Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/cyQb4NX7o-G_4RgJVu8iJoghL8g.roa
File: cyQb4NX7o-G_4RgJVu8iJoghL8g.roa (raw, json)
Hash identifier: RUhhy6cBxjt8zbBilCMjjZ1Aq4M2UHVX4sk2vgLdg0w=
Subject key identifier: 73:24:1B:E0:D5:FB:A3:E1:BF:E1:18:09:56:EF:22:26:88:21:2F:C8
Certificate issuer: /CN=09ea1d4531b071d6574699c12e5afa41f89bd409
Certificate serial: 0DA81809
Authority key identifier: 09:EA:1D:45:31:B0:71:D6:57:46:99:C1:2E:5A:FA:41:F8:9B:D4:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeodRTGwcdZXRpnBLlr6Qfib1Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/cyQb4NX7o-G_4RgJVu8iJoghL8g.roa
Signing time: Sat 01 Jan 2022 12:56:41 +0000
ROA not before: Sat 01 Jan 2022 12:56:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50245
IP address blocks: 109.206.160.0/19 maxlen: 24
91.229.94.0/24 maxlen: 24
62.122.168.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 229120009 (0xda81809)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09ea1d4531b071d6574699c12e5afa41f89bd409
Validity
Not Before: Jan 1 12:56:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=73241be0d5fba3e1bfe1180956ef222688212fc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c1:4f:0a:69:fc:08:34:67:0f:81:57:53:4a:
96:55:a1:8b:ad:cc:46:2e:28:05:15:c6:85:98:ef:
55:82:a6:a7:65:c7:1b:36:90:66:43:cf:94:5b:59:
b7:da:95:d3:2a:f3:68:da:9c:e9:9c:51:81:14:8b:
03:1b:7d:52:c8:aa:e9:3e:a4:44:06:7f:4f:71:f7:
4e:1e:89:e2:06:4b:95:69:91:ef:e9:31:14:0d:6c:
48:62:d5:e9:57:11:d8:de:5b:21:d3:4c:f6:bc:1e:
78:0b:fe:00:58:4a:52:b2:98:79:81:f6:88:bc:d7:
01:ab:e0:50:d1:dd:8e:9b:7f:09:4e:f2:66:e8:42:
1e:43:8b:bb:5e:cc:3e:5e:b4:4f:7b:b2:44:04:01:
ab:1e:fa:3b:25:f7:2b:ac:b8:f0:de:fc:ea:8e:e0:
64:ce:58:e3:74:95:1b:5d:9f:f3:d5:ee:86:4a:37:
47:e4:f4:37:4b:b7:9c:a8:fa:21:e0:7d:e8:2a:a8:
6b:5a:ef:fc:cc:c0:e3:16:fd:42:0a:c3:82:1b:f1:
b5:c5:7e:a6:e4:69:12:14:b8:51:08:d2:20:1a:d6:
2d:46:7d:8e:ec:88:e8:45:7d:e7:42:56:2a:93:43:
32:07:f5:ff:99:f4:d8:30:8a:07:e1:2d:6e:98:64:
78:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:24:1B:E0:D5:FB:A3:E1:BF:E1:18:09:56:EF:22:26:88:21:2F:C8
X509v3 Authority Key Identifier:
keyid:09:EA:1D:45:31:B0:71:D6:57:46:99:C1:2E:5A:FA:41:F8:9B:D4:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeodRTGwcdZXRpnBLlr6Qfib1Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/cyQb4NX7o-G_4RgJVu8iJoghL8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.122.168.0/21
91.229.94.0/24
109.206.160.0/19
Signature Algorithm: sha256WithRSAEncryption
54:60:66:28:9b:c9:d7:3a:16:9b:30:c9:26:f9:1c:60:42:e4:
b4:1c:e8:e2:57:02:ac:c9:b9:26:04:f1:99:8e:66:04:4d:ca:
2b:3d:0b:6a:d9:09:5f:e0:5c:5d:bd:ac:d7:66:2c:8d:3e:35:
da:71:ca:de:ca:4c:53:a7:b9:f1:36:04:30:9a:de:0a:af:1e:
25:18:56:3c:b0:c1:55:4d:58:cc:22:7c:60:f5:93:cd:4d:6a:
cf:12:ad:8a:4e:f4:fd:32:d0:1c:06:e1:e1:b7:3e:bb:50:7b:
56:7d:1f:23:db:64:88:0b:88:b4:0f:e8:48:30:bb:89:2b:d2:
f0:47:77:2e:6c:16:41:d0:8b:2d:46:db:fe:cd:9c:32:1f:d3:
6d:e2:1b:2a:0a:f8:3e:1d:69:ba:1a:f5:24:be:a7:b2:f5:76:
6c:a4:d2:cc:a2:1e:6b:10:27:ec:9a:d7:60:28:f5:63:1f:1c:
2c:e4:be:1c:07:d8:60:98:af:b9:01:3c:36:15:87:ec:38:c4:
8b:54:8e:7a:ac:53:c5:c5:66:8c:e4:47:79:1b:0c:00:9e:d3:
52:5f:ce:20:ba:bf:af:ab:1e:cf:31:37:23:78:40:9b:62:4c:
73:c7:6a:08:fb:75:a6:37:64:ee:ee:54:dc:68:4d:3c:b9:fb:
2e:56:34:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:42 2023 by rpki-client on console-fra.rpki-client.org