Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/09e2f7-e650-4f38-a745-c396200fe0bf/1/Y2xOALzj8HUb-wUnh98brBSyr7o.roa
File: Y2xOALzj8HUb-wUnh98brBSyr7o.roa (raw, json)
Hash identifier: YSqu/FcfPO4BpCddOq9P94iwUjuOj7IE4l8iaDTsZgs=
Subject key identifier: 63:6C:4E:00:BC:E3:F0:75:1B:FB:05:27:87:DF:1B:AC:14:B2:AF:BA
Certificate issuer: /CN=94aa418ae770bda8ef0516b1d1c633a67e91f38b
Certificate serial: 01857067490F7117FF9D725EF2AF8BC28B47
Authority key identifier: 94:AA:41:8A:E7:70:BD:A8:EF:05:16:B1:D1:C6:33:A6:7E:91:F3:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lKpBiudwvajvBRax0cYzpn6R84s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/09e2f7-e650-4f38-a745-c396200fe0bf/1/Y2xOALzj8HUb-wUnh98brBSyr7o.roa
Signing time: Mon 02 Jan 2023 02:54:55 +0000
ROA not before: Mon 02 Jan 2023 02:54:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49248
IP address blocks: 91.212.102.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:67:49:0f:71:17:ff:9d:72:5e:f2:af:8b:c2:8b:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94aa418ae770bda8ef0516b1d1c633a67e91f38b
Validity
Not Before: Jan 2 02:54:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=636c4e00bce3f0751bfb052787df1bac14b2afba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:df:9d:66:b1:de:07:c0:3f:2f:38:02:76:63:
ea:b2:95:cf:dd:cc:c1:e3:d9:16:80:f6:47:4e:0f:
21:0d:99:db:01:bf:1f:a4:5a:a0:84:d0:23:4c:65:
bc:59:3e:d7:1f:77:56:01:9f:0a:58:73:3c:69:44:
8a:2c:59:ed:6d:0f:f3:2a:aa:12:84:a6:6b:eb:2c:
f1:cc:7e:19:49:9d:54:dd:d4:3a:90:dd:2d:dc:c7:
8f:ed:80:d5:48:f8:60:53:a8:b2:48:c1:01:9f:51:
ce:e9:22:94:4f:93:45:c2:0c:68:63:8a:68:9a:7f:
99:2f:35:de:30:fa:00:6f:c8:cf:a1:bb:34:69:25:
91:c6:e2:9d:14:a0:f1:b8:5b:de:72:73:63:fd:ca:
cc:51:38:83:74:39:47:d4:05:3f:4f:6b:de:81:42:
1b:00:af:9b:15:14:63:fe:04:ab:c3:47:b8:9d:89:
5c:18:9e:64:dc:bf:20:e4:6c:03:88:c3:9e:66:bb:
5f:d8:a2:5a:50:f9:a2:fa:6d:32:1c:0d:d2:ed:af:
7c:53:43:64:92:5a:37:e7:1e:c2:ee:3f:fa:94:de:
fd:ba:bc:54:e0:16:99:82:91:0c:4a:24:e9:d5:14:
91:e1:82:b3:4a:e0:6c:c1:54:0f:e0:b2:a6:32:f7:
a6:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:6C:4E:00:BC:E3:F0:75:1B:FB:05:27:87:DF:1B:AC:14:B2:AF:BA
X509v3 Authority Key Identifier:
keyid:94:AA:41:8A:E7:70:BD:A8:EF:05:16:B1:D1:C6:33:A6:7E:91:F3:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lKpBiudwvajvBRax0cYzpn6R84s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/09e2f7-e650-4f38-a745-c396200fe0bf/1/Y2xOALzj8HUb-wUnh98brBSyr7o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/09e2f7-e650-4f38-a745-c396200fe0bf/1/lKpBiudwvajvBRax0cYzpn6R84s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.102.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:54:fc:a8:c1:22:96:de:17:eb:cd:05:6c:ca:10:1f:ad:1e:
15:c4:a6:ce:3c:0c:49:77:e9:74:39:b5:ed:40:88:03:db:c8:
9c:56:11:d3:de:1f:cc:ce:85:c0:9a:d3:a1:c4:15:1b:2d:e0:
a8:a4:9c:6c:2c:53:b1:51:db:7a:8a:08:32:87:56:e4:5d:dc:
59:a2:4d:e7:dd:d2:45:f5:eb:95:b0:02:b1:0b:98:45:6a:2e:
eb:4d:f3:ab:ab:9d:02:93:20:1b:3e:10:1c:ad:cf:d7:10:d4:
8b:98:78:45:3a:ed:a1:b5:ee:e9:d2:fc:2a:12:14:8b:90:1b:
ec:76:58:c1:81:ac:d6:80:f9:c7:91:42:82:56:17:54:f0:47:
47:29:ed:c4:1f:46:d1:11:37:14:96:80:14:32:2e:23:e0:e0:
0d:20:cd:62:5a:5e:d4:1a:f8:7a:f4:3e:0e:a8:63:aa:f0:bb:
a1:0a:79:8e:93:9c:ab:e6:d3:a2:b8:7b:ff:a5:be:6d:a2:e6:
98:a4:42:2b:9a:e9:c8:99:31:cc:b4:ce:6f:27:cd:76:f8:e4:
e5:33:6f:be:23:5e:0b:ae:cb:4d:9c:6b:31:d9:0a:6c:ec:d9:
17:5e:ea:d5:45:da:a2:55:fe:e0:ca:12:19:b8:df:97:ac:44:
e4:a2:7b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:24:30 2025 by rpki-client