Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/9f88d8-8a6d-4c5c-b194-e155acc6b84e/1/wYBTHKkf40mNfr8HRsqGcGZF7xo.roa
File: wYBTHKkf40mNfr8HRsqGcGZF7xo.roa (raw, json)
Hash identifier: IKPIXNDYPI5S37/gIbJjnJ47xZvgbS6CGEfbjP30foU=
Subject key identifier: C1:80:53:1C:A9:1F:E3:49:8D:7E:BF:07:46:CA:86:70:66:45:EF:1A
Certificate issuer: /CN=3f47f75757413ccc172d3d1b826fae5ae9385a1b
Certificate serial: 076DBA64
Authority key identifier: 3F:47:F7:57:57:41:3C:CC:17:2D:3D:1B:82:6F:AE:5A:E9:38:5A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P0f3V1dBPMwXLT0bgm-uWuk4Whs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/9f88d8-8a6d-4c5c-b194-e155acc6b84e/1/wYBTHKkf40mNfr8HRsqGcGZF7xo.roa
Signing time: Sat 01 Jan 2022 11:00:47 +0000
ROA not before: Sat 01 Jan 2022 11:00:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208684
IP address blocks: 91.230.168.0/24 maxlen: 24
91.231.47.0/24 maxlen: 24
45.89.112.0/22 maxlen: 24
91.231.89.0/24 maxlen: 24
2a0b:2640::/29 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124631652 (0x76dba64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f47f75757413ccc172d3d1b826fae5ae9385a1b
Validity
Not Before: Jan 1 11:00:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c180531ca91fe3498d7ebf0746ca86706645ef1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:78:d5:bb:4e:cf:78:09:1b:e0:8c:60:c6:c8:
d5:5b:93:a3:c5:70:a8:78:fd:56:53:03:56:c8:48:
20:5d:e8:59:54:8f:3b:50:43:ab:26:7d:91:82:5f:
d3:a3:7b:9d:25:dc:36:ab:6a:e1:34:3a:eb:8b:ab:
c5:f2:c2:89:2c:8e:13:09:18:6b:13:f6:e9:d5:88:
55:eb:ea:fc:a1:e3:37:28:0f:f5:61:ff:f0:5b:80:
0c:b8:94:7d:c5:7d:21:6a:c7:ee:a1:24:ac:9f:d8:
8d:5f:73:d6:44:35:ed:42:ad:c0:8e:6d:be:f6:b4:
ef:1e:d2:22:52:12:80:d3:6d:69:96:34:a5:fc:6c:
d3:2c:49:05:87:a3:d4:86:17:d8:b6:ce:5e:c3:be:
be:1e:be:7a:32:14:37:aa:a0:75:4b:26:ba:4f:77:
17:bb:f9:4d:79:b8:b5:f2:ae:42:e4:c6:90:ad:1c:
d9:68:8f:8f:14:d4:da:0f:4e:dd:c1:a7:e5:0c:0d:
9c:8e:d3:29:58:29:19:bc:b2:25:2d:54:1c:1e:6d:
7d:03:00:f4:f6:7e:39:cd:1e:d2:47:02:66:68:21:
1f:70:82:00:02:ff:92:a0:e9:0f:21:cf:fa:d4:d4:
60:90:6a:dd:02:7b:ce:36:c8:17:1f:11:6a:1d:b7:
f6:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:80:53:1C:A9:1F:E3:49:8D:7E:BF:07:46:CA:86:70:66:45:EF:1A
X509v3 Authority Key Identifier:
keyid:3F:47:F7:57:57:41:3C:CC:17:2D:3D:1B:82:6F:AE:5A:E9:38:5A:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P0f3V1dBPMwXLT0bgm-uWuk4Whs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/9f88d8-8a6d-4c5c-b194-e155acc6b84e/1/wYBTHKkf40mNfr8HRsqGcGZF7xo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/9f88d8-8a6d-4c5c-b194-e155acc6b84e/1/P0f3V1dBPMwXLT0bgm-uWuk4Whs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.112.0/22
91.230.168.0/24
91.231.47.0/24
91.231.89.0/24
IPv6:
2a0b:2640::/29
Signature Algorithm: sha256WithRSAEncryption
0f:cd:bc:e5:80:9e:ab:ec:c1:6c:bd:8c:5d:4f:a1:71:f4:27:
24:5c:b2:9f:3a:57:fb:38:b8:7e:1b:52:6a:3e:72:1f:89:40:
2f:5e:2b:b7:fd:8b:fa:f0:bc:b5:5a:4f:eb:f6:3e:34:1e:8f:
05:12:5a:ec:0d:fe:36:8b:92:b0:1e:e8:f8:5e:08:f6:f6:d1:
40:05:57:4f:55:2e:16:e9:b2:b6:2e:65:72:44:3e:63:88:c4:
17:c2:95:8e:c4:de:ca:8f:89:73:b5:5a:5d:35:89:ae:41:85:
55:79:e7:f6:dc:4f:f7:42:e9:55:ec:06:c7:d6:2f:db:69:24:
1d:86:39:69:16:f1:92:cc:b0:ba:3f:84:6b:67:fe:cd:5f:37:
46:03:05:30:30:e8:23:53:14:3f:95:ac:f5:ae:f5:33:e3:22:
ce:a9:83:f7:c8:83:14:77:59:c1:cd:d6:7f:f2:a6:4d:43:b6:
9d:4d:00:ff:42:28:82:1c:b7:f7:d1:8f:9f:77:a9:68:0e:e0:
03:62:75:84:3e:b6:4e:6e:3a:25:64:08:ca:5a:28:e2:ca:4e:
ee:d3:52:8b:7f:6a:ab:86:c2:dc:9a:02:d7:d7:82:b1:88:4b:
0a:df:38:40:10:01:10:2a:4d:a1:31:0b:4c:fa:78:13:92:1a:
11:fc:76:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:30 2024 by rpki-client on console-ams.rpki-client.org