:9c:46:20:b4:ad:2f:1e:73:b0:d7:
61:41:a9:5f:40:bd:39:e2:84:12:78:2b:ad:99:6e:7d:38:f4:
49:0b:c4:60:bf:14:71:eb:51:fa:f7:35:7e:9b:d2:69:ef:eb:
71:bc:b0:f1:af:f5:2a:dc:fa:3c:9b:04:3b:96:1f:77:cb:21:
cf:ee:2b:a4:88:03:bb:cd:c6:6b:3a:50:9d:f0:4d:fe:6d:c0:
db:be:16:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:13 2023 by rpki-client on console-fra.rpki-client.org