Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/3PYK3bAbUj3D4RXfeQ3NxTUjBqs.roa
File: 3PYK3bAbUj3D4RXfeQ3NxTUjBqs.roa (raw, json)
Hash identifier: eUgtF4q4UzEGvDDM/1Rwmjb3+JpqeOiK7ZNA2RQkikk=
Subject key identifier: DC:F6:0A:DD:B0:1B:52:3D:C3:E1:15:DF:79:0D:CD:C5:35:23:06:AB
Certificate issuer: /CN=b91464767773f1239b646bb66bdcf4f7fb1206ce
Certificate serial: 0B71F5EF
Authority key identifier: B9:14:64:76:77:73:F1:23:9B:64:6B:B6:6B:DC:F4:F7:FB:12:06:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRRkdndz8SObZGu2a9z09_sSBs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/3PYK3bAbUj3D4RXfeQ3NxTUjBqs.roa
Signing time: Sat 01 Jan 2022 04:03:28 +0000
ROA not before: Sat 01 Jan 2022 04:03:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203735
IP address blocks: 91.192.4.0/24 maxlen: 24
91.192.7.0/24 maxlen: 24
91.192.6.0/24 maxlen: 24
91.192.5.0/24 maxlen: 24
2a0c:64c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 192017903 (0xb71f5ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b91464767773f1239b646bb66bdcf4f7fb1206ce
Validity
Not Before: Jan 1 04:03:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dcf60addb01b523dc3e115df790dcdc5352306ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:56:4f:88:d8:38:42:1b:ce:18:45:f1:d0:7e:
c0:89:14:f1:69:48:a4:c2:6d:a7:07:e9:4c:f0:17:
4f:e2:b4:49:fb:d3:79:9e:7c:d9:a8:b0:92:ec:35:
e5:7a:79:15:a5:e7:53:a3:d2:22:01:98:2b:58:e8:
4d:d3:28:09:5c:21:cc:43:d9:52:68:71:d5:85:b4:
40:ea:07:fc:bd:25:d8:9c:dc:1d:34:77:dd:b1:72:
21:5b:e7:3d:52:64:ba:9d:14:fc:c7:33:f8:ca:31:
7c:93:56:30:00:84:80:2e:a7:d0:23:e7:3c:e9:b3:
7e:c3:61:8a:ca:52:e5:f6:39:a9:6f:88:a6:eb:93:
65:3e:e3:e8:e2:55:b0:35:09:7f:93:bf:ca:60:c5:
19:b3:5e:ac:b1:be:ef:75:6a:ed:b1:8a:67:c2:44:
d0:72:1a:34:a8:1a:ad:36:8c:e3:15:f5:d9:17:a6:
07:b3:8d:c1:5d:37:c1:27:91:57:2a:c5:c8:3e:19:
b7:fb:07:57:44:0e:32:68:26:0f:cb:8d:92:67:f3:
7e:21:e9:c4:05:f5:8d:8b:3e:0d:e3:08:c4:37:26:
5c:a7:c9:62:cf:3d:92:37:a2:e5:77:07:c9:d9:35:
93:d9:91:ef:e8:25:d3:8b:c4:be:08:2d:bd:6b:7c:
0c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:F6:0A:DD:B0:1B:52:3D:C3:E1:15:DF:79:0D:CD:C5:35:23:06:AB
X509v3 Authority Key Identifier:
keyid:B9:14:64:76:77:73:F1:23:9B:64:6B:B6:6B:DC:F4:F7:FB:12:06:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRRkdndz8SObZGu2a9z09_sSBs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/3PYK3bAbUj3D4RXfeQ3NxTUjBqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.192.4.0/22
IPv6:
2a0c:64c0::/29
Signature Algorithm: sha256WithRSAEncryption
c1:f4:a8:c7:25:ab:ba:b3:71:3a:90:52:a9:3a:f5:75:e6:1f:
52:31:6c:bb:02:d6:14:af:60:b2:2b:91:34:9a:51:93:f5:08:
7f:e9:4d:38:e6:9a:86:5e:f6:a3:f0:69:cc:d1:55:10:7c:04:
6d:de:7d:44:2b:38:dd:ef:98:e4:9b:c4:f1:4b:a2:af:01:be:
8a:91:aa:8d:0b:6d:c8:e5:60:09:bd:d5:01:cc:61:a6:9b:d4:
9a:29:63:84:7f:1d:c5:fd:6f:02:29:0b:05:e2:8f:d7:a9:4d:
8f:1b:ba:a7:01:19:17:0a:cf:0f:77:5c:9f:a1:20:b7:f6:60:
4f:09:d2:f9:55:03:00:29:c0:1b:00:f8:58:fd:10:31:02:09:
72:b5:c0:a4:12:e8:54:c5:d4:0b:dc:c7:32:ee:41:de:5b:c5:
5d:9e:5b:f4:a0:8c:6a:f3:11:c1:38:d2:78:61:07:fa:d7:d7:
17:38:40:41:c7:0c:5a:1c:7c:c9:db:78:34:c3:d9:fb:c5:30:
f5:35:cb:aa:4e:3a:af:bd:2c:07:9e:8d:f9:f7:35:64:72:14:
2b:0f:54:aa:06:9c:6b:cd:85:4b:b3:8d:1f:94:d7:b0:f2:fb:
40:7f:02:4d:15:bf:32:b2:16:24:e7:a1:f2:9a:3a:b1:f2:f3:
fa:14:4d:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:14 2023 by rpki-client on console-fra.rpki-client.org