Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/yGU802eoTM-tSt1wheL7cu_fjPU.roa
File: yGU802eoTM-tSt1wheL7cu_fjPU.roa (raw, json)
Hash identifier: EKOvKSbDEXPqAzknjfPzPuoJCJX+Ph7t8g/U/YScUHM=
Subject key identifier: C8:65:3C:D3:67:A8:4C:CF:AD:4A:DD:70:85:E2:FB:72:EF:DF:8C:F5
Certificate issuer: /CN=270290f5f31f238df3e8f3bdfcc05751cc2f192c
Certificate serial: 10D82E2D
Authority key identifier: 27:02:90:F5:F3:1F:23:8D:F3:E8:F3:BD:FC:C0:57:51:CC:2F:19:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JwKQ9fMfI43z6PO9_MBXUcwvGSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/yGU802eoTM-tSt1wheL7cu_fjPU.roa
Signing time: Sat 01 Jan 2022 04:59:59 +0000
ROA not before: Sat 01 Jan 2022 04:59:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41741
IP address blocks: 91.102.28.0/22 maxlen: 22
91.102.24.0/21 maxlen: 21
2a03:6180::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 282603053 (0x10d82e2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=270290f5f31f238df3e8f3bdfcc05751cc2f192c
Validity
Not Before: Jan 1 04:59:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c8653cd367a84ccfad4add7085e2fb72efdf8cf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ba:85:5e:a9:55:df:81:f1:a7:2a:45:dc:5f:
ae:be:59:d7:29:7e:ad:19:71:c8:7e:fe:8c:e2:14:
b3:70:8a:51:ae:82:09:be:37:78:e8:d2:41:81:eb:
0c:c8:8e:42:23:c1:b9:4c:3a:d1:73:99:81:4d:89:
4f:d2:c3:f2:0b:df:ea:ed:0a:03:56:43:8f:f9:ee:
1a:c4:3d:45:dd:83:44:61:bb:53:35:ce:6f:4c:c4:
9f:6f:3a:ed:32:b7:d7:a8:21:a2:5b:b3:ed:a7:90:
83:c1:7c:2a:16:ce:fe:66:7e:2c:30:8f:73:39:c9:
24:48:e0:91:63:6b:37:e1:e3:c8:04:40:54:df:8a:
6d:80:f9:64:b7:3a:80:68:c8:b2:bc:36:fc:ac:f1:
9b:16:dd:a8:cf:58:3a:4a:1b:4b:7c:c5:0e:05:12:
74:f1:09:28:17:de:5a:21:1c:4c:1c:23:c9:11:81:
d0:d3:63:4b:3d:2f:d6:3c:39:9a:27:e7:a5:bc:b3:
88:7f:d0:bd:90:4c:82:fd:03:b1:96:82:27:c1:f1:
f8:aa:4a:8a:c1:7e:f6:37:eb:c3:99:fc:b5:6c:21:
e9:38:45:58:8d:26:22:8d:2b:2a:99:3d:11:ee:d8:
da:dc:b8:51:4a:4c:37:87:9b:8c:70:a7:1a:5d:82:
2e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:65:3C:D3:67:A8:4C:CF:AD:4A:DD:70:85:E2:FB:72:EF:DF:8C:F5
X509v3 Authority Key Identifier:
keyid:27:02:90:F5:F3:1F:23:8D:F3:E8:F3:BD:FC:C0:57:51:CC:2F:19:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwKQ9fMfI43z6PO9_MBXUcwvGSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/yGU802eoTM-tSt1wheL7cu_fjPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/JwKQ9fMfI43z6PO9_MBXUcwvGSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.102.24.0/21
IPv6:
2a03:6180::/32
Signature Algorithm: sha256WithRSAEncryption
22:8f:a2:ff:ce:cf:67:33:0a:9e:2f:4b:b7:29:74:e3:d0:44:
bc:26:2c:33:67:87:17:63:8f:bd:ab:2e:70:c2:5f:36:be:4b:
f2:04:bf:8e:95:17:cb:ec:f8:cf:4a:a9:2f:75:90:a2:b0:71:
d2:0e:08:ce:98:fb:96:c6:08:4e:5b:4a:57:ff:e0:22:a1:9a:
51:64:50:c7:d0:65:4d:5d:bc:be:c9:8a:de:f9:38:e3:c0:6b:
8d:8f:21:c3:cd:48:18:b8:3d:2e:2e:d5:b8:4e:7c:02:ef:64:
4b:a3:12:42:d0:06:b4:ed:c0:85:18:be:54:04:b8:b0:9f:fc:
3d:bf:ef:0e:37:0d:54:30:bb:b6:86:5b:12:64:2f:75:0a:49:
84:52:05:88:a0:f6:da:19:d9:3e:3a:ec:59:9d:1e:23:d8:a7:
75:1a:1f:85:e9:44:f7:cc:81:0b:e3:43:44:c5:2e:de:c1:b2:
68:57:67:17:9f:03:ec:78:76:a9:30:52:cc:66:2c:83:57:fe:
41:cf:23:c9:e1:13:be:86:28:70:24:d9:9b:37:b3:c0:c7:f6:
c1:ec:07:c1:60:5a:2a:92:c9:d5:71:53:d8:4f:28:c8:18:55:
9f:dc:8a:5a:89:88:4e:e9:9f:15:50:23:6d:ad:fa:6b:4e:33:
82:99:ce:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:59 2024 by rpki-client on console-fra.rpki-client.org