Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/yjpHYEqvirTXUn7Zrdr7xQsb4Os.roa
File: yjpHYEqvirTXUn7Zrdr7xQsb4Os.roa (raw, json)
Hash identifier: pYr+IZOdZjxkboB88zppo0F2EJhocmAub8az+zXnYag=
Subject key identifier: CA:3A:47:60:4A:AF:8A:B4:D7:52:7E:D9:AD:DA:FB:C5:0B:1B:E0:EB
Certificate issuer: /CN=06ce5b28466b92742526031392d94bf1a558e844
Certificate serial: 03EC2AB7
Authority key identifier: 06:CE:5B:28:46:6B:92:74:25:26:03:13:92:D9:4B:F1:A5:58:E8:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bs5bKEZrknQlJgMTktlL8aVY6EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/yjpHYEqvirTXUn7Zrdr7xQsb4Os.roa
Signing time: Sat 01 Jan 2022 08:03:38 +0000
ROA not before: Sat 01 Jan 2022 08:03:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44128
IP address blocks: 213.189.218.0/23 maxlen: 23
213.189.216.0/23 maxlen: 23
185.41.162.0/23 maxlen: 23
185.41.160.0/23 maxlen: 23
213.189.223.0/24 maxlen: 24
213.189.222.0/24 maxlen: 24
213.189.220.0/23 maxlen: 23
193.107.236.0/23 maxlen: 23
193.107.238.0/23 maxlen: 23
91.226.82.0/23 maxlen: 23
91.226.80.0/23 maxlen: 23
91.201.52.0/24 maxlen: 24
185.93.110.0/23 maxlen: 23
185.93.109.0/24 maxlen: 24
185.93.108.0/24 maxlen: 24
91.201.54.0/23 maxlen: 23
91.201.53.0/24 maxlen: 24
2a01:5560:8000::/33 maxlen: 33
2a01:5560::/33 maxlen: 33
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65809079 (0x3ec2ab7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06ce5b28466b92742526031392d94bf1a558e844
Validity
Not Before: Jan 1 08:03:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ca3a47604aaf8ab4d7527ed9addafbc50b1be0eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:78:54:ac:0c:29:24:e3:9e:52:71:b7:86:b5:
b6:e4:be:2e:aa:5d:32:32:60:3c:97:ec:58:3a:25:
2c:91:21:01:a5:be:03:50:f5:50:ad:60:06:f7:d3:
2f:0d:5e:f3:4f:c2:12:bf:2c:7f:05:cc:41:26:b7:
3c:ec:3b:fa:5c:64:31:5d:27:80:e9:a7:6c:71:6a:
9b:dd:42:6b:52:a6:8b:67:62:29:4a:9d:1a:94:de:
e9:a8:53:e8:19:89:9f:5e:d5:d7:95:61:56:0b:1c:
94:36:b5:f7:e7:81:06:cf:1d:ff:0b:f0:8a:13:7b:
fb:66:7d:be:5d:7a:98:2a:47:7e:31:ae:82:50:e9:
20:ca:65:e4:6d:1e:91:0c:ee:1a:97:41:33:5f:9d:
87:74:5e:bc:d8:a5:23:f1:0d:b7:a8:2b:d2:93:4f:
da:a9:48:1c:4a:43:7d:d2:61:46:a5:cb:23:d6:94:
e1:ea:d4:55:b2:67:22:02:58:ae:9c:c3:78:f8:82:
f0:e0:d1:14:29:98:a2:9b:01:2d:d0:51:7d:ba:dd:
86:52:e0:e2:77:32:f3:c9:6b:44:56:fc:01:5e:e3:
d0:14:23:76:79:ff:11:3d:e7:e8:06:13:4c:7b:bb:
70:f1:1f:51:3e:a4:0b:5d:c0:84:00:a8:bb:06:99:
09:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:3A:47:60:4A:AF:8A:B4:D7:52:7E:D9:AD:DA:FB:C5:0B:1B:E0:EB
X509v3 Authority Key Identifier:
keyid:06:CE:5B:28:46:6B:92:74:25:26:03:13:92:D9:4B:F1:A5:58:E8:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bs5bKEZrknQlJgMTktlL8aVY6EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/yjpHYEqvirTXUn7Zrdr7xQsb4Os.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.201.52.0/22
91.226.80.0/22
185.41.160.0/22
185.93.108.0/22
193.107.236.0/22
213.189.216.0/21
IPv6:
2a01:5560::/32
Signature Algorithm: sha256WithRSAEncryption
41:ef:78:86:58:fc:f5:42:7b:c5:f6:d8:f7:e2:ab:df:1f:54:
59:1b:d2:bd:91:d8:f1:c8:e2:e2:ec:5a:78:0f:68:ec:e1:d8:
a4:87:cf:fa:bb:1a:b8:01:ee:dc:c5:65:c2:26:da:4e:f5:7c:
d2:a5:9a:f3:28:97:03:70:ce:18:f8:fb:ad:5f:2f:f6:e8:95:
f9:f3:85:7b:d2:c8:48:63:3a:1c:df:2b:6f:c6:02:9c:b3:14:
94:b7:d9:84:f7:3d:d2:1a:70:35:58:c4:bd:cc:b9:b3:1a:ac:
a3:95:97:d5:b9:78:d3:3c:93:32:76:82:a9:82:68:82:a1:18:
d7:52:e7:9f:3b:d6:60:d4:59:d2:61:a4:56:4f:eb:e6:54:f9:
ee:df:0c:ad:a9:65:43:90:43:94:55:b7:91:63:3f:b8:71:09:
a3:97:2c:ea:72:40:8e:83:b3:50:61:69:52:77:c5:03:a3:8e:
c1:11:41:f6:4a:1d:b8:23:59:a4:da:28:50:1e:e6:1a:de:fe:
b3:8b:30:dc:1a:0a:04:3c:b8:7c:50:57:8e:f1:91:8d:ce:e2:
96:26:16:d5:a0:8b:d6:7a:93:58:de:c0:03:eb:4c:90:81:bd:
1a:33:1b:e2:69:7e:22:9e:41:3a:66:b2:6e:9e:97:cd:c7:76:
db:d1:4c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:51 2023 by rpki-client on console.sobornost.net