Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/Y0vi2XOiZU2p6661dyAIWIhKz3w.roa
File: Y0vi2XOiZU2p6661dyAIWIhKz3w.roa (raw, json)
Hash identifier: 198WSJ/pLlJvyPQ/rbyEqk8Cd5Xx0P/ZUiFmTy4koEM=
Subject key identifier: 63:4B:E2:D9:73:A2:65:4D:A9:EB:AE:B5:77:20:08:58:88:4A:CF:7C
Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Certificate serial: 0182393A5FD0FFCE20212EB7B82B0D70F7B9
Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/Y0vi2XOiZU2p6661dyAIWIhKz3w.roa
Signing time: Tue 26 Jul 2022 06:38:23 +0000
ROA not before: Tue 26 Jul 2022 06:38:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 91.208.69.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:39:3a:5f:d0:ff:ce:20:21:2e:b7:b8:2b:0d:70:f7:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Validity
Not Before: Jul 26 06:38:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=634be2d973a2654da9ebaeb577200858884acf7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:25:60:87:60:77:a7:c6:73:ea:79:2e:11:83:
7f:9f:5f:cf:ee:10:bc:2b:6f:f0:6a:84:82:59:80:
a0:61:99:d8:df:d6:bb:ed:77:e9:a0:8c:4b:f8:50:
41:ec:d5:09:d7:6f:50:93:4c:92:a0:0e:91:12:93:
c2:ee:85:b8:4e:af:0d:d4:16:45:74:4e:30:6b:ac:
3a:4d:2e:86:a2:cb:9f:e9:8c:93:bd:05:76:b7:fc:
84:48:69:49:b0:99:1a:b9:c7:3d:71:0f:55:fe:5f:
1a:c8:ea:2a:5e:76:aa:14:31:1d:3b:22:5f:9a:8c:
9c:41:2f:f6:12:8b:60:71:37:0c:39:0d:15:d9:29:
8f:fc:3f:81:23:fa:58:d9:d8:70:da:ae:0c:6b:b5:
a1:a7:7f:be:88:29:5f:e5:7d:49:08:c0:a9:41:40:
26:f5:e9:4a:83:42:85:9b:d1:9d:80:ee:43:74:c0:
19:ed:28:93:5a:8b:c4:47:18:4e:06:ff:9e:0e:d7:
bc:3d:53:d4:f8:a3:e2:f0:75:c9:33:81:78:14:c9:
45:cf:00:84:29:da:30:60:31:f8:68:90:22:75:12:
b9:06:3f:d8:5d:c2:52:06:53:df:ae:aa:d9:dd:cb:
e8:84:71:79:82:7f:89:54:0c:f5:95:6d:21:b3:b3:
a6:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:4B:E2:D9:73:A2:65:4D:A9:EB:AE:B5:77:20:08:58:88:4A:CF:7C
X509v3 Authority Key Identifier:
keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/Y0vi2XOiZU2p6661dyAIWIhKz3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.69.0/24
Signature Algorithm: sha256WithRSAEncryption
39:12:db:f7:58:58:f1:e7:2c:97:36:35:9e:7e:f6:7b:7f:ef:
47:94:0b:0e:c1:a4:9e:62:27:a5:f4:a2:d3:2f:31:63:fe:be:
e9:cc:2a:08:3e:62:bd:34:67:ab:4b:05:00:d0:37:67:1d:58:
1e:fc:8c:a3:31:0d:7c:7d:fa:bb:b9:9f:69:92:2b:08:ab:54:
ef:48:70:81:3e:74:a6:c6:e8:f0:8a:82:1d:39:f7:46:5c:c9:
e9:4a:6f:f7:bd:0a:55:ab:81:5e:a7:cb:79:c4:f8:3d:57:9b:
d0:de:7a:a1:3f:3d:12:92:c8:4b:f2:ab:0b:f2:ed:2a:5c:c3:
05:cb:2c:15:39:6c:1f:af:0c:dc:c7:47:ec:da:b2:db:bd:f4:
e4:49:05:5f:da:27:25:70:b2:90:9e:6e:43:b1:b8:4a:37:90:
64:c2:4e:f7:52:2e:9f:78:99:65:9f:41:96:8b:8c:48:44:a2:
fc:4f:a2:7c:5f:d9:6a:52:b2:87:7d:99:51:66:d5:e0:aa:e8:
39:09:f4:1d:9d:80:2a:eb:23:cc:56:6e:30:05:c5:00:ed:15:
f0:9e:ce:01:37:be:42:59:f0:78:2d:d9:38:f1:f4:cd:1b:58:
98:11:d2:7b:79:69:d8:4c:1c:3c:0d:85:47:9c:fd:14:85:86:
84:0a:4d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:01 2023 by rpki-client on console-fra.rpki-client.org