Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/Y3MBCSDw_EQcxOFKhn2uQjljoyg.roa
File: Y3MBCSDw_EQcxOFKhn2uQjljoyg.roa (raw, json)
Hash identifier: IBY/eGnmy1ClxNlZGW81GrjK6dcuHuisBa3Rtq/2NW0=
Subject key identifier: 63:73:01:09:20:F0:FC:44:1C:C4:E1:4A:86:7D:AE:42:39:63:A3:28
Certificate issuer: /CN=eebf5b51999637c80bf93c8a903d16c3aec25341
Certificate serial: 3721
Authority key identifier: EE:BF:5B:51:99:96:37:C8:0B:F9:3C:8A:90:3D:16:C3:AE:C2:53:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7r9bUZmWN8gL-TyKkD0Ww67CU0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/Y3MBCSDw_EQcxOFKhn2uQjljoyg.roa
Signing time: Tue 26 Apr 2022 07:34:37 +0000
ROA not before: Tue 26 Apr 2022 07:34:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35490
IP address blocks: 91.236.223.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14113 (0x3721)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebf5b51999637c80bf93c8a903d16c3aec25341
Validity
Not Before: Apr 26 07:34:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6373010920f0fc441cc4e14a867dae423963a328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:69:62:08:06:55:ea:a5:1d:d8:96:16:57:a4:
94:f3:41:ff:26:08:de:e8:79:df:7f:24:ac:39:bd:
8b:4b:b5:09:4a:7c:74:f6:46:0e:68:25:40:36:20:
2f:8a:17:06:e9:d5:69:37:f9:8e:89:e7:58:69:94:
74:82:15:85:e0:b1:a5:b5:f3:c0:62:ed:af:76:75:
c3:9e:15:76:0f:e4:6a:30:b8:e4:ee:47:0c:b1:fe:
c9:77:79:d7:69:50:63:06:e8:01:34:cd:78:9a:ab:
2e:93:a3:a2:83:5d:84:1a:c6:70:3b:b3:28:ca:5b:
2f:34:4f:e1:db:6e:64:bf:27:5a:d9:30:68:ca:67:
ea:f7:c7:f7:a3:56:b2:c9:de:65:b2:7e:21:8a:84:
e8:23:24:cf:7b:59:de:b8:9c:09:7a:47:15:5f:04:
56:0c:1a:16:11:7a:75:d1:30:db:2a:6f:19:b8:f7:
b1:b2:e8:d0:33:ea:e9:ff:5c:1a:ec:27:4b:b4:ad:
d8:9e:f5:6b:b4:3a:b1:23:1b:21:b2:75:c7:b7:ed:
d9:f3:42:01:5e:1e:6b:90:fb:6b:9d:b4:e6:49:98:
4b:6a:af:26:d8:cc:cc:95:10:11:e2:9e:85:6e:f5:
1d:4e:07:5c:39:f3:b5:af:57:4a:9f:a8:a5:11:6b:
7c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:73:01:09:20:F0:FC:44:1C:C4:E1:4A:86:7D:AE:42:39:63:A3:28
X509v3 Authority Key Identifier:
keyid:EE:BF:5B:51:99:96:37:C8:0B:F9:3C:8A:90:3D:16:C3:AE:C2:53:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7r9bUZmWN8gL-TyKkD0Ww67CU0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/Y3MBCSDw_EQcxOFKhn2uQjljoyg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.223.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:fc:32:07:fb:e7:d7:bf:6e:fd:f4:bd:75:e2:9e:fa:36:d0:
66:d7:96:09:d1:6a:bf:8a:f0:0d:4e:da:fb:fc:64:cc:f7:b3:
94:51:1a:ba:83:d8:ce:b7:97:a0:39:2f:fa:55:4e:08:e1:7c:
76:6b:ca:be:12:e8:1b:83:bb:b9:69:5b:b5:a7:74:72:07:7d:
6c:2c:dc:2e:a8:23:39:22:ae:38:b5:b0:15:cd:b5:9f:88:27:
63:c7:ff:fa:96:f8:1b:6e:5d:1e:e8:8f:23:6f:0e:74:f8:b8:
a1:8b:c6:03:da:3d:2f:bd:44:8a:30:a7:74:a7:bd:b3:f3:ed:
5d:c5:73:28:de:ce:e3:46:9c:0f:21:68:df:fd:10:e2:3a:e4:
0b:73:24:54:e3:cf:ef:bb:ef:73:d1:b4:90:65:d6:09:53:a2:
ff:9b:a3:a5:dd:e5:28:d9:84:2f:7d:44:91:21:f9:17:7e:58:
e3:0f:56:f3:d6:5b:95:43:58:1b:33:ea:2d:a2:76:44:8c:f8:
c4:df:15:03:7e:98:3d:d0:a7:7b:79:2e:49:63:ce:05:08:f8:
cc:e7:4c:18:a7:cf:72:f2:f2:a6:66:ad:7e:e6:cd:c7:1b:dd:
79:ac:d1:ec:6d:c2:17:ab:94:a6:69:20:9a:13:96:4c:f3:9b:
62:85:49:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:07 2023 by rpki-client on console-ams.rpki-client.org