Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/748359-eb6d-45f7-b5cb-4fd381b07f7d/1/ry4CL01OWXouhwfp6vgMEr6d76w.roa
File: ry4CL01OWXouhwfp6vgMEr6d76w.roa (raw, json)
Hash identifier: yiwwQ/Df3YTQl+4aKh5qpIV2iTwZaxQCGyLFxjGOwMw=
Subject key identifier: AF:2E:02:2F:4D:4E:59:7A:2E:87:07:E9:EA:F8:0C:12:BE:9D:EF:AC
Certificate issuer: /CN=9d6cf689d49af30a17b810e7f275872fd916d858
Certificate serial: 04422C65
Authority key identifier: 9D:6C:F6:89:D4:9A:F3:0A:17:B8:10:E7:F2:75:87:2F:D9:16:D8:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nWz2idSa8woXuBDn8nWHL9kW2Fg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/748359-eb6d-45f7-b5cb-4fd381b07f7d/1/ry4CL01OWXouhwfp6vgMEr6d76w.roa
Signing time: Mon 14 Feb 2022 22:06:05 +0000
ROA not before: Mon 14 Feb 2022 22:06:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 196682
IP address blocks: 193.9.28.0/24 maxlen: 24
91.219.31.0/24 maxlen: 24
91.219.28.0/24 maxlen: 24
91.219.29.0/24 maxlen: 24
91.219.30.0/24 maxlen: 24
2001:678:108::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71445605 (0x4422c65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d6cf689d49af30a17b810e7f275872fd916d858
Validity
Not Before: Feb 14 22:06:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=af2e022f4d4e597a2e8707e9eaf80c12be9defac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:99:fa:1d:72:ef:0e:76:1e:5d:34:22:dd:f2:
d4:96:6c:94:01:4a:d9:21:5c:b1:53:d2:ff:7b:6a:
ec:19:8f:ff:a5:2f:17:be:e1:14:d7:f3:f8:56:d6:
80:cc:8c:f4:18:f2:ee:97:5f:84:b3:f4:d3:9d:6a:
4f:08:f5:b9:e1:6e:96:1d:15:a1:93:49:af:6c:55:
f8:58:8d:fe:c1:3c:d3:4c:8c:92:64:6f:28:fa:f9:
d8:18:9e:8c:ef:bf:a7:e2:7e:dc:4f:63:f4:3f:a4:
1a:af:5d:43:15:af:e9:6e:13:6d:b2:72:6e:58:0a:
8b:07:f8:cf:0b:49:5c:12:16:ac:19:db:3e:24:8b:
57:e8:45:8b:5b:73:d4:18:81:df:f4:8b:23:b4:c5:
ac:fd:ec:4e:bc:b5:a3:ec:0e:6f:82:49:0e:b3:e8:
0e:01:13:eb:b5:9b:50:9c:d7:a4:78:cf:8e:28:3f:
c0:15:45:35:c8:b7:b9:04:ef:20:0e:78:b2:3a:cb:
b3:da:1d:bf:79:e5:0c:ff:31:48:da:09:de:35:43:
23:ba:0f:fb:8a:88:d1:95:9c:91:6f:20:52:25:0c:
42:51:44:2f:2f:e6:1a:de:8a:a9:48:da:52:0d:34:
11:6c:5d:d3:e0:3d:4a:ed:20:94:56:8a:fe:e3:bc:
ea:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:2E:02:2F:4D:4E:59:7A:2E:87:07:E9:EA:F8:0C:12:BE:9D:EF:AC
X509v3 Authority Key Identifier:
keyid:9D:6C:F6:89:D4:9A:F3:0A:17:B8:10:E7:F2:75:87:2F:D9:16:D8:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nWz2idSa8woXuBDn8nWHL9kW2Fg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/748359-eb6d-45f7-b5cb-4fd381b07f7d/1/ry4CL01OWXouhwfp6vgMEr6d76w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/748359-eb6d-45f7-b5cb-4fd381b07f7d/1/nWz2idSa8woXuBDn8nWHL9kW2Fg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.219.28.0/22
193.9.28.0/24
IPv6:
2001:678:108::/48
Signature Algorithm: sha256WithRSAEncryption
85:11:03:d0:9f:57:b6:b8:fe:6b:f1:ba:9f:dc:29:7e:b2:cb:
af:fd:2d:55:4c:b4:0a:0a:5e:70:2e:1a:0d:a9:8f:2d:c7:16:
c3:ca:23:cd:82:94:9e:43:8c:14:88:2c:13:9c:d0:a1:d9:41:
d0:18:12:4b:78:bd:3b:51:46:bc:fc:1e:5c:89:37:72:b9:d2:
1f:73:08:97:51:1d:e7:32:64:b7:25:45:98:82:97:a9:70:7b:
e9:2a:14:cc:f7:c3:43:25:0b:cb:20:58:45:7d:01:84:0e:61:
5f:32:f1:22:e6:09:9a:5c:b8:4c:58:99:e2:49:73:2f:95:d5:
66:f2:1d:70:43:81:6d:37:d7:06:88:e1:a5:61:00:f7:ae:d2:
5f:c2:eb:f0:5e:ae:b3:6e:b8:56:0d:c1:7f:f5:a3:3f:82:e9:
20:59:43:0e:8b:64:2c:5e:9e:eb:0d:dc:d9:7e:6a:5c:df:d2:
56:19:5d:28:a8:71:62:43:d8:e3:e5:cd:fa:af:0c:a2:67:f2:
73:d2:94:94:76:d9:85:62:64:39:40:19:0b:5c:a4:94:4c:c2:
86:f9:a4:0d:74:8e:15:b6:fc:1f:fb:bd:20:29:3a:e4:3d:07:
a1:6a:58:cb:06:53:c9:de:8d:d8:56:eb:3c:42:30:01:2d:1c:
a5:62:2a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:02 2024 by rpki-client on console-ams.rpki-client.org