Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/ROYy1R_0WBUy4DsQMLaTqwrT8FQ.roa
File: ROYy1R_0WBUy4DsQMLaTqwrT8FQ.roa (raw, json)
Hash identifier: uhGzFDyED930vzOftkxomNEjJJmGRrIIRUhNLo4fX4Q=
Subject key identifier: 44:E6:32:D5:1F:F4:58:15:32:E0:3B:10:30:B6:93:AB:0A:D3:F0:54
Certificate issuer: /CN=f4f7ab4587e69022e5e2bc24107b501d031c3720
Certificate serial: 0851727A
Authority key identifier: F4:F7:AB:45:87:E6:90:22:E5:E2:BC:24:10:7B:50:1D:03:1C:37:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PerRYfmkCLl4rwkEHtQHQMcNyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/ROYy1R_0WBUy4DsQMLaTqwrT8FQ.roa
Signing time: Fri 21 Jan 2022 13:00:59 +0000
ROA not before: Fri 21 Jan 2022 13:00:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209738
IP address blocks: 91.226.86.0/24 maxlen: 24
91.226.87.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139555450 (0x851727a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f7ab4587e69022e5e2bc24107b501d031c3720
Validity
Not Before: Jan 21 13:00:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=44e632d51ff4581532e03b1030b693ab0ad3f054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:31:2a:86:45:8f:89:11:c8:b9:c7:f2:3e:06:
a7:6d:2c:f0:2a:99:44:86:ac:33:a3:40:74:6e:bf:
b0:8c:f1:3c:e1:dc:c5:37:80:48:d4:77:c7:e6:22:
dc:b0:87:e9:b7:d5:07:a9:28:84:67:83:7f:a5:d6:
77:51:75:33:74:6a:1d:96:9f:7d:74:b0:56:5e:10:
9f:c8:af:87:0c:27:35:cd:fb:0e:b1:08:0c:cf:3e:
37:69:8a:e8:67:b4:10:ff:da:d0:87:4a:5d:02:7c:
4b:57:07:a6:26:d6:65:5c:5e:da:15:27:34:b7:50:
50:68:e0:82:57:7c:5f:cf:5a:83:12:ea:30:c6:4e:
20:5f:17:4d:a2:d1:16:bb:fe:29:42:5a:f9:05:39:
40:e2:77:ac:63:01:3f:32:ec:bc:cd:30:9a:41:12:
59:36:f8:c1:fb:c8:d9:aa:2a:d8:a5:44:a7:f2:cd:
74:ef:45:69:14:d9:7f:43:3f:84:f3:09:3e:a2:e8:
cb:76:47:d7:e0:47:4a:41:8d:e9:a3:d9:da:6e:d7:
e4:ae:cf:bd:33:cf:87:85:01:9f:42:96:ab:6f:c9:
d7:fd:3e:48:34:4d:9a:c2:65:32:4e:e3:c2:56:07:
2a:d6:70:02:30:85:4b:54:dc:61:77:1e:13:16:5c:
e9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:E6:32:D5:1F:F4:58:15:32:E0:3B:10:30:B6:93:AB:0A:D3:F0:54
X509v3 Authority Key Identifier:
keyid:F4:F7:AB:45:87:E6:90:22:E5:E2:BC:24:10:7B:50:1D:03:1C:37:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PerRYfmkCLl4rwkEHtQHQMcNyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/ROYy1R_0WBUy4DsQMLaTqwrT8FQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.86.0/23
Signature Algorithm: sha256WithRSAEncryption
45:03:24:f8:ea:e2:ce:1c:5e:57:ba:31:99:4b:1b:25:f6:bd:
69:63:a5:f7:fe:ca:47:f1:5b:ed:fe:52:1c:cf:46:e9:5d:33:
03:c4:01:b5:23:25:e7:6b:a8:a4:a3:ea:bd:1f:ba:06:40:e4:
02:1e:17:33:13:9f:7e:ee:6f:72:0d:c9:8b:1a:5a:16:2a:c1:
1a:de:f7:4f:c4:61:bf:5e:7f:59:4c:91:de:af:33:6b:59:5e:
2a:9b:82:e7:d8:64:3b:ba:07:9d:9f:64:9e:ff:64:e1:53:01:
a0:de:c9:bd:35:5c:27:a3:38:7d:e5:e7:83:34:83:51:3c:f9:
5d:fc:11:34:9e:ec:6e:fc:ae:4b:93:a1:d9:80:ff:43:8c:51:
87:28:66:18:6b:5a:5a:33:e4:45:cc:5e:01:df:90:73:18:c9:
9b:96:42:dd:e0:54:b9:e0:7f:a7:97:af:7f:84:1d:cb:34:62:
16:5d:04:ab:33:6f:80:4a:58:2b:a4:3a:09:18:5e:85:54:67:
d5:2d:5a:cb:bc:34:5f:08:df:ea:a0:52:7c:f9:90:d3:14:e2:
aa:54:2a:d9:f3:31:b6:d3:75:95:bc:b1:dc:60:91:f2:ee:b1:
2d:49:05:35:83:e5:14:ce:9e:93:b3:21:cc:62:d0:fe:8e:69:
7d:ab:cc:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:31 2023 by rpki-client on console-ams.rpki-client.org