Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/ykQ_d2-FeSVg5zhZKLUe-x5icYw.roa
File: ykQ_d2-FeSVg5zhZKLUe-x5icYw.roa (raw, json)
Hash identifier: 3KLtilL9m6f0ZX0du1HtANR2T4UI9y112vRe507gyBQ=
Subject key identifier: CA:44:3F:77:6F:85:79:25:60:E7:38:59:28:B5:1E:FB:1E:62:71:8C
Certificate issuer: /CN=3cdcc8bcdb6c744acdf43dd72d68d20451a179f6
Certificate serial: 0182ABD3FAE23330E79AC61B76FCEFDEB51A
Authority key identifier: 3C:DC:C8:BC:DB:6C:74:4A:CD:F4:3D:D7:2D:68:D2:04:51:A1:79:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PNzIvNtsdErN9D3XLWjSBFGhefY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/ykQ_d2-FeSVg5zhZKLUe-x5icYw.roa
Signing time: Wed 17 Aug 2022 12:42:52 +0000
ROA not before: Wed 17 Aug 2022 12:42:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 91.220.249.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ab:d3:fa:e2:33:30:e7:9a:c6:1b:76:fc:ef:de:b5:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cdcc8bcdb6c744acdf43dd72d68d20451a179f6
Validity
Not Before: Aug 17 12:42:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ca443f776f85792560e7385928b51efb1e62718c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:4a:cc:a1:65:72:16:e4:bf:03:f0:33:2e:a2:
08:63:41:98:f2:f7:86:5c:e1:2c:75:db:bb:d0:da:
60:fc:34:8f:1b:93:13:dc:a7:a3:50:fe:a1:7d:bb:
0e:2f:c3:6e:58:8d:c4:a7:61:e0:f4:4a:5a:d0:17:
f4:6f:25:46:b9:2f:7a:f6:02:47:be:20:b1:73:d6:
b9:2d:5c:45:74:f9:b0:6c:d9:ad:a5:7a:cd:12:1c:
72:fe:63:9a:75:cf:ec:da:40:c2:28:ce:76:22:18:
ff:e9:c7:86:23:b1:0b:be:6f:8b:46:cb:fe:ab:c5:
6f:79:7d:01:1a:7f:16:76:68:5e:66:cd:ef:16:90:
34:24:3f:85:06:34:1f:7b:7c:a8:a0:2e:cd:1e:76:
93:b0:e6:4d:11:a0:5b:c7:a5:ce:d1:bf:68:7f:72:
5e:aa:6e:6a:c1:7a:0e:5f:06:18:13:d8:a3:08:85:
28:2f:57:54:5d:49:8f:99:71:e8:3f:84:10:7b:e0:
73:af:9f:8f:70:64:3c:e4:b9:80:0b:d0:b5:40:62:
16:de:65:bd:7a:93:b8:7f:0d:c9:09:ac:55:59:8e:
32:16:24:fe:ce:99:30:f8:df:85:cf:07:9e:12:5f:
df:bc:a1:d9:b3:65:8a:5b:bc:83:40:a7:95:ab:5e:
e5:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:44:3F:77:6F:85:79:25:60:E7:38:59:28:B5:1E:FB:1E:62:71:8C
X509v3 Authority Key Identifier:
keyid:3C:DC:C8:BC:DB:6C:74:4A:CD:F4:3D:D7:2D:68:D2:04:51:A1:79:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNzIvNtsdErN9D3XLWjSBFGhefY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/ykQ_d2-FeSVg5zhZKLUe-x5icYw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/PNzIvNtsdErN9D3XLWjSBFGhefY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.249.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:53:db:f9:12:74:ca:97:34:c1:8e:54:0a:ff:0f:a1:f7:1c:
