Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/YY8-J2QINOqq41VngWrYY9c3LVQ.roa
File: YY8-J2QINOqq41VngWrYY9c3LVQ.roa (raw, json)
Hash identifier: QDr1Rm9u/4CQOECkFVJ4ExrUcuSYfWKP314r0K1y9z0=
Subject key identifier: 61:8F:3E:27:64:08:34:EA:AA:E3:55:67:81:6A:D8:63:D7:37:2D:54
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 01827E497EDC3281AA07578AD1506EDEA4B0
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/YY8-J2QINOqq41VngWrYY9c3LVQ.roa
Signing time: Mon 08 Aug 2022 16:28:42 +0000
ROA not before: Mon 08 Aug 2022 16:28:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 194.50.200.0/23 maxlen: 23
195.138.96.0/19 maxlen: 24
194.50.206.0/23 maxlen: 23
91.242.105.0/24 maxlen: 24
91.242.108.0/22 maxlen: 22
91.242.120.0/21 maxlen: 21
185.173.244.0/22 maxlen: 24
91.242.64.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:7e:49:7e:dc:32:81:aa:07:57:8a:d1:50:6e:de:a4:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Aug 8 16:28:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=618f3e27640834eaaae35567816ad863d7372d54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:77:6f:c4:3d:62:7e:0c:06:35:d8:b7:a0:37:
49:b1:b7:8c:17:28:43:19:34:ad:33:76:37:fb:c1:
f7:5e:43:99:8f:36:d0:50:90:5e:47:85:0f:1f:39:
db:5b:16:9a:ac:e6:87:10:de:ec:07:0e:f3:1d:37:
f5:8a:16:0f:fd:30:dc:8e:7e:dd:22:a7:15:05:b0:
91:66:33:86:91:af:ad:98:ed:27:29:bc:3b:0d:a9:
ba:8c:82:41:70:15:a6:5e:4b:29:0d:c1:5f:a0:ed:
32:69:12:0c:0c:ec:57:cc:20:d9:53:21:94:2a:23:
72:82:0d:ff:95:1c:cf:41:bf:07:9f:f5:90:b9:9d:
ac:e8:0e:58:38:48:de:a4:bc:6b:12:53:93:3f:21:
28:ae:b4:09:a2:f0:fe:1c:10:5c:10:ab:f3:48:66:
09:21:ed:f3:2a:da:7b:bd:b0:e7:61:53:0e:f8:d1:
d2:14:42:b1:60:fb:bf:2d:dc:da:f3:1f:68:66:64:
3f:71:e4:f0:9e:27:67:87:d4:47:dd:e3:ba:b6:8e:
c3:35:39:72:ff:ac:8f:3d:f3:62:10:48:cc:ed:aa:
71:26:1e:b3:5e:34:96:20:97:77:66:e1:d2:9a:7c:
35:10:46:98:81:f1:51:a6:9b:a2:36:42:c0:5e:bc:
6c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:8F:3E:27:64:08:34:EA:AA:E3:55:67:81:6A:D8:63:D7:37:2D:54
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/YY8-J2QINOqq41VngWrYY9c3LVQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.64.0/22
91.242.105.0/24
91.242.108.0/22
91.242.120.0/21
185.173.244.0/22
194.50.200.0/23
194.50.206.0/23
195.138.96.0/19
Signature Algorithm: sha256WithRSAEncryption
2a:88:ee:f7:87:63:4d:ca:6a:31:a0:0b:93:6e:8b:54:ea:55:
b2:46:d4:3f:56:c6:08:27:81:66:5a:1a:86:4d:b2:b5:52:5b:
70:ae:d5:77:32:46:1c:bd:79:f8:27:df:8b:88:70:2d:cd:ee:
2b:bb:25:d6:a2:4d:17:9a:0a:d2:0f:4c:d7:8f:21:93:dd:17:
c1:16:49:48:51:1b:01:10:1a:e9:24:17:44:90:4d:9e:5b:a4:
32:48:d9:74:09:ae:0d:07:c1:97:d8:a9:b7:ae:65:ea:14:6a:
2f:47:ba:52:6f:db:2a:6a:35:26:d1:33:73:02:32:3a:4f:f8:
b7:b6:0c:99:4b:18:28:db:d4:df:b7:ef:f3:88:e9:b9:39:65:
da:be:21:b9:ca:bc:35:b1:5c:f1:3b:56:6d:1e:69:2c:cc:39:
1a:e8:05:ea:2c:14:81:7b:7e:6f:bd:5f:f1:2a:da:07:c5:a4:
b9:d9:ef:d5:f5:89:16:c3:b6:6a:f4:9c:f8:28:eb:9e:65:2e:
2c:79:64:07:bc:79:a0:97:d3:e0:05:a6:f9:3e:dd:af:b1:ec:
d8:df:83:3d:f3:68:5d:77:7e:ed:ab:93:86:d6:4a:9d:b5:da:
12:43:40:3b:24:9d:83:8b:08:28:0b:60:07:2f:13:1f:74:a6:
64:fb:ea:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:50 2023 by rpki-client on console-fra.rpki-client.org