Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/d67522-6e21-437b-bd24-689a4d976f95/1/Yiyo7RkYKiPpmevdBe6cdzDnBQo.roa
File: Yiyo7RkYKiPpmevdBe6cdzDnBQo.roa (raw, json)
Hash identifier: mXtytODvF6KvkUSuuxDYy8kN6u/MStFiW/2q0Cj4tVw=
Subject key identifier: 62:2C:A8:ED:19:18:2A:23:E9:99:EB:DD:05:EE:9C:77:30:E7:05:0A
Certificate issuer: /CN=705ee67d4a12d53c44e701cbd896a48575eb2503
Certificate serial: 01FC35
Authority key identifier: 70:5E:E6:7D:4A:12:D5:3C:44:E7:01:CB:D8:96:A4:85:75:EB:25:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cF7mfUoS1TxE5wHL2JakhXXrJQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/d67522-6e21-437b-bd24-689a4d976f95/1/Yiyo7RkYKiPpmevdBe6cdzDnBQo.roa
Signing time: Mon 27 Jun 2022 19:02:31 +0000
ROA not before: Mon 27 Jun 2022 19:02:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49993
IP address blocks: 91.240.254.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 130101 (0x1fc35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=705ee67d4a12d53c44e701cbd896a48575eb2503
Validity
Not Before: Jun 27 19:02:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=622ca8ed19182a23e999ebdd05ee9c7730e7050a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:47:10:f0:f2:18:d4:b8:b2:c3:d7:88:5d:78:
39:f6:75:84:54:32:5f:c7:b3:61:10:6c:2e:b2:5c:
6e:ae:78:7a:4d:6c:bd:00:3c:38:b3:70:cb:7c:1c:
d6:bf:10:d8:cd:19:36:b7:86:f9:6a:5e:55:d2:b3:
72:7c:19:28:3a:ea:79:40:bb:83:d4:96:6e:f2:d4:
00:d2:2b:1a:fd:68:7d:a7:6e:19:1f:9d:ac:5a:ca:
f7:b6:20:02:70:f0:e7:8b:61:79:5c:07:86:84:95:
b0:bd:41:cb:61:57:0d:eb:ea:14:a8:e1:a5:d3:32:
aa:a1:62:7d:dd:81:32:08:36:db:3e:3b:af:5f:d4:
27:9a:76:b7:44:3b:ce:54:36:d3:e1:73:49:24:5f:
44:b1:1c:24:49:45:d5:90:36:21:44:18:3d:a1:80:
0b:cd:f0:8c:c8:1b:37:18:cd:a9:a0:cf:2d:a5:62:
ee:39:f4:08:2e:35:cc:d4:53:e4:e1:7d:e2:5d:1a:
ce:c7:8c:34:ef:8b:ce:68:b5:a0:db:c6:7e:ab:b6:
8d:c6:9f:c3:a8:17:a1:08:0d:e0:17:3e:b5:8e:df:
1d:e9:3a:fe:cc:66:c3:00:0b:d1:96:85:1e:a5:6a:
a5:cf:16:6b:04:2e:a1:ce:da:ce:3a:26:ac:4e:4c:
38:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:2C:A8:ED:19:18:2A:23:E9:99:EB:DD:05:EE:9C:77:30:E7:05:0A
X509v3 Authority Key Identifier:
keyid:70:5E:E6:7D:4A:12:D5:3C:44:E7:01:CB:D8:96:A4:85:75:EB:25:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cF7mfUoS1TxE5wHL2JakhXXrJQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/d67522-6e21-437b-bd24-689a4d976f95/1/Yiyo7RkYKiPpmevdBe6cdzDnBQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/d67522-6e21-437b-bd24-689a4d976f95/1/cF7mfUoS1TxE5wHL2JakhXXrJQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.240.254.0/24
Signature Algorithm: sha256WithRSAEncryption
29:5e:fd:d5:9b:17:65:14:44:67:0d:48:a9:b9:1c:a5:3c:77:
3f:07:5b:e7:10:74:7e:01:4b:dc:70:eb:cd:c7:08:8f:c4:63:
77:52:71:47:41:83:2c:9d:b9:38:35:47:df:36:a8:bb:9b:67:
6c:74:6e:f4:52:67:1f:6a:77:81:df:72:ff:cb:8d:5e:cb:f9:
eb:f8:d4:46:28:0f:f4:b3:85:cb:95:79:16:80:65:3d:59:8b:
2e:d3:b4:48:9d:f5:cb:0f:58:f0:2e:b6:69:0d:ad:e6:69:e9:
34:56:79:51:a8:7e:8c:40:18:32:7a:89:12:c0:b5:3f:74:65:
78:d9:5a:7b:b1:b6:12:9e:9b:17:3a:40:a9:65:8c:a9:f2:dd:
46:81:92:c0:83:35:1e:64:1e:d3:be:3f:1b:62:49:31:06:e5:
88:f7:7e:9c:ef:0a:73:99:e2:62:b2:ea:d1:10:8a:1b:9e:f5:
44:24:6d:5f:42:30:e1:e5:47:80:f4:cf:ef:e1:7f:54:75:90:
49:cf:85:f8:e9:23:0b:38:e7:1f:e6:88:dd:c7:c7:4a:5e:58:
65:a0:89:c9:b1:98:9e:25:85:78:b6:3f:62:bd:e9:58:f2:3e:
8a:07:a9:78:e5:6e:64:5a:18:8c:69:e8:67:f2:cf:27:17:24:
e6:d1:51:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:12 2024 by rpki-client on console-ams.rpki-client.org