20:37:54:93:13:2c:53:fc:92:3e:2a:49:fc:77:a0:b7:5b:6c:
01:c6:20:8f:d7:13:0e:59:bd:7d:ec:b1:29:29:1a:b2:fa:86:
fc:01:83:14:15:aa:e1:9c:01:7b:86:ea:c3:1b:70:ed:f1:54:
8e:70:1a:0e:ef:92:c7:bf:7a:1c:4b:58:7d:12:b0:6c:4a:a9:
07:0b:aa:67:db:26:ef:6d:3d:0f:d1:b5:a4:61:46:92:5c:df:
21:e2:73:2b:c3:62:d8:e7:ce:21:93:43:49:17:17:6a:6c:b0:
63:8c:66:42:eb:50:4e:33:bc:c6:7f:25:e5:5d:4e:be:28:ae:
bc:92:cd:08:e6:eb:6f:d2:4f:f6:0e:4c:ab:d2:1a:ef:a4:20:
01:ea:15:79:c4:15:70:71:a7:ae:db:9c:cf:ce:ed:13:18:b1:
42:a7:72:16:67:39:e5:00:e0:0b:4b:48:1c:14:06:af:6a:e3:
da:e6:bf:55:b6:48:a6:ae:70:66:b2:5d:e0:99:02:30:5d:17:
c5:bc:5f:e9:ad:f0:1c:8f:f1:52:bb:e2:cf:9a:9e:f6:de:99:
ba:54:06:f0:8a:39:55:8a:78:7c:6b:28:ba:15:5b:3c:bd:69:
04:06:7e:e6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYKr0/riMzDnmsYbdvzv3rUaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjZGNjOGJjZGI2Yzc0NGFjZGY0M2RkNzJkNjhkMjA0NTFh
MTc5ZjYwHhcNMjIwODE3MTI0MjUyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYTQ0M2Y3NzZmODU3OTI1NjBlNzM4NTkyOGI1MWVmYjFlNjI3MThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiErMoWVyFuS/A/AzLqIIY0GY8veG
XOEsddu70Npg/DSPG5MT3KejUP6hfbsOL8NuWI3Ep2Hg9Epa0Bf0byVGuS969gJH
viCxc9a5LVxFdPmwbNmtpXrNEhxy/mOadc/s2kDCKM52Ihj/6ceGI7ELvm+LRsv+
q8VveX0BGn8WdmheZs3vFpA0JD+FBjQfe3yooC7NHnaTsOZNEaBbx6XO0b9of3Je
qm5qwXoOXwYYE9ijCIUoL1dUXUmPmXHoP4QQe+Bzr5+PcGQ85LmAC9C1QGIW3mW9
epO4fw3JCaxVWY4yFiT+zpkw+N+FzweeEl/fvKHZs2WKW7yDQKeVq17laQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMpEP3dvhXklYOc4WSi1HvseYnGMMB8GA1UdIwQY
MBaAFDzcyLzbbHRKzfQ91y1o0gRRoXn2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUE56SXZOdHNkRXJOOUQzWExXalNCRkdoZWZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS8zNTY4MjYtZmMxMC00YWE5LTk2YTQt
NjM3YjM3MWRhOGU2LzEveWtRX2QyLUZlU1ZnNXpoWktMVWUteDVpY1l3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS8zNTY4MjYtZmMxMC00YWE5LTk2YTQtNjM3YjM3MWRhOGU2
LzEvUE56SXZOdHNkRXJOOUQzWExXalNCRkdoZWZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9z5MA0G
CSqGSIb3DQEBCwUAA4IBAQBNU9v5EnTKlzTBjlQK/w+h9xwgN1STEyxT/JI+Kkn8
d6C3W2wBxiCP1xMOWb197LEpKRqy+ob8AYMUFarhnAF7hurDG3Dt8VSOcBoO75LH
v3ocS1h9ErBsSqkHC6pn2ybvbT0P0bWkYUaSXN8h4nMrw2LY584hk0NJFxdqbLBj
jGZC61BOM7zGfyXlXU6+KK68ks0I5utv0k/2Dkyr0hrvpCAB6hV5xBVwcaeu25zP
zu0TGLFCp3IWZznlAOALS0gcFAavauPa5r9VtkimrnBmsl3gmQIwXRfFvF/prfAc
j/FSu+LPmp723pm6VAbwijlVinh8ayi6FVs8vWkEBn7m
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:28 2023 by rpki-client on console-ams.rpki-client.org