Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/YpkaDxSFC9dJvvxlF9tyUyb5hRQ.roa
File: YpkaDxSFC9dJvvxlF9tyUyb5hRQ.roa (raw, json)
Hash identifier: ktIhcIsGq5kF321VgIOaSL/2eVHk/mfsvtssxWgyyfM=
Subject key identifier: 62:99:1A:0F:14:85:0B:D7:49:BE:FC:65:17:DB:72:53:26:F9:85:14
Certificate issuer: /CN=b1cdc26d44eaf85654481e9581043e14887765b4
Certificate serial: 0271CAC3
Authority key identifier: B1:CD:C2:6D:44:EA:F8:56:54:48:1E:95:81:04:3E:14:88:77:65:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/YpkaDxSFC9dJvvxlF9tyUyb5hRQ.roa
Signing time: Sat 01 Jan 2022 14:05:33 +0000
ROA not before: Sat 01 Jan 2022 14:05:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208854
IP address blocks: 45.140.180.0/24 maxlen: 24
45.140.180.0/22 maxlen: 22
2a0e:c5c0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41011907 (0x271cac3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1cdc26d44eaf85654481e9581043e14887765b4
Validity
Not Before: Jan 1 14:05:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62991a0f14850bd749befc6517db725326f98514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:94:cf:08:d0:d8:16:9c:6a:24:c5:53:03:fb:
70:69:e1:11:9c:99:6d:d1:da:e2:e2:77:56:2d:8d:
4b:8e:9d:e7:25:36:54:62:6a:09:ae:88:64:72:7b:
46:32:dd:1f:a3:cb:2c:88:a1:db:1a:71:a5:cd:cc:
e5:c8:22:c0:21:cc:95:0a:fa:4b:b4:48:01:55:26:
db:1d:5d:d3:f3:8e:21:cc:8d:7b:5b:0f:fd:26:1f:
72:06:a9:a6:f4:75:f2:aa:19:a2:d7:88:c7:f4:ad:
07:c8:88:ae:9a:85:ff:5c:d5:80:5d:6b:36:90:77:
24:47:63:c5:d1:50:9b:29:a9:34:5c:ae:3b:b3:67:
68:da:75:4b:c4:2b:c1:d6:6d:7a:27:49:e2:8f:87:
fa:7d:31:0b:4b:fd:35:d3:18:39:16:63:63:bb:3a:
6c:67:dc:41:5e:ad:76:5b:3c:b2:ae:2f:e1:06:5a:
26:ec:97:14:98:ff:26:44:f7:06:34:3d:63:52:92:
b3:74:c2:11:60:24:fb:2c:09:a2:be:f7:6a:64:71:
93:7e:56:bd:3c:cd:ee:90:bf:e0:9e:7b:8b:4e:e5:
80:b3:43:5f:e2:9c:c7:dc:8a:9e:21:c8:17:4e:21:
20:30:25:3d:62:dc:85:09:50:8b:4b:fb:d9:03:ce:
4e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:99:1A:0F:14:85:0B:D7:49:BE:FC:65:17:DB:72:53:26:F9:85:14
X509v3 Authority Key Identifier:
keyid:B1:CD:C2:6D:44:EA:F8:56:54:48:1E:95:81:04:3E:14:88:77:65:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/YpkaDxSFC9dJvvxlF9tyUyb5hRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.180.0/22
IPv6:
2a0e:c5c0::/32
Signature Algorithm: sha256WithRSAEncryption
6c:08:e8:0c:bc:b7:cb:ab:c2:52:13:33:54:da:05:a1:e9:2b:
01:8c:13:8a:74:bd:2c:28:24:bb:4b:a1:10:9d:1c:e9:8d:3a:
b3:45:07:55:3c:06:ea:67:3e:ad:32:93:78:cc:3f:87:19:e3:
b9:71:dc:28:3d:4e:81:78:74:ea:7c:91:56:d2:53:3d:47:1b:
c9:b9:86:2e:3c:8b:99:a5:31:ac:11:27:4d:89:ef:1d:cb:df:
25:63:92:45:e5:8f:18:c3:8f:89:4c:3c:da:18:5a:2f:a5:6d:
74:31:fa:c9:71:6a:25:5a:66:2e:78:b5:b7:0b:58:fc:72:f5:
54:5a:8d:03:21:f2:18:be:46:88:53:1d:0d:27:fa:e8:45:49:
57:70:8d:25:8b:88:da:8b:b4:a8:88:14:ac:a7:3d:9f:78:de:
35:dd:4a:1b:30:30:93:ff:c6:29:95:1f:fa:af:39:55:7d:58:
c7:aa:80:97:97:52:49:f2:f2:ed:22:47:31:c9:80:1a:f5:cc:
9c:53:04:f7:e6:63:ce:9c:35:9c:54:43:6d:3f:b8:9a:d6:a7:
0f:b0:59:6c:e3:01:96:54:8a:b9:83:c3:91:aa:0b:37:9e:20:
ee:8c:b2:9f:ad:14:e3:ed:23:7b:87:80:92:e3:0a:57:fc:51:
aa:90:a7:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:22 2024 by rpki-client on console-ams.rpki-client.org