Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/i-Y2Tg9BPsHkkHVBLWiBd-DjeHQ.roa
File: i-Y2Tg9BPsHkkHVBLWiBd-DjeHQ.roa (raw, json)
Hash identifier: gAP1howdFQiGSWcggYjg36HVsdN6422Q1xYan7wXVOg=
Subject key identifier: 8B:E6:36:4E:0F:41:3E:C1:E4:90:75:41:2D:68:81:77:E0:E3:78:74
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 1BA438AB
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/i-Y2Tg9BPsHkkHVBLWiBd-DjeHQ.roa
Signing time: Sat 01 Jan 2022 05:03:45 +0000
ROA not before: Sat 01 Jan 2022 05:03:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201011
IP address blocks: 91.238.40.0/24 maxlen: 24
91.238.41.0/24 maxlen: 24
91.238.42.0/24 maxlen: 24
91.238.43.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 463747243 (0x1ba438ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Jan 1 05:03:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8be6364e0f413ec1e49075412d688177e0e37874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:9d:82:ea:ad:00:6d:04:cf:3c:57:13:1e:29:
75:b7:f0:b7:84:73:60:ec:18:b5:73:e6:05:7f:18:
71:95:9c:51:78:15:4e:67:5c:a4:02:cc:72:84:0b:
84:39:32:97:83:e3:87:a9:fe:82:3a:93:9d:3d:dd:
f1:4a:57:50:b7:3c:a6:c8:6e:eb:0b:ec:ec:69:b6:
c2:0e:b3:b4:c4:ec:e9:8f:5f:46:06:de:5f:60:83:
ca:3d:41:27:09:dc:59:e2:c4:6a:a9:c3:a4:10:98:
f8:60:bc:19:43:d5:73:20:16:f7:eb:ba:b1:94:4c:
90:9f:22:ba:4a:d7:ad:41:b1:39:b6:d2:73:52:a1:
76:ba:5b:77:c6:35:a9:1b:fa:8d:c8:eb:bf:25:36:
85:01:21:58:3e:63:6b:63:15:61:d2:03:b8:d8:ac:
a8:7f:54:7a:72:50:e9:b5:02:92:9c:c9:e6:46:03:
ab:4f:ef:c8:30:ee:8e:11:a2:7c:96:18:a8:2a:26:
76:5c:16:86:72:90:8c:59:98:6c:6f:b4:f3:9f:ab:
76:ad:5d:9d:b1:1a:19:22:61:8c:a0:cd:69:37:37:
31:71:da:fe:96:ef:74:08:3e:f8:16:dd:2e:13:e7:
49:c6:da:fe:69:11:9e:17:51:de:3d:45:2d:10:48:
5f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:E6:36:4E:0F:41:3E:C1:E4:90:75:41:2D:68:81:77:E0:E3:78:74
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/i-Y2Tg9BPsHkkHVBLWiBd-DjeHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.40.0/22
Signature Algorithm: sha256WithRSAEncryption
19:0b:f3:2b:4f:67:e5:df:ab:6b:8f:a0:ac:8b:d8:51:1f:35:
7a:69:56:5e:9e:4c:1c:05:2e:56:22:71:47:04:04:85:68:f9:
c8:eb:7c:93:91:0b:07:0a:1b:6a:9c:60:1e:b4:25:da:35:ec:
90:e3:ab:4f:54:ca:cc:03:af:a3:38:2c:d2:48:01:1b:10:07:
62:68:35:f3:63:2d:65:d0:41:eb:ca:3c:c7:4b:94:24:ac:76:
4d:df:11:b5:82:9a:c1:63:7f:f5:39:51:3c:69:35:f2:b1:0c:
9b:6e:23:24:fa:2b:bb:8b:8e:36:21:a9:c2:7f:d6:33:43:70:
0a:f3:25:1c:85:66:2a:1b:30:2f:e2:e7:2d:60:ef:94:d9:aa:
ec:04:6c:34:13:f5:7f:d1:e8:97:7d:2c:67:a1:db:ee:f1:f4:
7b:de:c8:54:d5:1a:8b:40:3a:10:62:94:d8:bb:9d:4e:a0:fd:
50:67:25:db:2a:b8:3d:c8:19:89:9d:0f:3c:6f:71:63:5f:e5:
ef:5b:a4:9c:e1:91:a9:98:46:e6:ee:3e:c8:72:09:ea:77:77:
e7:86:52:12:b2:6a:ab:d2:51:d3:3f:4c:4d:b6:37:c9:c8:e8:
25:96:aa:5a:d1:76:7d:23:41:85:42:bc:f8:6f:d0:cc:3c:a3:
07:c7:b0:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:56 2023 by rpki-client on console-fra.rpki-client.org