Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/yO8XC6bAWwG-iZc3t7TO8GC55Lg.roa
File: yO8XC6bAWwG-iZc3t7TO8GC55Lg.roa (raw, json)
Hash identifier: X1XKQLvtMv3Fp68UyY/G31ODgsyKez/+qr3470bw96M=
Subject key identifier: C8:EF:17:0B:A6:C0:5B:01:BE:89:97:37:B7:B4:CE:F0:60:B9:E4:B8
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 0820669B
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/yO8XC6bAWwG-iZc3t7TO8GC55Lg.roa
Signing time: Fri 14 Jan 2022 19:14:49 +0000
ROA not before: Fri 14 Jan 2022 19:14:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 54252
IP address blocks: 91.186.200.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136341147 (0x820669b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Jan 14 19:14:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c8ef170ba6c05b01be899737b7b4cef060b9e4b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c3:60:e8:ba:e2:66:0e:e1:7e:02:92:6c:5c:
02:0d:2f:d6:29:4b:f9:fe:ae:dd:de:ee:b3:3a:f4:
f8:da:d3:d2:18:05:94:60:70:cb:e4:50:73:2b:ee:
7f:41:b2:fa:8e:46:2f:f3:89:65:c7:02:db:04:ad:
4c:c1:51:41:5f:df:b4:bf:9b:8b:d1:cc:d4:50:fe:
82:d4:43:52:3d:1a:b9:ac:a1:c8:eb:7e:0d:2e:f0:
a2:f2:c5:21:34:24:68:15:e5:af:b6:d5:e1:12:08:
f5:ee:55:b7:3c:f7:ea:0f:76:dc:8b:c7:a7:73:b5:
22:81:e4:ea:f1:1c:21:49:f7:f4:ad:f2:62:23:65:
07:a6:7c:66:ad:53:02:c8:27:60:16:49:02:b7:42:
d6:f0:44:60:d7:19:b3:6c:c6:5a:5f:cc:5f:9d:f7:
85:3e:5c:c2:b1:31:56:88:f7:12:95:a3:96:c5:be:
41:7c:f9:94:3f:94:28:10:2f:65:d1:55:96:7f:00:
4f:e7:f1:58:fe:d0:d9:88:18:34:74:56:4e:47:38:
b4:ea:a7:62:c6:c8:83:b1:4c:97:54:a8:bc:c8:43:
fe:04:1e:c7:f3:1d:7e:39:65:05:32:b8:31:27:07:
42:d2:84:e9:24:03:47:dd:ea:cb:a1:46:c3:ab:7f:
08:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:EF:17:0B:A6:C0:5B:01:BE:89:97:37:B7:B4:CE:F0:60:B9:E4:B8
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/yO8XC6bAWwG-iZc3t7TO8GC55Lg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.186.200.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:22:06:26:e8:ca:77:36:5a:84:14:a3:dd:ab:0c:6d:b1:4a:
3c:05:a5:0c:93:a2:17:7d:cc:cd:1a:2e:ce:2d:94:74:0c:d2:
f1:89:8c:3d:0f:7f:dd:4b:1e:7d:00:5d:2b:d2:82:74:9b:40:
62:15:a0:87:50:63:d4:2b:5e:6f:ed:5c:23:f5:5e:48:dc:f8:
92:3d:67:1e:c1:53:fb:09:ee:18:31:f7:1e:26:46:43:26:80:
c9:d5:70:5d:d9:98:c0:56:b8:5b:fb:86:36:76:03:64:84:a1:
01:1a:7c:b9:38:c7:a5:a9:90:3c:43:07:e9:82:85:84:6b:73:
8e:53:ac:7a:fa:02:4b:b4:44:7a:51:c9:d3:aa:20:46:44:2b:
9d:35:c0:89:81:f7:3d:de:01:59:1e:0f:ed:ab:fb:b6:2c:0f:
27:ac:e4:98:5b:21:fe:ef:27:76:2d:96:6d:59:35:91:3b:b3:
9b:2f:6e:87:40:0f:fc:eb:c9:ea:23:73:e5:6b:60:2f:5f:b0:
b2:08:dd:1b:01:b1:49:78:df:07:87:9d:bb:1c:7f:ca:f7:0f:
ce:b8:64:3d:02:21:15:8e:9c:0d:5e:4a:2d:24:93:1d:df:0c:
b1:50:fa:0d:61:b8:10:fd:d3:0e:d7:94:4f:9c:60:6e:c2:7f:
6b:ee:8b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:39 2023 by rpki-client on console-ams.rpki-client.org