Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/Y2OBL7yFQ3q4tuWKQZF79tG0B7I.roa
File: Y2OBL7yFQ3q4tuWKQZF79tG0B7I.roa (raw, json)
Hash identifier: Q+9m2FN6Oi6cWpD8PWaHNQ2cMKpoVOP8dQLp8it3tAQ=
Subject key identifier: 63:63:81:2F:BC:85:43:7A:B8:B6:E5:8A:41:91:7B:F6:D1:B4:07:B2
Certificate issuer: /CN=c8d335041718b18830b1f58c15d3518510fe6118
Certificate serial: C9CBA6
Authority key identifier: C8:D3:35:04:17:18:B1:88:30:B1:F5:8C:15:D3:51:85:10:FE:61:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNM1BBcYsYgwsfWMFdNRhRD-YRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/Y2OBL7yFQ3q4tuWKQZF79tG0B7I.roa
Signing time: Thu 24 Mar 2022 10:50:39 +0000
ROA not before: Thu 24 Mar 2022 10:50:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7155
IP address blocks: 185.15.32.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13224870 (0xc9cba6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d335041718b18830b1f58c15d3518510fe6118
Validity
Not Before: Mar 24 10:50:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6363812fbc85437ab8b6e58a41917bf6d1b407b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:56:d1:8f:e6:15:f1:a1:64:b8:c4:92:6e:dc:
6b:e9:1e:1d:ed:82:d9:1f:b3:a5:37:f2:47:a1:2a:
db:bc:c6:2e:c6:7c:86:9d:13:2b:81:9f:b8:2f:46:
51:a8:0b:98:67:18:4b:74:3e:86:cb:cd:4f:64:3e:
83:fa:f1:dd:6d:aa:4b:18:e3:64:5c:47:06:51:2a:
db:9b:d2:32:57:67:a0:18:3e:62:e8:05:ea:3d:d0:
46:fd:9e:5e:8b:0f:f5:a6:68:be:9a:10:0e:05:db:
f1:a8:c8:df:4f:66:5b:95:f3:a3:3e:c7:a7:ad:d7:
94:e3:89:c9:85:63:e4:25:49:af:36:02:66:4d:c2:
dc:de:d8:3d:9f:f8:50:21:4e:09:31:a0:07:a7:19:
38:0b:04:92:ff:10:a1:b4:58:40:6b:6d:4c:23:26:
87:ef:51:ae:94:75:3e:02:07:aa:7c:00:43:a7:bc:
77:12:8e:95:4f:e5:cf:4b:1d:b4:af:b1:5f:40:5f:
44:a7:1e:21:80:b0:65:b1:07:48:1d:ac:88:7f:d9:
8f:98:60:78:8e:25:6b:5b:e1:aa:6d:77:47:d9:0e:
48:58:da:0c:7f:f9:89:61:e1:29:13:6e:2c:10:3c:
a9:2c:80:8a:e1:c4:50:a9:03:2d:53:78:9a:72:b9:
b6:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:63:81:2F:BC:85:43:7A:B8:B6:E5:8A:41:91:7B:F6:D1:B4:07:B2
X509v3 Authority Key Identifier:
keyid:C8:D3:35:04:17:18:B1:88:30:B1:F5:8C:15:D3:51:85:10:FE:61:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNM1BBcYsYgwsfWMFdNRhRD-YRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/Y2OBL7yFQ3q4tuWKQZF79tG0B7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.15.32.0/22
Signature Algorithm: sha256WithRSAEncryption
69:dd:f9:4f:b1:f8:21:8a:52:6d:28:ca:a9:ca:88:a4:ca:56:
2d:cb:ac:cf:e2:0d:20:c8:be:60:57:c8:5d:67:db:75:92:e1:
aa:6b:38:41:a9:69:fa:4b:34:f7:19:3c:fd:38:9b:c5:e2:3a:
e5:09:00:5e:13:9e:c5:35:14:38:7b:db:c6:62:bf:30:13:aa:
20:20:1f:e8:c7:ec:02:df:42:df:46:b4:27:35:87:17:cd:a0:
d0:ac:6d:65:36:8b:19:a3:7a:6c:f9:e1:fb:ea:75:82:11:05:
09:be:51:a5:de:61:6e:6d:f8:06:8c:3f:d4:0c:58:8d:48:9d:
b9:4c:ed:b5:37:36:bd:05:4f:d4:55:3d:b2:a0:45:ca:0a:74:
76:0a:24:71:ea:f7:9c:b2:86:a7:df:84:4d:16:57:ed:82:a3:
13:d8:b0:50:a0:1e:b5:6e:19:c2:49:8e:8c:76:7e:35:65:15:
f9:6c:43:a3:3b:a9:ed:6c:93:93:55:56:29:fb:2a:bb:dd:fc:
b5:19:8a:84:d9:09:ef:7c:3a:ab:82:16:0f:ed:32:89:d7:5d:
33:69:19:a8:ec:ff:d1:a8:6d:80:af:e6:cd:a5:39:1d:a1:b8:
ff:18:36:b8:c0:e4:61:c8:20:46:f0:b0:e0:11:30:c2:59:12:
20:73:3a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:58 2024 by rpki-client on console-fra.rpki-client.org