Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/d81e08-19c1-434a-bd06-474106e5c687/1/y0E3mYHweCZa-8GwVsFxmewWeww.roa
File: y0E3mYHweCZa-8GwVsFxmewWeww.roa (raw, json)
Hash identifier: Z+sx6gwRrhoxWKI85cH3RDmlH8FqD8363WGM4hYQbHE=
Subject key identifier: CB:41:37:99:81:F0:78:26:5A:FB:C1:B0:56:C1:71:99:EC:16:7B:0C
Certificate issuer: /CN=2c57dd0f9a03833e74e47b990f1a4895b52104a4
Certificate serial: EF7F07
Authority key identifier: 2C:57:DD:0F:9A:03:83:3E:74:E4:7B:99:0F:1A:48:95:B5:21:04:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LFfdD5oDgz505HuZDxpIlbUhBKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/d81e08-19c1-434a-bd06-474106e5c687/1/y0E3mYHweCZa-8GwVsFxmewWeww.roa
Signing time: Wed 11 May 2022 21:54:03 +0000
ROA not before: Wed 11 May 2022 21:54:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58061
IP address blocks: 80.91.209.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15695623 (0xef7f07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c57dd0f9a03833e74e47b990f1a4895b52104a4
Validity
Not Before: May 11 21:54:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cb41379981f078265afbc1b056c17199ec167b0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a9:42:fe:49:ef:67:40:a9:ee:bc:73:00:0b:
f8:3c:ad:aa:17:7e:f5:b3:72:72:51:8f:c7:7f:d4:
0e:1f:c9:6c:f6:33:f2:31:6b:f1:af:5f:b9:73:04:
ca:c9:6a:f8:ed:d5:dc:14:30:75:90:ee:4f:bf:28:
77:55:91:b6:a6:91:46:63:6d:a2:65:11:3a:0a:8a:
38:3f:4c:dc:4e:6d:88:2b:be:b4:7b:95:04:c0:0a:
76:50:71:7b:32:b2:d9:08:6f:b8:64:df:25:aa:d4:
64:af:22:e6:e5:a4:7a:88:7c:55:12:3c:f6:12:c0:
c0:99:48:73:7a:bc:a6:17:be:5d:20:99:ba:ad:6f:
9e:dd:52:22:67:6f:15:0a:e0:94:5c:6c:89:86:af:
ba:c8:47:c6:b9:4f:4e:5d:c0:ed:60:c9:d7:7d:79:
b6:18:7e:1f:6a:96:67:bd:7e:37:a0:b7:34:de:70:
49:69:05:9e:2a:f8:01:1d:98:0b:b7:b5:f9:d4:39:
8b:6c:c2:da:d6:d1:02:9f:da:67:94:b5:4f:2a:c5:
4a:6a:aa:d8:e6:e8:a2:fa:60:ad:06:7f:d5:88:ef:
62:c3:88:6d:67:41:bf:d3:ff:0c:bd:52:86:80:61:
fe:ba:e3:86:15:67:47:61:29:d5:8f:f1:e2:97:76:
9f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:41:37:99:81:F0:78:26:5A:FB:C1:B0:56:C1:71:99:EC:16:7B:0C
X509v3 Authority Key Identifier:
keyid:2C:57:DD:0F:9A:03:83:3E:74:E4:7B:99:0F:1A:48:95:B5:21:04:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LFfdD5oDgz505HuZDxpIlbUhBKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d81e08-19c1-434a-bd06-474106e5c687/1/y0E3mYHweCZa-8GwVsFxmewWeww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d81e08-19c1-434a-bd06-474106e5c687/1/LFfdD5oDgz505HuZDxpIlbUhBKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.91.209.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:d6:cb:46:dd:34:df:09:51:a6:02:24:af:77:29:12:95:52:
37:05:b4:df:60:94:08:fd:37:46:1c:38:a4:28:86:7e:47:d0:
dc:4f:2d:fc:ba:3b:6a:9b:09:63:4a:9b:b4:d2:f4:6c:e7:e0:
70:54:2a:1b:db:8b:41:97:3f:7c:97:4f:9b:d3:28:60:1b:1a:
90:16:18:f7:01:c9:5f:83:ef:10:e2:7e:0d:4c:b5:b2:fb:d6:
48:67:0a:94:04:c1:03:94:83:fc:27:e2:41:5a:77:81:4b:c0:
9b:e1:bf:e1:d9:cf:6e:52:1e:69:42:51:7b:1f:69:04:51:3e:
1c:71:7b:0c:d3:e7:cf:c0:c3:e6:1c:21:de:dc:a3:77:5a:99:
82:96:aa:11:be:8f:71:1b:a2:b9:09:78:41:72:63:49:84:d9:
c9:72:1b:88:8b:ac:16:f3:78:69:de:0a:12:98:be:19:c1:de:
4e:0a:37:8a:75:2c:d6:c0:3f:cc:ca:20:f5:98:d7:6a:dd:18:
c6:08:d9:1b:0d:c4:ab:19:c9:4c:d4:ef:3e:3f:dc:b6:83:dd:
72:59:d8:22:cc:1a:03:e6:da:db:c1:9c:01:8c:c9:84:a1:20:
0d:93:b4:d6:75:60:1d:c7:63:0d:2b:ae:36:f4:d6:24:16:a6:
d0:73:93:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:03 2023 by rpki-client on console-fra.rpki-client.org