Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3aa386-9057-49a0-a229-5e77fa0333a3/1/yN6JeBExYYnIMVOEG6D_vRPiacE.roa
File: yN6JeBExYYnIMVOEG6D_vRPiacE.roa (raw, json)
Hash identifier: XhF7AmiFvjtkugy0PUGwKUVJZZNtX/GeqncCpjCi2ig=
Subject key identifier: C8:DE:89:78:11:31:61:89:C8:31:53:84:1B:A0:FF:BD:13:E2:69:C1
Certificate issuer: /CN=96c0ce9f87d9d275f6cae4dc9cdfb5d4437d8ceb
Certificate serial: 01D9A3
Authority key identifier: 96:C0:CE:9F:87:D9:D2:75:F6:CA:E4:DC:9C:DF:B5:D4:43:7D:8C:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lsDOn4fZ0nX2yuTcnN-11EN9jOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3aa386-9057-49a0-a229-5e77fa0333a3/1/yN6JeBExYYnIMVOEG6D_vRPiacE.roa
Signing time: Mon 14 Feb 2022 11:06:03 +0000
ROA not before: Mon 14 Feb 2022 11:06:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7155
IP address blocks: 91.201.199.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121251 (0x1d9a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96c0ce9f87d9d275f6cae4dc9cdfb5d4437d8ceb
Validity
Not Before: Feb 14 11:06:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c8de897811316189c83153841ba0ffbd13e269c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6a:b3:ff:1b:2b:52:a2:6f:5d:41:20:19:ed:
95:bc:d7:8d:4e:71:88:1c:2b:0e:eb:35:99:2f:45:
ed:31:71:b5:ae:7a:61:2c:9a:99:0d:49:7f:ac:45:
93:5e:21:2e:c6:02:ec:0a:bc:6c:33:f3:ad:2f:41:
02:15:91:04:c2:2f:a0:4c:ff:f4:43:3b:b5:16:29:
74:06:b3:a7:7e:e6:6c:56:bb:9c:b6:93:fd:22:10:
fe:e9:30:2f:28:a3:df:d3:b6:fc:2e:17:aa:b1:09:
00:40:9c:44:1f:f9:a9:7f:2b:33:8d:e7:ee:29:b9:
65:e9:22:08:05:c1:3a:fb:12:e0:f1:8a:45:15:f6:
8d:b6:77:98:0a:36:49:c1:76:95:d9:11:06:dd:56:
6e:0f:64:1a:bc:2a:88:2d:6a:c3:6b:ad:1b:58:e1:
e8:be:16:d5:ab:0c:ef:6a:22:ed:47:be:7b:53:4e:
7d:3c:3e:43:4c:41:3c:3b:7c:5d:6c:40:da:97:20:
4c:72:1e:76:a1:4d:4a:e6:67:75:47:67:1d:44:df:
7a:3a:60:ed:e2:6b:d4:7b:b1:cf:2a:e1:d5:0c:c7:
4f:b2:40:26:8f:0d:8f:01:b2:dd:e1:5c:d7:d5:bb:
18:c5:c1:fa:82:68:53:23:14:85:e1:dc:0d:83:6f:
2d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:DE:89:78:11:31:61:89:C8:31:53:84:1B:A0:FF:BD:13:E2:69:C1
X509v3 Authority Key Identifier:
keyid:96:C0:CE:9F:87:D9:D2:75:F6:CA:E4:DC:9C:DF:B5:D4:43:7D:8C:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lsDOn4fZ0nX2yuTcnN-11EN9jOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3aa386-9057-49a0-a229-5e77fa0333a3/1/yN6JeBExYYnIMVOEG6D_vRPiacE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3aa386-9057-49a0-a229-5e77fa0333a3/1/lsDOn4fZ0nX2yuTcnN-11EN9jOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.201.199.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:49:11:55:0a:74:a2:a9:a2:d4:5a:78:79:66:6f:a6:bc:93:
eb:f3:eb:7b:19:2f:04:1a:d6:a4:59:dd:c3:64:c6:0b:ad:c7:
8c:36:fe:3e:34:b8:8e:1e:8d:a4:78:8d:dd:9c:1b:5d:61:fa:
ab:bd:4e:34:27:84:a7:3b:5b:c9:e0:c0:a7:bf:fc:4e:83:bc:
e9:cd:db:f3:b8:fc:9f:a5:6d:6b:a7:73:8c:27:56:8a:26:6d:
57:89:99:2a:cb:46:d1:9b:c8:37:5f:5c:41:a3:8d:42:2d:f1:
f3:d5:cf:00:e1:eb:f9:a1:70:55:8b:ce:e8:44:d5:da:d8:ca:
2f:16:cd:a3:82:1e:21:c9:27:ca:b2:d0:77:3b:52:06:0a:6c:
c2:66:a2:6c:70:2e:ef:4d:86:a6:5a:6e:a8:77:45:2d:bb:26:
b2:3d:09:cc:eb:fa:9b:c8:75:38:11:4b:a2:92:8f:f1:5e:48:
43:a5:d6:30:56:2a:ea:e6:b8:12:93:d5:ed:9b:fd:5e:df:de:
ef:81:1b:61:97:4a:68:f5:21:67:4a:17:f4:93:84:0d:9c:e5:
fe:66:c1:9a:34:d2:33:24:50:5e:58:04:ba:26:13:0b:35:29:
4b:ec:b0:f7:ef:e9:67:18:39:0f:e1:f6:1e:dd:6e:c4:60:91:
3e:03:77:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:13 2024 by rpki-client on console-fra.rpki-client.org