Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/Y9vhkn6uEHWyeRbMQ4PKOCsHBtA.roa
File: Y9vhkn6uEHWyeRbMQ4PKOCsHBtA.roa (raw, json)
Hash identifier: LvzzZG0+2sWfoakSebrikStLIUAJJczXEda8l9IRrWA=
Subject key identifier: 63:DB:E1:92:7E:AE:10:75:B2:79:16:CC:43:83:CA:38:2B:07:06:D0
Certificate issuer: /CN=9d89e7c53e92479df81171ebaaf2360a037c3248
Certificate serial: 5D20B4
Authority key identifier: 9D:89:E7:C5:3E:92:47:9D:F8:11:71:EB:AA:F2:36:0A:03:7C:32:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nYnnxT6SR534EXHrqvI2CgN8Mkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/Y9vhkn6uEHWyeRbMQ4PKOCsHBtA.roa
Signing time: Sat 01 Jan 2022 01:59:08 +0000
ROA not before: Sat 01 Jan 2022 01:59:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209923
IP address blocks: 213.190.8.0/24 maxlen: 24
213.190.11.0/24 maxlen: 24
213.190.8.0/22 maxlen: 22
213.190.8.0/23 maxlen: 23
213.190.9.0/24 maxlen: 24
213.190.10.0/24 maxlen: 24
213.190.10.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6103220 (0x5d20b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d89e7c53e92479df81171ebaaf2360a037c3248
Validity
Not Before: Jan 1 01:59:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=63dbe1927eae1075b27916cc4383ca382b0706d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6c:06:3f:43:c3:ee:9b:cf:ee:c8:70:7d:ce:
76:d5:21:79:1f:8d:dc:12:e1:ab:ec:56:33:6b:74:
8a:24:10:19:b6:6f:12:9b:85:f2:b8:48:4e:9d:7d:
36:15:68:20:fe:2d:54:22:50:83:2d:01:59:23:4b:
8d:44:ba:d0:59:f8:13:71:ea:4b:ab:13:ee:62:df:
c5:d6:51:b6:cc:ef:80:1d:de:a5:d7:69:ca:ef:42:
9d:d3:94:43:b8:75:ac:5b:d5:42:fb:c3:8b:9c:9c:
3c:1f:8b:12:ce:9d:27:e3:31:c0:3d:ca:02:99:c0:
8a:ec:0c:52:ed:17:ab:85:ca:b5:4c:55:92:cc:6b:
45:27:2f:be:04:7c:9f:90:49:1d:6e:ad:a6:77:e3:
93:de:e8:d6:60:ae:84:81:15:eb:0e:b0:31:47:66:
c4:e3:56:d9:eb:30:74:0d:c4:96:f8:7a:cf:05:d9:
c6:64:22:59:87:1f:36:a4:7e:3d:96:6e:4b:aa:ef:
8f:a6:e1:4b:33:ac:2c:38:30:aa:92:73:45:01:5a:
d6:4e:1c:6e:f1:0f:cc:c0:c3:a4:c2:fe:7d:48:b2:
65:c5:c9:e3:55:5d:d0:37:ef:f0:f2:bb:91:2c:a9:
43:cb:6e:26:2f:eb:b2:93:84:f6:02:2b:ac:96:3a:
da:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:DB:E1:92:7E:AE:10:75:B2:79:16:CC:43:83:CA:38:2B:07:06:D0
X509v3 Authority Key Identifier:
keyid:9D:89:E7:C5:3E:92:47:9D:F8:11:71:EB:AA:F2:36:0A:03:7C:32:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nYnnxT6SR534EXHrqvI2CgN8Mkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/Y9vhkn6uEHWyeRbMQ4PKOCsHBtA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.190.8.0/22
Signature Algorithm: sha256WithRSAEncryption
38:c6:61:ac:7d:45:59:bb:1e:d3:e3:57:56:2f:36:d8:85:8a:
09:2c:99:77:bb:e3:8d:d9:0c:b0:bd:2a:55:8d:32:6d:94:a4:
2a:6d:f7:cf:c4:6d:bf:2f:7f:4c:cc:87:13:e4:f4:9d:f7:a0:
84:3a:e5:f3:e9:16:5c:60:45:9d:1a:88:9e:63:7d:85:77:96:
bf:00:00:45:79:d5:fb:ca:7f:59:7d:b6:b0:09:31:52:97:12:
29:dd:a5:ac:f5:fb:1a:95:ea:13:c9:ca:1a:1b:27:98:3a:25:
b9:68:72:2b:0a:65:97:c9:0b:8c:1f:71:dc:db:1b:82:06:8f:
63:10:e5:24:e5:e2:59:37:de:ba:26:b5:33:7e:28:d2:1c:ac:
82:7a:b7:cd:1a:0a:95:dd:3d:1a:59:b8:ff:48:c1:54:02:51:
23:62:91:5e:b9:2a:ea:9a:e6:24:06:14:0d:f0:72:a1:d3:11:
8c:65:81:09:a2:f3:3f:39:64:cb:58:f2:8c:78:0f:20:f7:2e:
2b:eb:28:94:ec:71:4f:f2:0b:10:46:dc:cc:bb:17:f7:ae:b5:
e6:56:61:9e:88:31:77:68:74:5c:b0:8d:2a:2b:df:60:40:fa:
5e:ee:2e:75:4c:88:58:3f:37:03:08:10:89:f7:00:66:77:8a:
1d:1c:aa:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:12 2023 by rpki-client on console-ams.rpki-client.org