Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/YwW4pHxoJPDXWSod1yBG8xi03GU.roa
File: YwW4pHxoJPDXWSod1yBG8xi03GU.roa (raw, json)
Hash identifier: UVUGSpUnx3bar1YQir8LWZiunNS/UozowcBFSZiDfI4=
Subject key identifier: 63:05:B8:A4:7C:68:24:F0:D7:59:2A:1D:D7:20:46:F3:18:B4:DC:65
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 01828D406633D0F0ECF53F4E4BDCC5DCF402
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/YwW4pHxoJPDXWSod1yBG8xi03GU.roa
Signing time: Thu 11 Aug 2022 14:13:04 +0000
ROA not before: Thu 11 Aug 2022 14:13:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 91.226.57.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:8d:40:66:33:d0:f0:ec:f5:3f:4e:4b:dc:c5:dc:f4:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Aug 11 14:13:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6305b8a47c6824f0d7592a1dd72046f318b4dc65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:71:1e:39:d3:39:15:10:f7:ed:5d:35:21:37:
9d:a6:47:62:ac:df:30:55:51:5d:60:7b:ef:55:f9:
54:4c:0b:d4:88:55:7c:a2:69:02:c5:b3:f8:fd:a8:
90:1b:65:e4:e5:51:1a:c5:65:2c:31:27:57:2d:ac:
90:db:c6:9e:17:2e:e7:1a:24:1f:9f:58:18:2e:2c:
a9:4a:e9:6f:96:41:29:9c:db:d5:41:9f:90:0a:0e:
fb:d4:0e:37:3f:12:09:99:f5:1d:e5:17:e5:a4:35:
13:96:41:f6:5a:e0:08:05:87:4e:5c:dd:cd:de:66:
20:a7:a1:18:08:61:a1:41:a2:d5:4e:2d:f5:87:54:
2f:2b:20:57:75:b5:58:7a:1e:60:ac:b5:29:8b:84:
05:e6:15:3c:9b:a6:de:57:5d:f8:49:3f:90:a7:11:
19:18:42:51:10:5b:76:b9:7d:d5:f6:68:1f:b3:e4:
19:e8:a5:61:c1:44:30:80:52:6f:60:5e:db:60:7c:
f4:d6:1d:91:91:11:0d:28:73:1f:a7:9d:e5:ad:fc:
c4:b5:7e:8c:21:ec:9b:b5:3c:e9:27:dd:fa:d0:cc:
e6:47:b1:26:53:a4:1c:77:27:52:63:60:59:12:00:
41:68:c6:d2:e8:8c:0b:e4:6c:c4:bd:7c:bf:eb:89:
5a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:05:B8:A4:7C:68:24:F0:D7:59:2A:1D:D7:20:46:F3:18:B4:DC:65
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/YwW4pHxoJPDXWSod1yBG8xi03GU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.57.0/24
Signature Algorithm: sha256WithRSAEncryption
32:f0:ef:94:60:c2:f6:0e:f0:a0:92:33:0d:59:38:5d:29:5e:
4a:50:dc:0d:4a:2a:97:b0:e4:00:fd:94:36:e4:8e:ef:37:e4:
d4:ec:0f:66:86:54:dd:34:cb:fa:3f:5d:a0:2a:f7:28:bf:2b:
8a:86:7c:60:6c:a5:48:a8:d4:7a:de:13:9a:a4:8e:f6:42:20:
4f:d0:8e:27:da:59:5e:f1:db:d6:cc:e3:40:10:48:9e:38:cd:
d5:51:11:b2:8b:1c:fe:1d:13:3f:95:2c:9e:a3:33:27:05:b2:
4c:3b:94:55:62:20:05:f5:fa:2b:be:3c:51:39:75:7c:d9:fe:
c1:14:07:b9:68:43:90:4e:a1:5f:07:a4:c1:e4:b1:50:da:3a:
80:9b:54:6c:5f:42:36:4f:9c:76:ab:27:a5:35:ab:28:65:ba:
6a:db:99:15:d3:e6:60:2c:29:4e:22:ef:9f:b6:fe:77:ae:db:
15:a3:6b:c7:64:0b:c5:af:6b:29:a8:94:d0:4b:de:28:39:bf:
4c:ff:42:74:2d:ec:74:01:bf:4d:c2:9d:95:97:19:db:ea:40:
16:1c:48:00:ed:aa:3b:52:c1:bb:bb:c6:ca:cb:06:8d:8c:0a:
20:bb:95:f7:2a:8c:20:20:cc:14:09:d7:b4:c1:40:f1:7a:97:
fc:da:02:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:06 2024 by rpki-client on console-ams.rpki-client.org