Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/y_8ULMwBtIMzglLHLIF3gYh1ANc.roa
File: y_8ULMwBtIMzglLHLIF3gYh1ANc.roa (raw, json)
Hash identifier: Pq3iFcbqn9CXyozB+sdPt1Y2TjikCw4Q8s/67AvEOMU=
Subject key identifier: CB:FF:14:2C:CC:01:B4:83:33:82:52:C7:2C:81:77:81:88:75:00:D7
Certificate issuer: /CN=95b980b81039581e0d2c37a51216cd79729b0c71
Certificate serial: 08D301B2
Authority key identifier: 95:B9:80:B8:10:39:58:1E:0D:2C:37:A5:12:16:CD:79:72:9B:0C:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbmAuBA5WB4NLDelEhbNeXKbDHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/y_8ULMwBtIMzglLHLIF3gYh1ANc.roa
Signing time: Sat 01 Jan 2022 05:52:26 +0000
ROA not before: Sat 01 Jan 2022 05:52:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21226
IP address blocks: 80.91.192.0/21 maxlen: 21
80.91.204.0/24 maxlen: 24
80.91.206.0/23 maxlen: 23
80.91.200.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 148046258 (0x8d301b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b980b81039581e0d2c37a51216cd79729b0c71
Validity
Not Before: Jan 1 05:52:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cbff142ccc01b483338252c72c817781887500d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7d:33:e7:96:c8:8f:ad:eb:b2:a7:d1:56:ce:
9f:cd:b6:e0:7c:e5:ac:fa:79:74:73:64:5c:87:f7:
a8:77:eb:c5:2c:51:b5:20:fb:44:91:c3:75:d9:70:
71:c5:13:37:7c:56:0b:54:e0:ee:de:cb:c6:d2:c4:
e2:98:5d:6d:48:a0:ae:7d:d7:e9:b7:de:ff:49:38:
89:85:d7:b8:75:76:3c:42:e6:d4:81:4c:b6:4f:5c:
41:dc:a4:24:03:b5:18:23:b7:06:3f:2d:5a:76:18:
5c:d4:ae:5e:dd:e2:6d:75:7c:eb:ee:46:54:e4:d3:
4f:d3:b0:86:d3:30:f9:a5:21:44:11:b8:29:82:d8:
ce:39:60:23:a4:e3:c9:82:a9:c6:29:2b:a0:be:eb:
d2:e3:6c:f8:c2:29:a3:38:e3:d6:64:31:a5:52:c6:
6e:f7:ee:53:06:5b:4b:e2:f5:e1:3e:74:57:7f:c8:
93:7f:57:d2:9d:ef:13:ed:9f:5d:8c:ad:c9:54:47:
bf:9a:64:68:a7:d7:4a:f1:a7:06:8d:97:0f:d5:a7:
db:26:cc:44:37:3a:43:b6:3e:80:d4:52:4e:e4:f0:
3c:67:f5:0c:4e:c5:a9:23:17:5f:d4:4e:b0:98:0b:
aa:20:fd:df:c2:fd:4d:41:cf:f7:c4:82:cb:47:ee:
9a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:FF:14:2C:CC:01:B4:83:33:82:52:C7:2C:81:77:81:88:75:00:D7
X509v3 Authority Key Identifier:
keyid:95:B9:80:B8:10:39:58:1E:0D:2C:37:A5:12:16:CD:79:72:9B:0C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbmAuBA5WB4NLDelEhbNeXKbDHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/y_8ULMwBtIMzglLHLIF3gYh1ANc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/lbmAuBA5WB4NLDelEhbNeXKbDHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.91.192.0-80.91.204.255
80.91.206.0/23
Signature Algorithm: sha256WithRSAEncryption
7a:93:a6:c6:54:38:e3:59:b9:bb:ae:c6:52:42:b0:ec:9b:70:
e7:6e:1b:c3:b8:65:86:08:8f:fe:0f:9b:e6:ac:be:09:f8:fe:
7e:b1:41:89:02:a3:ca:51:1a:8e:60:df:4f:cf:b7:33:07:5c:
7a:86:ab:21:ab:fc:5e:93:18:e2:d3:46:59:78:4a:b8:3a:79:
65:0d:49:d5:1e:06:9f:1c:85:6c:b9:92:36:42:88:5c:c3:d6:
1d:52:f3:39:2d:67:16:24:22:87:f1:b4:68:dd:52:88:d2:5d:
c0:92:1f:07:8a:b7:69:e1:1d:48:e7:33:95:d4:86:ee:1a:0f:
45:11:cd:ac:b6:d1:2d:c6:1d:27:0d:38:f8:0f:7d:cc:fe:49:
1e:a5:55:76:87:bf:c6:47:f8:f7:5d:b7:cf:df:39:92:78:da:
4d:f8:61:35:d4:73:d4:1e:80:7d:9c:93:60:d0:e9:cc:fd:1b:
c9:f7:47:98:aa:18:18:3a:57:9f:6a:8d:6c:98:ea:3a:bd:60:
36:d8:12:9c:27:36:61:f0:78:6f:95:88:42:fa:c3:1c:53:43:
91:e6:9a:ab:7b:45:d9:19:00:36:3e:2d:c7:bc:ce:21:67:d6:
c8:1c:77:5c:a5:97:97:44:3d:2f:3c:bf:d2:3b:ac:ed:6e:8e:
fd:fe:82:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:02 2024 by rpki-client on console-ams.rpki-client.org