Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b0b6e7-3e23-4426-8c84-fab83d403558/1/ynSwkCOZVods64tFB9DBRFovb_Y.roa
File: ynSwkCOZVods64tFB9DBRFovb_Y.roa (raw, json)
Hash identifier: rn9BQ7Y+2gXw8js6qYg95FjX9J7sQC/Wh8nVHSCfkyw=
Subject key identifier: CA:74:B0:90:23:99:56:87:6C:EB:8B:45:07:D0:C1:44:5A:2F:6F:F6
Certificate issuer: /CN=d6dbaa1b52f3a73289ff768acb7baa7f387f955f
Certificate serial: 0183E4B9F9BE126A2BCA4FC23DDBBE85D285
Authority key identifier: D6:DB:AA:1B:52:F3:A7:32:89:FF:76:8A:CB:7B:AA:7F:38:7F:95:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/b0b6e7-3e23-4426-8c84-fab83d403558/1/ynSwkCOZVods64tFB9DBRFovb_Y.roa
Signing time: Mon 17 Oct 2022 06:55:36 +0000
ROA not before: Mon 17 Oct 2022 06:55:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29802
IP address blocks: 91.208.0.0/24 maxlen: 24
91.208.16.0/24 maxlen: 24
91.208.19.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:e4:b9:f9:be:12:6a:2b:ca:4f:c2:3d:db:be:85:d2:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6dbaa1b52f3a73289ff768acb7baa7f387f955f
Validity
Not Before: Oct 17 06:55:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ca74b090239956876ceb8b4507d0c1445a2f6ff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:96:e1:35:d9:10:38:b5:76:d4:9d:0d:49:71:
1d:69:ad:fd:9a:ef:c6:a1:7f:a1:38:bf:1f:71:42:
11:b6:d2:43:8e:a5:ff:e5:d8:b3:26:b2:e9:44:5d:
df:75:08:a4:c8:fc:34:a6:e9:89:bd:19:90:bd:a6:
57:7e:15:96:f4:bb:5f:82:e7:2d:71:a3:ea:f1:74:
a0:b6:75:53:c2:6f:4e:c1:6f:54:7e:e6:63:dd:f5:
d5:bd:bf:20:32:fe:2c:a0:7f:9a:a1:35:90:10:c2:
b8:9f:ec:25:db:c2:91:1e:70:fd:fa:f4:58:56:bc:
0d:90:36:16:7f:11:18:13:a4:58:23:ec:70:33:62:
c2:f7:9f:c8:80:d5:3f:04:4e:14:48:f6:ce:08:ef:
c8:45:2c:db:b7:c6:5d:a1:41:a1:ef:21:6c:b7:74:
51:88:3f:da:bb:fa:e5:5e:96:bc:df:5c:75:48:1a:
bc:74:31:8a:24:2c:c4:a5:c9:37:da:da:34:19:b3:
24:02:c5:e7:e0:3f:94:8c:d5:ea:44:60:9a:24:93:
db:6f:4a:d7:59:d3:bd:b4:a8:8e:45:fb:fe:9c:17:
e3:0c:2c:6c:41:ba:d8:72:0e:7a:9c:09:c1:ed:3d:
08:89:f2:28:bf:39:11:bc:a9:57:c8:fb:4e:a1:fc:
af:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:74:B0:90:23:99:56:87:6C:EB:8B:45:07:D0:C1:44:5A:2F:6F:F6
X509v3 Authority Key Identifier:
keyid:D6:DB:AA:1B:52:F3:A7:32:89:FF:76:8A:CB:7B:AA:7F:38:7F:95:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b0b6e7-3e23-4426-8c84-fab83d403558/1/ynSwkCOZVods64tFB9DBRFovb_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b0b6e7-3e23-4426-8c84-fab83d403558/1/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.0.0/24
91.208.16.0/24
91.208.19.0/24
Signature Algorithm: sha256WithRSAEncryption
44:d8:83:2f:7c:c6:ec:7f:a2:25:4d:3d:f4:71:d7:39:75:80:
27:b4:a6:ac:b8:b0:61:e6:93:17:b8:f4:0b:c6:e9:d4:a6:1c:
fb:40:33:e7:71:b2:4f:ac:3c:9d:95:03:31:78:2e:86:7e:ff:
7c:9c:4e:c9:cd:d7:2e:03:02:c8:a9:23:4f:d5:c2:5e:6f:3a:
eb:bf:f4:7b:57:42:70:6d:1e:f1:6c:2f:d3:14:45:8a:12:e7:
22:09:13:c3:45:e9:5d:93:65:c9:45:cc:a1:9f:9c:45:e4:58:
96:22:58:d3:84:fa:d8:f9:8a:b4:ed:2d:84:f5:13:b8:9a:ce:
2d:e1:f0:5e:2d:f8:5c:b8:5d:a8:4f:bd:6d:fa:4f:84:e3:f2:
e5:f8:19:9e:3b:03:cc:ca:89:41:b3:67:0a:44:d4:c2:c3:52:
6c:b0:e6:82:e1:98:94:5f:03:bd:4a:a9:0c:47:d2:4f:6b:06:
55:a0:65:ca:ea:6a:d8:6a:01:95:9d:be:52:9f:b5:59:96:c6:
c9:fd:b2:fa:32:55:b9:b4:89:65:ef:71:e1:18:3e:4a:cd:a1:
53:17:71:fa:c7:98:59:4e:c1:09:61:1e:93:2e:63:5b:c5:5b:
24:71:c1:da:3f:f2:6b:c6:da:22:28:78:e3:ba:51:79:5f:45:
94:4a:60:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:14 2023 by rpki-client on console-fra.rpki-client.org