Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/644501-9d42-4816-89c9-10aca3313387/1/Y8Fjc3mA1hdMMBUB-yOc1CuhBQU.roa
File: Y8Fjc3mA1hdMMBUB-yOc1CuhBQU.roa (raw, json)
Hash identifier: HguhRUwFBkwxxMSRT3Eeq9Y9phdcPaWJdfHlahTjyMU=
Subject key identifier: 63:C1:63:73:79:80:D6:17:4C:30:15:01:FB:23:9C:D4:2B:A1:05:05
Certificate issuer: /CN=9f72e3a0cd74900535b6a6f8ffc657d93a0907a6
Certificate serial: 01856247A86A36B8EFA0A648CE77674AB081
Authority key identifier: 9F:72:E3:A0:CD:74:90:05:35:B6:A6:F8:FF:C6:57:D9:3A:09:07:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/644501-9d42-4816-89c9-10aca3313387/1/Y8Fjc3mA1hdMMBUB-yOc1CuhBQU.roa
Signing time: Fri 30 Dec 2022 09:05:41 +0000
ROA not before: Fri 30 Dec 2022 09:05:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48906
IP address blocks: 91.212.46.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:62:47:a8:6a:36:b8:ef:a0:a6:48:ce:77:67:4a:b0:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f72e3a0cd74900535b6a6f8ffc657d93a0907a6
Validity
Not Before: Dec 30 09:05:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=63c163737980d6174c301501fb239cd42ba10505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:55:80:d4:be:54:61:5b:e9:f8:e0:92:f8:51:
01:d4:ad:65:91:13:19:fe:6b:bc:ea:c7:02:7a:42:
db:a3:7b:27:e7:c3:36:b4:f2:4a:f8:d0:55:38:3a:
4f:b1:cd:e3:ed:8a:87:cc:fc:e3:e3:e2:30:8c:99:
b4:e2:cf:d5:c1:3b:ea:5c:cd:f4:ec:c3:89:9b:80:
dc:f6:e7:9a:00:1b:55:1f:b0:45:53:dc:b1:d7:6e:
27:ff:0e:5a:c5:00:84:2e:a8:2b:f2:bf:8c:c8:c2:
71:8b:c3:6f:60:1b:9e:ff:23:13:c5:74:f1:88:de:
fa:84:43:23:1d:61:2a:03:8b:44:c5:8d:ae:e3:d4:
6c:14:af:d0:55:71:66:07:22:ec:c3:13:99:14:da:
23:23:b7:f3:5e:d7:3c:3a:09:b3:8a:42:26:c8:f1:
61:81:44:db:72:b3:9b:c7:b2:4c:10:63:f0:8c:56:
f9:89:f4:ab:23:ab:48:bf:0a:8e:ce:9c:3b:14:72:
06:ff:03:af:83:41:21:83:24:f8:2b:8f:9a:95:da:
8e:24:fe:1e:e5:34:5e:bc:95:1f:72:97:5f:b5:e5:
55:49:22:f5:8c:b8:67:e9:b1:8b:3b:fd:20:cc:cd:
d8:7b:15:94:85:ae:16:3b:e1:ea:1c:36:8f:c5:61:
08:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:C1:63:73:79:80:D6:17:4C:30:15:01:FB:23:9C:D4:2B:A1:05:05
X509v3 Authority Key Identifier:
keyid:9F:72:E3:A0:CD:74:90:05:35:B6:A6:F8:FF:C6:57:D9:3A:09:07:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/644501-9d42-4816-89c9-10aca3313387/1/Y8Fjc3mA1hdMMBUB-yOc1CuhBQU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/644501-9d42-4816-89c9-10aca3313387/1/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.46.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:e5:38:28:7d:df:45:3d:e2:e4:0a:a5:4d:6c:61:0b:78:5f:
73:cb:ea:73:b9:ba:f9:43:bc:9c:9a:46:f8:61:bd:52:5e:7d:
92:f8:e3:9b:93:cf:f2:c7:80:ec:63:13:50:d3:ca:49:65:09:
ca:62:b4:ac:c5:c6:32:53:7d:15:e4:25:59:83:1b:b3:c9:af:
a6:a9:f3:2f:f2:fe:cb:51:16:2d:c4:c4:fd:d7:5b:0c:6b:29:
90:8f:7e:da:bd:df:1c:54:b3:45:25:5d:45:b7:a3:75:3d:9e:
1d:84:68:4c:2c:d2:6a:d5:57:d0:09:05:a3:54:db:27:31:91:
18:8e:3a:4d:e8:64:5b:56:ae:9b:29:83:9e:39:05:db:f7:b9:
12:d8:98:a6:e5:bf:9f:34:f5:94:5a:c7:05:67:2a:6b:d7:11:
f5:1f:bf:fb:5c:65:fd:bf:53:23:fc:54:0d:5a:3e:23:82:9b:
ff:de:ef:05:48:e9:29:4f:09:20:6c:64:21:0b:c3:3f:6c:75:
20:74:6f:ea:bd:47:3a:c5:b6:53:1b:42:75:c1:72:d6:de:ab:
03:e7:a0:fa:5f:cc:2b:93:8e:e8:9b:95:10:9d:7f:32:a8:54:
ee:67:36:b7:09:46:70:a5:4d:96:4c:f5:9b:a5:d0:56:4b:04:
09:ce:73:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:52 2023 by rpki-client on console-ams.rpki-client.org