Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/acd28e-52ae-4ac9-b028-669f7a761631/1/Y9TQ76IhTTXGKrWnbM5EBlgXWf8.roa
File: Y9TQ76IhTTXGKrWnbM5EBlgXWf8.roa (raw, json)
Hash identifier: kD8C7fD7xhOXZ2+r79KuuyokXvBXtW6C8Y/vjUxATEk=
Subject key identifier: 63:D4:D0:EF:A2:21:4D:35:C6:2A:B5:A7:6C:CE:44:06:58:17:59:FF
Certificate issuer: /CN=29b3a717665a1137e99dc8fad22e3e7f98db8973
Certificate serial: 0944D076
Authority key identifier: 29:B3:A7:17:66:5A:11:37:E9:9D:C8:FA:D2:2E:3E:7F:98:DB:89:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KbOnF2ZaETfpncj60i4-f5jbiXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/acd28e-52ae-4ac9-b028-669f7a761631/1/Y9TQ76IhTTXGKrWnbM5EBlgXWf8.roa
Signing time: Sat 01 Jan 2022 10:05:11 +0000
ROA not before: Sat 01 Jan 2022 10:05:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9009
IP address blocks: 217.64.151.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155504758 (0x944d076)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29b3a717665a1137e99dc8fad22e3e7f98db8973
Validity
Not Before: Jan 1 10:05:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=63d4d0efa2214d35c62ab5a76cce4406581759ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8a:35:37:e0:04:7f:68:15:0c:9b:89:36:1b:
69:c9:d5:e1:ab:40:c4:7c:89:08:7a:d2:a0:ce:35:
ca:61:dd:cc:12:e5:b0:0a:ca:ec:bd:60:2b:62:cb:
29:d4:ba:7b:7f:a9:2f:20:ca:c7:93:f5:e7:4f:71:
74:cd:5c:5d:8c:10:dc:6b:51:f1:44:fb:92:e9:30:
92:55:1b:8d:12:78:a8:76:b8:2f:7f:bf:d3:05:e8:
25:f5:2b:26:19:d1:f8:8e:d6:c1:6d:c6:75:c9:93:
8f:34:ff:2c:7e:d5:27:86:dd:23:70:1f:a4:80:29:
15:4d:6c:27:56:05:c2:8b:4c:7a:b8:aa:f1:79:8d:
04:fe:5b:0c:e0:4e:52:aa:de:8c:2f:45:e3:85:a1:
89:8e:ef:3a:b3:73:14:b9:7e:1d:54:07:33:5c:dc:
24:cc:c5:a7:94:93:5c:1f:e4:41:ae:a3:6b:b3:f2:
8b:2e:3e:05:ea:94:11:4a:2a:12:8d:8b:1f:db:34:
fd:98:bc:fd:57:0a:be:af:01:ec:ef:c5:6c:2b:f3:
c1:d9:a3:c1:7c:f4:4b:7e:00:9e:f5:16:8a:1d:06:
1e:31:e2:c4:70:5b:29:f3:25:55:18:6e:b8:f4:b1:
9c:b6:45:2e:92:dd:fb:6e:1f:aa:55:10:2b:00:cf:
c5:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:D4:D0:EF:A2:21:4D:35:C6:2A:B5:A7:6C:CE:44:06:58:17:59:FF
X509v3 Authority Key Identifier:
keyid:29:B3:A7:17:66:5A:11:37:E9:9D:C8:FA:D2:2E:3E:7F:98:DB:89:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KbOnF2ZaETfpncj60i4-f5jbiXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/acd28e-52ae-4ac9-b028-669f7a761631/1/Y9TQ76IhTTXGKrWnbM5EBlgXWf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/acd28e-52ae-4ac9-b028-669f7a761631/1/KbOnF2ZaETfpncj60i4-f5jbiXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.64.151.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:94:59:76:b9:6b:81:52:37:70:08:fb:7f:26:fa:60:a7:17:
5c:62:91:3d:e9:2a:cc:fe:45:5a:52:fe:46:05:ea:37:9f:f7:
51:dc:95:97:de:73:85:aa:56:9d:0c:8b:14:5e:3d:20:aa:0d:
6c:8a:37:ec:09:dd:ed:97:ae:df:57:ec:8a:70:db:a3:50:34:
48:c7:11:5c:5e:9f:e6:f6:45:b6:f7:b8:43:53:13:58:23:76:
af:03:20:eb:44:89:f8:eb:8b:1b:37:a6:64:eb:26:d3:78:96:
0a:56:f5:e2:f5:63:a1:e5:07:b8:f1:f7:bd:f5:8a:5d:8a:99:
d9:a6:1c:c4:f6:b6:30:da:c2:97:52:9f:b0:2a:6a:58:36:c8:
56:2a:92:5f:72:47:3f:75:66:06:d4:c9:48:d8:aa:7c:91:2f:
12:a9:0b:e3:66:f5:16:30:ba:72:3c:0d:67:b3:74:0d:c7:5b:
ae:2f:63:95:22:8d:c8:0b:a2:51:45:59:c4:14:8a:a3:61:d9:
90:64:b8:c3:82:d7:e5:e8:38:37:79:bc:31:43:0b:36:e8:07:
db:65:f2:e9:46:1d:f1:9d:74:87:0d:37:85:0d:5d:d1:9d:69:
21:cf:e2:d8:83:a1:ba:81:d9:4f:53:53:8a:cf:71:40:62:93:
60:0e:2d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:31 2023 by rpki-client on console-fra.rpki-client.org