Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/3ebce5-73e3-4e3e-83b0-a788fdc70948/1/dYt6qa-Uy_IhIN5U32C2YxPHsas.roa
File: dYt6qa-Uy_IhIN5U32C2YxPHsas.roa (raw, json)
Hash identifier: x9ZVIM/C/tKRuALI6jJwZzP4cs3NwldL3kJ8U3x8yDQ=
Subject key identifier: 75:8B:7A:A9:AF:94:CB:F2:21:20:DE:54:DF:60:B6:63:13:C7:B1:AB
Certificate issuer: /CN=26cf4d53ed5c0a4bd3fe242201a966655c80cc0e
Certificate serial: 034FFA0E
Authority key identifier: 26:CF:4D:53:ED:5C:0A:4B:D3:FE:24:22:01:A9:66:65:5C:80:CC:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Js9NU-1cCkvT_iQiAalmZVyAzA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/3ebce5-73e3-4e3e-83b0-a788fdc70948/1/dYt6qa-Uy_IhIN5U32C2YxPHsas.roa
Signing time: Sat 01 Jan 2022 01:54:03 +0000
ROA not before: Sat 01 Jan 2022 01:54:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202173
IP address blocks: 185.79.100.0/22 maxlen: 24
91.220.120.0/24 maxlen: 24
2a05:7280::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55573006 (0x34ffa0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26cf4d53ed5c0a4bd3fe242201a966655c80cc0e
Validity
Not Before: Jan 1 01:54:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=758b7aa9af94cbf22120de54df60b66313c7b1ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:34:b8:45:ac:f6:70:07:b0:97:59:eb:b2:d5:
10:ed:c6:23:6f:dd:8d:f3:53:44:e9:7b:f5:23:ab:
4c:52:8e:27:dc:f5:2b:3b:f4:fe:34:54:de:31:92:
8a:57:a1:52:b6:ce:e9:27:c2:05:c6:be:57:9e:5a:
7e:7f:e8:00:86:52:ad:0c:75:d6:c1:5f:fd:01:c5:
9f:9c:81:c1:4b:20:e5:78:c6:76:0b:c3:17:62:c4:
88:70:64:c0:ab:29:e0:35:cd:2f:6a:84:54:c3:9d:
70:4b:78:e4:7b:da:66:aa:38:56:ab:9f:96:a3:21:
74:d0:58:f8:a8:96:b9:8d:3e:cc:4c:34:5b:64:92:
d0:f8:39:dd:db:b7:e5:2e:0d:ed:7b:66:0a:6c:13:
fe:a4:da:98:f2:76:40:57:32:34:66:3e:4d:80:66:
22:a2:b6:4c:5f:28:1c:a0:6f:1e:89:c8:56:4c:d2:
e2:37:0d:f7:4f:7a:68:08:97:e6:02:9c:f2:89:04:
49:71:a7:c9:de:d2:2c:fc:1d:a4:81:28:60:d8:87:
25:a2:66:ec:46:b7:6d:e0:72:e3:d0:9a:d0:77:42:
4f:9f:c9:55:1e:79:05:e3:7c:2a:e8:35:07:1f:90:
92:4f:6b:46:90:21:18:f8:92:cb:1e:e6:26:29:b1:
73:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:8B:7A:A9:AF:94:CB:F2:21:20:DE:54:DF:60:B6:63:13:C7:B1:AB
X509v3 Authority Key Identifier:
keyid:26:CF:4D:53:ED:5C:0A:4B:D3:FE:24:22:01:A9:66:65:5C:80:CC:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Js9NU-1cCkvT_iQiAalmZVyAzA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/3ebce5-73e3-4e3e-83b0-a788fdc70948/1/dYt6qa-Uy_IhIN5U32C2YxPHsas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/3ebce5-73e3-4e3e-83b0-a788fdc70948/1/Js9NU-1cCkvT_iQiAalmZVyAzA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.120.0/24
185.79.100.0/22
IPv6:
2a05:7280::/32
Signature Algorithm: sha256WithRSAEncryption
19:4a:1d:26:60:4b:b3:9a:ce:a6:00:29:24:cb:b1:08:a5:bd:
dd:9d:84:94:f2:0c:32:11:af:2a:f7:3e:fd:9f:06:93:69:e1:
2c:6b:91:9e:7b:de:6b:93:43:72:93:b1:30:5b:81:2f:f8:06:
12:ad:06:ca:b2:e3:20:40:62:94:a5:5c:12:b2:54:8b:fd:c4:
7a:bc:e0:7d:07:fd:7f:d5:2c:af:20:bc:b4:ce:fd:d7:45:f0:
31:d0:e9:28:05:2c:ec:04:26:ae:bb:ee:0a:91:d5:60:8a:dd:
2a:f7:0a:e2:63:f8:ae:5d:4d:e9:10:ae:3a:ce:99:e6:6c:29:
df:47:a7:c2:a1:c5:40:40:ea:cf:1f:d4:3a:3f:db:74:f9:b9:
4f:f8:ee:6e:dd:b7:ab:f6:5f:fd:8d:05:52:a0:3d:db:dd:7b:
2a:e1:a3:73:3a:fb:7f:ab:23:3b:5c:57:52:64:58:27:35:ee:
46:5d:1d:69:68:2c:2a:73:c5:e5:fb:0b:0d:99:3c:94:07:95:
d8:b8:f3:5e:4d:96:68:6a:57:c8:82:55:6c:ea:e5:da:08:c1:
41:82:89:6a:6d:ab:ca:56:a3:16:b8:4f:02:42:e6:d2:1b:7a:
95:11:35:1f:b5:0e:94:4b:4e:14:49:c6:8f:0e:73:00:5d:48:
90:7c:b7:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:12:40 2025 by rpki-client