Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/CdAp8ipbydZoiY74QHpZVQVvalQ.roa
File: CdAp8ipbydZoiY74QHpZVQVvalQ.roa (raw, json)
Hash identifier: EmotbE/Uk3IDElzvJv+cq8ViXkVDh11OxPfK4tCBlIE=
Subject key identifier: 09:D0:29:F2:2A:5B:C9:D6:68:89:8E:F8:40:7A:59:55:05:6F:6A:54
Certificate issuer: /CN=c9dd42243197864bb4816461d4d0653ab0ba32ba
Certificate serial: 327FEC7E
Authority key identifier: C9:DD:42:24:31:97:86:4B:B4:81:64:61:D4:D0:65:3A:B0:BA:32:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yd1CJDGXhku0gWRh1NBlOrC6Mro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/CdAp8ipbydZoiY74QHpZVQVvalQ.roa
Signing time: Sat 01 Jan 2022 02:01:21 +0000
ROA not before: Sat 01 Jan 2022 02:01:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198725
IP address blocks: 185.21.196.0/22 maxlen: 22
91.220.201.0/24 maxlen: 24
2a02:c280::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 847244414 (0x327fec7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9dd42243197864bb4816461d4d0653ab0ba32ba
Validity
Not Before: Jan 1 02:01:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=09d029f22a5bc9d668898ef8407a5955056f6a54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ee:1f:8d:3d:42:c4:c3:53:8f:8c:3d:7a:64:
4e:46:d0:8c:52:90:f3:99:d7:fe:85:bb:32:3f:b5:
19:d5:0a:a4:bc:30:05:36:14:e7:e5:f8:43:a6:c5:
ab:59:6b:ef:64:66:5f:3d:d0:b7:4e:e3:5c:57:78:
15:60:d1:40:e0:80:9c:f1:49:94:54:da:24:60:a0:
c3:b4:0d:80:0a:8a:f6:59:3e:5a:5d:5f:bb:94:fe:
45:ac:41:0a:2e:5d:27:fd:d1:a8:f2:be:2b:06:ba:
72:1f:4d:5c:7f:7a:f0:5f:84:bd:47:62:81:1b:94:
4f:4c:ac:cf:e1:e7:25:02:c5:3c:b2:cd:2c:1b:92:
f2:59:de:1a:26:07:3c:aa:d2:29:9d:2d:8e:c1:b9:
41:21:08:b8:04:d5:53:b8:92:0f:45:c6:2a:6f:16:
00:85:6a:54:23:e0:37:7f:aa:7e:68:8c:84:98:09:
3d:c8:15:9c:69:74:1d:25:f6:b6:bb:7c:28:96:cb:
b1:2e:c3:49:23:8c:0e:d3:5b:77:2a:e1:08:a0:69:
84:ac:cf:f3:29:d7:08:94:e5:35:62:85:13:e4:83:
5c:14:ad:0b:ee:d9:ef:e6:b2:8c:bd:05:bb:dc:95:
26:13:42:21:09:c3:68:90:4b:d6:1d:38:31:4a:3e:
05:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:D0:29:F2:2A:5B:C9:D6:68:89:8E:F8:40:7A:59:55:05:6F:6A:54
X509v3 Authority Key Identifier:
keyid:C9:DD:42:24:31:97:86:4B:B4:81:64:61:D4:D0:65:3A:B0:BA:32:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yd1CJDGXhku0gWRh1NBlOrC6Mro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/CdAp8ipbydZoiY74QHpZVQVvalQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/yd1CJDGXhku0gWRh1NBlOrC6Mro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.201.0/24
185.21.196.0/22
IPv6:
2a02:c280::/29
Signature Algorithm: sha256WithRSAEncryption
ba:6e:11:f7:1b:e0:f3:b3:94:b1:70:6f:d0:b7:04:8b:0b:fd:
59:85:0d:00:28:8b:bb:73:df:e9:07:32:c7:72:c6:44:fe:a1:
4a:72:bb:0c:b6:1e:20:a1:35:b9:21:b3:76:4d:c3:8a:ed:b2:
cd:aa:2b:6c:7e:44:2a:8d:04:f9:d5:f5:69:ec:0d:4e:08:22:
53:01:44:e7:6e:4a:26:95:37:81:25:73:23:f8:97:9c:25:c8:
02:0e:c9:33:6e:1f:a9:7f:c8:b7:af:dc:94:84:e3:c0:25:af:
1e:06:21:07:28:ff:3e:59:f2:6f:41:25:29:16:56:47:ac:5e:
91:0d:ed:20:94:d5:47:79:83:20:14:e9:5b:b2:15:73:d2:1b:
b1:8f:4c:73:37:3a:b5:46:42:df:8e:23:6e:d6:b3:44:ce:83:
3d:8b:86:24:b8:63:df:a5:01:59:69:94:9d:3f:13:9d:85:3c:
13:95:dd:fc:d4:73:17:74:9e:fb:b6:ab:4e:e6:14:9c:e6:e7:
3c:9f:a7:8a:48:af:52:d8:61:32:e6:07:09:02:81:88:4e:d4:
48:01:48:e3:ba:0b:50:f0:12:2e:4b:4d:66:c4:d5:56:af:10:
5f:b5:e2:d8:a4:b6:2e:f9:d1:a5:a3:16:fe:0b:ed:90:46:16:
bc:09:5e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:18 2024 by rpki-client on console-ams.rpki-client.org