Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/TY3gbp1NExHM9hKXhh5uL_8_FbA.roa
File: TY3gbp1NExHM9hKXhh5uL_8_FbA.roa (raw, json)
Hash identifier: znrdEDcz8YBwLXOMBWzvJtQBtle4xjlapnDj6K6qcns=
Subject key identifier: 4D:8D:E0:6E:9D:4D:13:11:CC:F6:12:97:86:1E:6E:2F:FF:3F:15:B0
Certificate issuer: /CN=21e86ff9973c93abe6398f031966c29d75a3ba86
Certificate serial: 04E68D7F
Authority key identifier: 21:E8:6F:F9:97:3C:93:AB:E6:39:8F:03:19:66:C2:9D:75:A3:BA:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/TY3gbp1NExHM9hKXhh5uL_8_FbA.roa
Signing time: Sat 01 Jan 2022 02:55:23 +0000
ROA not before: Sat 01 Jan 2022 02:55:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197612
IP address blocks: 91.225.248.0/24 maxlen: 24
91.225.249.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82218367 (0x4e68d7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21e86ff9973c93abe6398f031966c29d75a3ba86
Validity
Not Before: Jan 1 02:55:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4d8de06e9d4d1311ccf61297861e6e2fff3f15b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:76:7e:1c:85:45:a0:78:c9:a4:78:1b:6f:81:
26:c7:5c:37:b6:1c:be:9c:73:be:fc:23:c4:0e:f4:
8a:14:cf:f3:9f:51:4f:3d:9f:c6:fb:2a:93:75:51:
49:8f:8d:2d:b8:aa:fc:92:f3:8d:1f:80:3b:c9:eb:
8d:79:94:83:6b:61:6e:13:5c:3e:de:cd:c6:2a:1e:
7d:35:1c:31:88:94:f2:2c:3f:a8:20:44:9d:0f:2e:
43:c4:ab:28:ab:fc:76:c5:dd:f4:66:8b:8e:11:f2:
78:6d:82:b9:1a:b0:fd:ba:f1:71:23:7c:a9:c1:9c:
5e:62:b7:07:e0:a5:08:f7:17:6a:db:1d:38:c1:6a:
da:b1:77:52:df:c1:04:8d:0d:04:0f:2d:89:53:39:
61:9b:a4:f4:39:e2:71:e9:43:e1:1e:bf:5e:56:44:
ff:52:6a:e0:fe:7d:5b:ac:9e:00:03:fb:ce:d4:c7:
0e:91:e8:38:1b:4d:4e:1f:12:15:3d:91:a5:d1:2c:
ed:8b:30:41:f9:e2:59:bd:1f:0a:33:cb:8f:a5:9e:
cd:ce:76:f5:f7:58:6e:ce:b3:56:d5:e4:d1:31:1c:
bb:ef:b1:d7:05:d5:25:0f:71:fc:05:44:30:d4:43:
99:31:26:a6:33:19:c7:da:7c:82:40:ef:de:51:49:
e6:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:8D:E0:6E:9D:4D:13:11:CC:F6:12:97:86:1E:6E:2F:FF:3F:15:B0
X509v3 Authority Key Identifier:
keyid:21:E8:6F:F9:97:3C:93:AB:E6:39:8F:03:19:66:C2:9D:75:A3:BA:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/TY3gbp1NExHM9hKXhh5uL_8_FbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.225.248.0/23
Signature Algorithm: sha256WithRSAEncryption
22:f4:15:6d:c2:8c:ec:4b:17:e6:d6:03:68:a0:e3:b9:e2:02:
bb:69:96:f8:9c:b8:ab:ff:0f:2a:17:c0:ea:3e:a6:42:d4:1a:
31:ea:db:44:3d:1b:9d:4d:22:e4:8b:a3:0c:2c:d3:ac:93:23:
99:f6:87:f0:08:1d:56:2b:73:93:62:84:a4:a9:61:bf:52:d2:
a6:d8:61:ed:e0:51:3f:b4:e0:a9:70:85:a4:06:75:68:50:9c:
15:cf:28:a3:3a:56:48:89:92:73:d6:d6:33:e1:5b:fb:d4:df:
33:54:01:74:c4:fb:b3:62:72:68:d7:f5:8a:23:9c:aa:7c:96:
e1:54:f7:9c:73:10:c5:da:44:1b:00:47:d1:5b:83:a0:18:f2:
17:21:85:82:27:28:d5:9f:88:8c:13:31:ff:ab:75:60:9e:4a:
0c:1e:19:d1:f9:c4:f9:e0:e3:55:e7:52:15:50:b0:4e:9c:04:
f9:93:ac:84:57:1a:38:c3:70:f6:ae:34:55:5d:e0:d1:eb:b8:
b0:ac:eb:af:32:80:f5:47:8a:d0:d4:58:aa:82:d6:cc:c3:44:
a8:64:aa:be:64:bf:4f:2e:ac:eb:92:a3:3d:5e:6f:49:37:35:
df:1d:3a:bd:15:5d:29:aa:1e:54:56:11:89:cb:7f:64:7e:7b:
0a:aa:08:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:47 2024 by rpki-client on console-fra.rpki-client.org