Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/YQpL4J7dLjt8BUOUMKhk6EEybKU.roa
File: YQpL4J7dLjt8BUOUMKhk6EEybKU.roa (raw, json)
Hash identifier: vbRiAL4YQHFxF4HGmDRJwe6yg7m5gp8JBthQswuIhFs=
Subject key identifier: 61:0A:4B:E0:9E:DD:2E:3B:7C:05:43:94:30:A8:64:E8:41:32:6C:A5
Certificate issuer: /CN=cc1e7c46b81ddab2744270c5bad986af86df4f60
Certificate serial: 0184CCE17F61155B0A3D89B774FD7DDAB080
Authority key identifier: CC:1E:7C:46:B8:1D:DA:B2:74:42:70:C5:BA:D9:86:AF:86:DF:4F:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zB58Rrgd2rJ0QnDFutmGr4bfT2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/YQpL4J7dLjt8BUOUMKhk6EEybKU.roa
Signing time: Thu 01 Dec 2022 08:50:40 +0000
ROA not before: Thu 01 Dec 2022 08:50:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 91.193.42.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:cc:e1:7f:61:15:5b:0a:3d:89:b7:74:fd:7d:da:b0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc1e7c46b81ddab2744270c5bad986af86df4f60
Validity
Not Before: Dec 1 08:50:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=610a4be09edd2e3b7c05439430a864e841326ca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ef:6a:af:2e:c8:81:86:76:dc:1f:da:fe:9a:
ab:19:43:1c:8f:7c:19:c5:29:34:07:53:c2:da:c1:
47:0f:5b:5a:ba:dc:be:90:eb:03:1d:01:bc:74:79:
8e:97:10:ae:e8:8f:e0:da:f1:0c:3f:77:77:be:09:
48:bd:1d:22:db:94:f9:70:be:6a:fc:6d:dc:77:28:
f7:2c:56:0f:43:30:1b:b5:b8:02:9b:62:87:18:86:
05:4a:82:63:7e:71:c2:83:8e:4d:92:46:03:7c:5a:
cb:4b:49:4b:e0:6a:f7:dd:80:df:39:6f:e9:fc:62:
44:34:e6:55:44:05:e8:c5:75:f0:71:da:66:68:f2:
d7:36:75:7f:df:23:40:a8:77:b5:8c:7f:a7:93:53:
40:43:78:75:e8:18:e3:bd:d0:b7:4e:68:da:c7:29:
00:57:92:90:5d:0a:d5:83:ce:85:5a:92:0b:ef:0e:
2e:f1:32:98:4b:ba:96:1b:cd:1f:5a:e8:d2:bd:cf:
64:2e:1b:69:d0:9f:ea:ac:1a:c8:b3:48:74:67:81:
43:6e:57:0c:1e:bc:46:75:aa:16:28:36:10:bc:61:
a3:40:34:ab:3e:f6:fc:b1:4c:cd:f0:77:b1:0e:51:
b4:06:ad:fd:1d:66:fc:27:2f:86:d6:f2:91:41:50:
bc:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:0A:4B:E0:9E:DD:2E:3B:7C:05:43:94:30:A8:64:E8:41:32:6C:A5
X509v3 Authority Key Identifier:
keyid:CC:1E:7C:46:B8:1D:DA:B2:74:42:70:C5:BA:D9:86:AF:86:DF:4F:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zB58Rrgd2rJ0QnDFutmGr4bfT2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/YQpL4J7dLjt8BUOUMKhk6EEybKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.42.0/24
Signature Algorithm: sha256WithRSAEncryption
05:5b:7c:bd:fe:4b:a7:ad:81:39:79:9b:66:cd:35:2e:1b:5e:
02:27:ea:47:18:6a:ab:55:f7:82:d2:dc:62:e7:de:02:58:c0:
5f:78:7e:2d:b4:cc:fa:25:5f:d7:77:08:cf:cb:af:68:5b:3a:
0d:b5:5e:35:fb:83:48:57:28:29:6a:7e:71:e3:e3:87:fb:f7:
37:bc:66:ce:dc:7f:e4:69:45:28:88:5a:ac:9c:c9:e4:e9:6e:
52:40:4e:03:76:94:7e:ad:c4:6b:7a:6f:57:6f:67:d6:0e:cd:
96:67:b3:5b:af:1c:9d:90:a2:f7:58:80:3a:91:55:74:94:bc:
b4:4e:3d:11:ce:a9:de:54:11:5f:52:f0:69:e9:4c:62:42:79:
a2:52:c8:03:16:c6:c2:23:a1:8b:5e:d0:4f:b1:1c:4c:49:76:
0c:e9:08:90:9b:f1:66:5c:75:5d:83:d2:d6:a7:c1:5d:50:25:
b4:e3:57:2a:33:ad:df:eb:c2:79:99:ce:41:ca:74:42:ee:d2:
0a:c4:3f:fa:98:1f:63:d9:3f:75:59:9f:d1:89:cd:91:03:f8:
25:b9:2e:b9:18:72:84:51:7f:ff:d8:6b:81:16:b1:ef:b2:a9:
43:50:df:39:21:40:f9:35:99:51:69:f9:a7:f5:e8:f5:62:16:
4e:3d:69:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:31 2024 by rpki-client on console-ams.rpki-client.org