Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/yUC8AhvpNgKr53ecGdtF2HMynq8.roa
File: yUC8AhvpNgKr53ecGdtF2HMynq8.roa (raw, json)
Hash identifier: 8KYafEYtGqcQb8PLwi5Czo1m/oBpShWgIMnEp/r5+RQ=
Subject key identifier: C9:40:BC:02:1B:E9:36:02:AB:E7:77:9C:19:DB:45:D8:73:32:9E:AF
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 01826D862A8E472A948FD2B66296FD4D4FDA
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/yUC8AhvpNgKr53ecGdtF2HMynq8.roa
Signing time: Fri 05 Aug 2022 10:21:25 +0000
ROA not before: Fri 05 Aug 2022 10:21:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211936
IP address blocks: 91.92.34.0/24 maxlen: 24
93.152.207.0/24 maxlen: 24
93.152.219.0/24 maxlen: 24
93.152.223.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:6d:86:2a:8e:47:2a:94:8f:d2:b6:62:96:fd:4d:4f:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Aug 5 10:21:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c940bc021be93602abe7779c19db45d873329eaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:53:73:c2:4f:37:c8:83:b3:26:79:2a:41:a3:
29:92:10:cc:54:5d:57:15:70:ac:fc:d2:2f:1f:68:
60:b9:fe:2c:63:ce:e3:e9:80:1f:09:af:31:82:9e:
8a:62:b1:3b:a4:aa:82:0b:30:fc:c0:b6:6c:e1:29:
1c:71:e4:14:f4:5b:85:0f:d4:c2:75:cf:1f:f9:d2:
06:2e:f1:a8:35:13:23:43:53:d7:2e:3f:1a:29:ae:
5f:44:e2:a8:8a:3a:ac:2a:b5:09:90:c6:c5:d2:13:
56:14:e6:ab:12:43:89:0f:0a:c3:2c:e6:cd:70:d1:
be:4b:7b:93:97:c0:64:d5:97:49:f1:7a:50:aa:51:
a1:23:89:19:5a:1f:85:6f:54:a8:e6:0b:19:ca:a5:
29:c2:f4:38:ac:36:a4:fe:95:91:a2:a2:a6:3f:b9:
9f:75:8e:26:d6:44:ba:70:3d:a2:95:a3:2c:3f:46:
51:ef:9d:eb:72:b4:6b:77:5b:e7:6d:2e:0d:00:81:
13:d1:08:af:3d:1d:b6:41:46:16:6d:cc:12:bd:4e:
95:54:2e:51:1e:3f:16:59:c5:d0:82:1d:55:a3:c2:
10:45:af:39:4f:2b:e5:9c:bc:cb:ad:af:4f:58:fb:
36:af:ab:bf:5e:ee:40:90:e2:8d:bb:95:b5:0e:d1:
b9:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:40:BC:02:1B:E9:36:02:AB:E7:77:9C:19:DB:45:D8:73:32:9E:AF
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/yUC8AhvpNgKr53ecGdtF2HMynq8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.92.34.0/24
93.152.207.0/24
93.152.219.0/24
93.152.223.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:81:ef:23:cc:95:cd:64:14:ba:98:96:31:4e:6e:bf:ef:58:
aa:ef:14:88:8d:3e:91:79:7d:2b:c7:6f:13:05:93:e9:40:8b:
4d:87:be:03:5b:03:6e:89:c6:fb:ce:56:11:bc:41:d2:90:ce:
a2:67:0e:59:05:61:f0:f0:8a:51:f7:31:c3:94:09:64:58:0c:
60:49:0c:0a:0c:e1:81:5f:55:c1:a3:6a:91:f3:3f:a9:e5:38:
71:64:bd:7f:b3:79:6b:85:93:b2:91:b8:2a:ea:0c:c4:2f:21:
c7:a7:ef:48:ab:9e:87:66:b5:92:73:ef:d1:97:b9:c2:ef:84:
f1:f7:4a:9b:e1:34:f4:23:f1:14:7e:5e:eb:df:10:7e:d6:32:
b6:a1:4a:c0:af:77:9e:fa:ce:04:6c:4c:2e:2e:81:a9:04:46:
91:22:11:c5:98:cb:76:70:a4:25:64:fc:f1:d9:c9:a4:82:28:
bc:6d:8f:4c:9f:d6:e1:02:25:32:31:53:ce:76:cd:0c:04:10:
1d:94:09:7d:7b:7c:18:47:fe:05:b2:4c:f7:02:6f:3d:63:e9:
3a:72:ee:64:d9:83:8d:cb:55:00:9c:1c:d2:ba:9e:78:19:8b:
00:17:2c:c6:a7:de:13:64:61:6d:10:44:6b:2a:24:a2:a1:81:
2d:59:45:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:07 2023 by rpki-client on console-fra.rpki-client.org