Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/y5Y9sMJMBRcvMpL4O-To44z8HrE.roa
File: y5Y9sMJMBRcvMpL4O-To44z8HrE.roa (raw, json)
Hash identifier: 9AKEAlSlCDQsGPC22slUY1BwRsjsuiMKI6Vts+Jw7WM=
Subject key identifier: CB:96:3D:B0:C2:4C:05:17:2F:32:92:F8:3B:E4:E8:E3:8C:FC:1E:B1
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0184A426820A56BFE1FFEE4B962EDF4BE10B
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/y5Y9sMJMBRcvMpL4O-To44z8HrE.roa
Signing time: Wed 23 Nov 2022 11:01:37 +0000
ROA not before: Wed 23 Nov 2022 11:01:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210636
IP address blocks: 91.190.106.0/24 maxlen: 24
185.241.211.0/24 maxlen: 24
45.83.30.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:a4:26:82:0a:56:bf:e1:ff:ee:4b:96:2e:df:4b:e1:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Nov 23 11:01:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cb963db0c24c05172f3292f83be4e8e38cfc1eb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:9c:50:63:8b:55:b5:a6:6c:7e:e6:4b:f6:d1:
b2:a5:23:57:af:6e:86:25:7e:db:00:c6:b4:0a:d8:
a1:f9:ce:ac:c1:13:75:0a:89:59:71:d0:4d:28:df:
08:5d:17:c8:0c:47:c1:29:af:b1:c3:9f:0a:a6:80:
37:19:fa:97:a7:4a:20:9b:49:d5:d1:ac:82:3c:8c:
7c:dd:ef:04:0c:18:f2:62:c4:25:06:94:32:8f:a9:
10:29:0f:d8:09:a5:bd:e4:cd:1d:da:1f:db:5e:ce:
be:24:d2:cd:6b:5f:d9:a6:cd:f2:e0:0c:15:c6:b0:
c3:f2:ad:a6:01:2e:6b:12:87:d8:d4:56:85:6a:e9:
8f:61:d0:4e:92:e4:d8:df:c0:06:42:2b:f0:12:b9:
84:42:1f:6c:29:e2:a8:d5:08:df:88:d9:d6:b5:16:
a2:90:c0:3e:ab:09:86:47:d5:8d:fb:2d:c4:da:2d:
48:69:62:5e:84:24:7e:0c:d0:9d:7a:a1:d2:99:6b:
07:f8:73:59:75:21:87:c6:b0:f1:21:39:b0:b6:2d:
b6:39:d7:4f:4c:e4:d8:e0:7b:65:d1:83:49:8c:df:
c4:99:f5:f3:14:6b:fb:a0:8d:15:dd:0b:8c:d7:da:
2b:af:83:cd:c1:cc:ed:0d:a7:94:58:3b:a4:95:3b:
db:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:96:3D:B0:C2:4C:05:17:2F:32:92:F8:3B:E4:E8:E3:8C:FC:1E:B1
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/y5Y9sMJMBRcvMpL4O-To44z8HrE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.30.0/23
91.190.106.0/24
185.241.211.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:ed:47:5d:ea:1f:13:38:ed:47:cd:00:dc:f5:69:d9:69:e3:
88:7c:b6:56:e1:3d:8c:35:af:d5:23:37:cf:b9:7f:70:08:af:
9f:f2:d1:3c:08:e2:fd:f6:af:5b:cb:60:1d:40:e7:43:b8:2f:
aa:68:0e:f5:cf:a9:09:1d:37:3a:93:81:e7:6e:ba:c3:5c:a1:
2e:a7:81:e0:92:92:16:2b:90:1b:ab:e0:04:50:c9:55:9f:73:
10:5c:0e:89:44:64:e9:7c:18:ec:f0:9c:02:ff:50:9d:d8:df:
72:84:dd:38:53:34:e6:4f:08:25:fa:1e:e4:69:95:cb:2f:88:
13:b0:6f:67:98:dd:34:48:ca:d4:4c:d4:eb:cc:25:5f:76:26:
25:17:9e:0f:b3:55:55:6e:12:93:7c:7f:24:49:8f:40:a4:54:
a7:1a:47:a8:ec:fa:04:97:e2:f8:1b:42:50:51:6f:1d:9d:07:
67:e3:ad:21:9f:40:ff:8b:4a:95:bc:42:46:b5:ab:d9:7a:c0:
22:fa:44:bd:ac:29:d4:74:62:9e:f8:b6:be:b8:aa:75:90:3c:
96:40:23:b2:43:80:f8:f9:85:05:c7:0b:b2:c8:a8:32:84:49:
8e:9a:7d:26:ea:d4:4f:d9:82:78:90:a4:be:82:b2:d1:b1:a2:
0b:59:5e:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:04 2023 by rpki-client on console-fra.rpki-client.org