Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/Yct4KkN1TbbTgyF52ivxI9uWsvU.roa
File: Yct4KkN1TbbTgyF52ivxI9uWsvU.roa (raw, json)
Hash identifier: okwy691LtDpHaFccqez/4ldl5D7JXYG/b7fEzNhDLws=
Subject key identifier: 61:CB:78:2A:43:75:4D:B6:D3:83:21:79:DA:2B:F1:23:DB:96:B2:F5
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 1BA95703
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/Yct4KkN1TbbTgyF52ivxI9uWsvU.roa
Signing time: Sat 01 Jan 2022 05:03:47 +0000
ROA not before: Sat 01 Jan 2022 05:03:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209767
IP address blocks: 91.245.92.0/22 maxlen: 24
109.207.133.0/24 maxlen: 24
109.207.143.0/24 maxlen: 24
176.113.176.0/22 maxlen: 24
91.229.30.0/24 maxlen: 24
91.246.216.0/24 maxlen: 24
178.213.176.0/22 maxlen: 24
91.239.224.0/24 maxlen: 24
91.224.213.0/24 maxlen: 24
91.239.179.0/24 maxlen: 24
91.226.52.0/23 maxlen: 23
91.226.54.0/23 maxlen: 23
31.132.192.0/22 maxlen: 22
31.132.196.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 464082691 (0x1ba95703)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Jan 1 05:03:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=61cb782a43754db6d3832179da2bf123db96b2f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7b:f9:1d:a4:8a:21:3b:38:89:4d:b7:40:b1:
e0:d2:34:52:e5:94:c8:39:5e:38:22:25:24:35:e5:
06:27:9a:c6:41:2a:5a:fc:01:5f:cd:4f:b8:78:6c:
de:09:18:fc:33:da:62:66:d2:92:a8:18:09:dd:6f:
25:15:16:19:27:d6:4f:f3:fa:a5:04:27:ad:66:2a:
4e:88:a7:af:5d:fb:2e:58:a8:19:45:ed:50:13:c5:
fa:8c:ce:67:06:23:d3:39:b3:ef:19:f6:b8:3e:6c:
a4:ff:91:f3:23:19:29:c9:5a:67:7f:51:3e:04:c7:
c8:f4:ef:da:d5:0f:aa:a1:68:bb:44:ae:30:33:5f:
da:82:ba:da:00:99:2b:5f:25:fb:e8:4b:b1:70:0e:
42:fc:d4:6f:78:89:b9:15:a2:44:59:2d:3a:ee:c7:
99:81:66:71:04:79:34:da:eb:fe:1c:0d:b0:f0:56:
94:38:3d:26:f4:a9:b6:b4:57:fa:a5:a3:58:f8:36:
1a:cd:52:21:8c:a1:11:5f:41:40:5d:7b:f7:9a:c0:
14:3d:72:9c:24:aa:35:d7:79:07:01:bf:5a:a9:e9:
e3:d2:61:73:bf:3f:99:6a:ee:83:fc:17:88:1f:2e:
fa:5d:a3:f0:b1:61:a0:63:32:35:83:d4:60:c6:7a:
d3:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:CB:78:2A:43:75:4D:B6:D3:83:21:79:DA:2B:F1:23:DB:96:B2:F5
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/Yct4KkN1TbbTgyF52ivxI9uWsvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.132.192.0/21
91.224.213.0/24
91.226.52.0/22
91.229.30.0/24
91.239.179.0/24
91.239.224.0/24
91.245.92.0/22
91.246.216.0/24
109.207.133.0/24
109.207.143.0/24
176.113.176.0/22
178.213.176.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:9a:e8:75:b3:e3:50:4f:29:bf:4d:6f:36:f9:5d:c5:08:b7:
06:79:dc:3c:5b:82:ed:5d:e4:86:bb:d9:af:ca:cc:f5:29:58:
bf:63:06:97:cd:b7:dc:2a:d2:c2:fd:df:9d:52:44:63:89:a0:
41:26:8e:a0:89:fb:24:ef:fa:2b:9d:6a:4c:3f:a5:97:74:6f:
33:47:cb:d7:cd:44:35:53:32:ee:df:8b:c2:2b:8c:b3:ee:64:
5f:39:70:65:41:d0:f4:af:e9:9e:ee:4b:a3:47:0e:1f:0f:52:
7f:47:e3:53:ed:8b:6d:64:f3:6f:92:c2:90:fa:24:0b:78:29:
94:5f:5c:db:b3:b7:c0:c2:26:68:5f:ac:5f:38:22:3a:a1:c6:
46:6a:67:4b:a7:0b:ba:49:7c:91:3a:82:cb:d1:80:ed:99:cb:
af:21:4c:c0:04:6f:1a:57:67:41:92:52:1a:28:62:86:f3:d8:
97:fc:95:85:b5:ae:72:4f:6f:9d:c4:20:ec:03:ec:ab:b6:44:
cf:40:d6:b4:29:c5:2e:7d:b3:11:ee:32:33:a0:6c:23:cf:b4:
4a:8e:0d:81:cc:b3:e8:8b:85:47:e0:29:e0:07:98:1b:7a:1f:
59:1a:45:a9:c3:14:0b:b7:6f:87:f1:3e:93:52:3b:05:d5:e2:
bf:aa:5c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:57 2024 by rpki-client on console-fra.rpki-client.org