Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/y3PRfBpKajPka6_GmAA4-AAP6Ek.roa
File: y3PRfBpKajPka6_GmAA4-AAP6Ek.roa (raw, json)
Hash identifier: CUGssuhhBzLx8nXkx8mLGPs3e2S6Nb1wSnolnJfQsQs=
Subject key identifier: CB:73:D1:7C:1A:4A:6A:33:E4:6B:AF:C6:98:00:38:F8:00:0F:E8:49
Certificate issuer: /CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c
Certificate serial: 368C5D76
Authority key identifier: 20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/y3PRfBpKajPka6_GmAA4-AAP6Ek.roa
Signing time: Wed 09 Mar 2022 11:33:47 +0000
ROA not before: Wed 09 Mar 2022 11:33:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 185.1.122.0/24 maxlen: 24
91.194.218.0/24 maxlen: 24
2001:7f8:cd::/48 maxlen: 48
2001:7f8:61::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 915168630 (0x368c5d76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c
Validity
Not Before: Mar 9 11:33:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cb73d17c1a4a6a33e46bafc6980038f8000fe849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2e:f9:a4:f6:0e:1d:d0:f6:1e:41:2b:0e:dc:
f5:02:a7:b4:aa:8b:39:fa:07:70:b5:2c:c5:7d:e3:
44:5a:8c:e5:12:d3:63:cd:df:54:fb:12:02:3d:6d:
bb:4a:ae:92:1c:a3:54:9c:5b:a7:39:ff:aa:b8:55:
07:89:8b:66:a8:ab:ec:da:27:f8:21:bc:90:8a:09:
13:2a:fb:c9:03:42:9a:27:86:06:c5:ec:f8:60:d8:
87:93:d3:22:38:a2:d2:2f:06:bc:90:de:49:16:f4:
15:88:ed:b4:2f:55:c1:ea:ed:56:ed:8a:df:d7:bd:
7b:c1:71:90:3c:f2:f8:e1:8f:81:4a:ec:ce:ce:c0:
8c:af:33:cf:65:48:7e:f8:2a:e0:ee:d3:23:c1:59:
a3:66:aa:f4:29:43:a3:84:da:0d:dc:93:a3:1d:7a:
db:f8:45:db:50:d4:e6:35:84:8e:09:14:5b:dc:f2:
e0:3b:68:ae:2f:0c:77:49:2b:29:4d:bc:8d:f9:40:
cf:35:1c:76:7e:8a:f1:d2:a8:97:b4:d3:2a:6f:fd:
05:4a:1b:c3:e1:bb:64:38:33:2e:ce:6a:38:b0:ab:
a4:00:93:2b:d6:74:fd:80:a2:39:48:58:4b:ab:e6:
c2:05:d7:1d:12:fb:95:29:29:4a:22:07:28:e4:f9:
16:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:73:D1:7C:1A:4A:6A:33:E4:6B:AF:C6:98:00:38:F8:00:0F:E8:49
X509v3 Authority Key Identifier:
keyid:20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/y3PRfBpKajPka6_GmAA4-AAP6Ek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.218.0/24
185.1.122.0/24
IPv6:
2001:7f8:61::/48
2001:7f8:cd::/48
Signature Algorithm: sha256WithRSAEncryption
33:4f:1b:3c:da:90:10:17:c0:58:d9:5b:e4:96:31:3a:da:46:
f8:e8:f6:97:8b:98:1c:20:c3:63:47:e2:22:89:a6:4f:ce:06:
db:77:f0:1b:3f:21:be:1d:52:c3:06:e5:d1:7a:1f:bc:47:d4:
a0:d0:e8:9a:aa:6a:ba:20:e7:49:80:de:ea:76:fb:bc:58:0c:
97:56:53:63:a1:9a:76:f4:c3:e4:dd:56:89:f1:19:d8:cd:81:
b8:7b:5e:7b:4e:f0:63:f6:e5:ad:5a:c2:40:49:89:ec:bc:5f:
7c:08:cb:e0:0c:34:15:b3:9a:09:52:7a:6a:f8:80:c6:a1:f9:
2c:77:ff:9d:1b:b0:fc:9f:4c:0c:59:2a:37:c8:a4:2c:7f:b3:
61:93:99:de:49:ba:b8:b4:0f:2c:51:ce:77:a0:df:85:c2:4a:
9b:45:c1:f8:db:e6:6c:c3:d1:f0:48:cc:36:52:af:9f:15:6e:
8d:60:22:26:87:bd:5e:d1:f4:97:4d:cc:af:7e:a1:6b:aa:28:
41:47:b0:fe:c8:af:1d:bc:c1:68:76:73:6a:34:b0:20:df:6e:
cd:a1:10:cf:e7:07:48:08:03:2a:92:a1:e4:6c:1a:33:48:f2:
27:c6:5f:89:73:d2:31:29:d5:44:48:33:d6:bd:15:51:28:58:
a4:f3:a4:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:54 2023 by rpki-client on console-ams.rpki-client.org