Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/67JY-HJucP83YvuaX5Fr4WItyLY.roa
File: 67JY-HJucP83YvuaX5Fr4WItyLY.roa (raw, json)
Hash identifier: jtG4XPFEeVCaQXsR6V/5ATWuBww5NQ0+uvybo/lMdnM=
Subject key identifier: EB:B2:58:F8:72:6E:70:FF:37:62:FB:9A:5F:91:6B:E1:62:2D:C8:B6
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 1391F2BF
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/67JY-HJucP83YvuaX5Fr4WItyLY.roa
Signing time: Sat 01 Jan 2022 05:56:25 +0000
ROA not before: Sat 01 Jan 2022 05:56:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207246
IP address blocks: 91.242.98.0/24 maxlen: 24
91.242.104.0/24 maxlen: 24
91.242.76.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 328331967 (0x1391f2bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 1 05:56:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ebb258f8726e70ff3762fb9a5f916be1622dc8b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6d:3b:a6:fc:70:3d:f3:99:a8:a2:98:98:41:
d7:3e:84:b1:84:4c:32:4d:36:b5:1c:92:3d:a2:f4:
8a:71:76:48:5b:73:0f:cf:72:e1:77:27:d7:f4:72:
4b:bd:bc:4c:bc:e4:f3:d4:fc:c5:be:8f:67:1f:dd:
2b:cd:36:34:27:cb:7a:e8:e0:9a:72:70:6c:89:b5:
51:51:49:e0:e1:bd:5f:ef:5c:c1:b9:51:45:6c:ec:
db:5f:88:7c:20:0a:b4:9d:ae:b8:da:1e:8d:ad:f7:
5b:40:bb:b4:6e:2a:21:3a:84:dc:c5:57:1d:32:e2:
ff:45:87:9d:42:1f:a8:50:53:39:a0:ef:97:ff:e0:
a4:f2:65:a4:46:81:c0:b4:7f:9a:ab:13:1c:31:b7:
b2:16:d7:fa:2e:7d:da:89:23:c3:d4:60:b7:57:65:
8f:2c:7f:ca:34:9c:99:53:f3:79:d4:37:1c:9a:a1:
ea:8c:76:73:d9:ea:3d:00:4a:d5:b8:57:95:48:8c:
58:17:ad:6d:96:ca:de:1a:c5:b6:e3:6a:ef:42:17:
0a:fc:f1:61:7f:fc:bf:23:a2:81:a9:48:91:51:91:
dc:e0:5a:7c:a4:43:41:e4:52:48:fc:bb:bf:29:d3:
ee:3d:7b:ae:d7:aa:bd:11:9f:0a:c7:61:fa:1a:94:
7b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:B2:58:F8:72:6E:70:FF:37:62:FB:9A:5F:91:6B:E1:62:2D:C8:B6
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/67JY-HJucP83YvuaX5Fr4WItyLY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.76.0/23
91.242.98.0/24
91.242.104.0/24
Signature Algorithm: sha256WithRSAEncryption
14:c5:48:bc:1a:6c:09:eb:1e:a9:36:e2:b2:d7:3c:e5:fd:be:
f6:e4:b0:f1:df:f7:a1:43:8b:a0:07:13:81:02:86:43:e0:27:
24:1f:d2:ed:e4:f4:99:18:8a:2b:74:4e:59:35:c8:0e:00:d0:
cd:ca:d1:a0:86:ce:2f:86:a7:62:54:81:3a:95:12:81:cf:6c:
0f:0a:cd:7a:8f:4d:fc:22:7f:38:41:d5:bf:78:7c:b0:f8:58:
7c:39:2c:8b:66:ca:24:25:9d:c8:27:21:b6:46:c0:ec:2a:c4:
d6:d7:a7:90:8f:df:cd:3d:44:af:65:eb:d5:21:eb:10:65:71:
b7:b7:55:8b:03:2f:8b:d1:0a:bb:1e:b0:24:fa:56:55:57:59:
b9:5d:80:f7:14:fa:fa:4c:67:c6:9e:c2:31:41:7d:fd:ec:b1:
90:32:6e:05:8a:61:46:f7:0e:42:00:13:e6:27:b0:70:93:7e:
05:e5:12:3c:e4:a3:c4:1c:9b:fe:12:c3:a3:8f:2b:58:24:4d:
4c:ec:41:8a:18:b6:17:0f:48:b1:72:a9:7b:f8:b4:0a:cf:94:
de:a5:02:ac:91:fd:d0:b8:4f:82:7b:c3:71:55:a1:ca:34:1e:
c1:3e:71:68:f6:88:da:c7:45:4c:0e:4f:bb:ee:31:1c:a7:69:
f5:70:1c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:41 2024 by rpki-client on console-fra.rpki-client.org