Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/7474e1-4d65-43b4-8bb1-feef105f0a77/1/YaIaWYnk7lsE57dfz4HKn9MWI9Y.roa
File: YaIaWYnk7lsE57dfz4HKn9MWI9Y.roa (raw, json)
Hash identifier: xXv2gVloAEsWwWyFLq2ViEGfiWr6crzLiVp3YJBfpw4=
Subject key identifier: 61:A2:1A:59:89:E4:EE:5B:04:E7:B7:5F:CF:81:CA:9F:D3:16:23:D6
Certificate issuer: /CN=ee3be768d28668f490afb74e9aefe41e03495d7a
Certificate serial: 039D1803
Authority key identifier: EE:3B:E7:68:D2:86:68:F4:90:AF:B7:4E:9A:EF:E4:1E:03:49:5D:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jvnaNKGaPSQr7dOmu_kHgNJXXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/7474e1-4d65-43b4-8bb1-feef105f0a77/1/YaIaWYnk7lsE57dfz4HKn9MWI9Y.roa
Signing time: Sat 01 Jan 2022 13:56:11 +0000
ROA not before: Sat 01 Jan 2022 13:56:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25540
IP address blocks: 185.19.224.0/22 maxlen: 24
185.243.16.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60626947 (0x39d1803)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee3be768d28668f490afb74e9aefe41e03495d7a
Validity
Not Before: Jan 1 13:56:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=61a21a5989e4ee5b04e7b75fcf81ca9fd31623d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5f:33:09:98:44:dc:89:6d:24:4d:ec:46:4e:
8c:19:bf:9f:57:cc:01:a6:14:8c:2c:c2:d5:17:4d:
f1:a6:8a:78:96:00:46:17:73:a1:1e:6f:a4:b7:23:
f3:a8:54:6e:c6:2f:1a:c2:89:64:70:95:e7:11:8b:
4a:72:39:74:66:71:fe:18:ca:d3:12:3e:42:66:4b:
71:68:95:19:0b:10:cd:04:ab:0f:dd:3e:a2:74:18:
d2:3c:c8:51:69:e2:36:c2:a5:0a:a1:95:78:18:06:
6e:cd:ee:35:24:b8:18:5a:e3:d3:54:48:9b:63:68:
cf:78:66:5b:7f:f9:5f:f4:4e:ba:4a:14:87:df:7f:
64:a3:1c:1a:9f:14:bf:d3:6c:7c:4d:34:40:2a:19:
b6:a8:7a:e4:6d:fa:06:a6:94:24:cd:cd:7b:01:65:
57:da:f7:86:5d:90:40:44:cf:80:96:48:1d:b9:a9:
53:d5:8c:9a:16:9b:c5:e0:5c:e0:6c:11:20:63:37:
ec:fe:a7:1e:8c:94:4d:29:2f:06:83:d3:60:49:a0:
11:9a:5b:0b:c7:a2:5e:84:df:12:d3:a5:a3:4a:98:
2b:4a:08:ea:b5:5f:77:d1:00:a7:da:7c:d4:1d:43:
84:ad:0f:42:bd:54:6b:c3:58:63:ee:11:ea:56:3a:
d8:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:A2:1A:59:89:E4:EE:5B:04:E7:B7:5F:CF:81:CA:9F:D3:16:23:D6
X509v3 Authority Key Identifier:
keyid:EE:3B:E7:68:D2:86:68:F4:90:AF:B7:4E:9A:EF:E4:1E:03:49:5D:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jvnaNKGaPSQr7dOmu_kHgNJXXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7474e1-4d65-43b4-8bb1-feef105f0a77/1/YaIaWYnk7lsE57dfz4HKn9MWI9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7474e1-4d65-43b4-8bb1-feef105f0a77/1/7jvnaNKGaPSQr7dOmu_kHgNJXXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.19.224.0/22
185.243.16.0/22
Signature Algorithm: sha256WithRSAEncryption
68:43:77:0b:46:62:58:fc:25:ae:9e:bc:b7:93:2f:b3:9b:bc:
9e:f9:0e:11:62:a5:02:5a:7a:e8:a4:df:85:d0:ea:c9:4c:e8:
ea:a0:d4:69:c9:2b:0e:b4:62:0f:7e:9f:0f:76:d0:ee:d0:90:
8f:75:e0:de:37:a5:d0:4f:5e:ee:d3:3e:da:35:cb:b8:42:96:
cf:20:03:00:50:5e:81:f9:fc:df:91:14:40:94:eb:e7:9f:c9:
a4:82:50:b6:1c:92:fd:c4:e6:dc:10:24:5c:70:b1:37:c2:5f:
9b:b3:1b:cc:16:d1:ac:c4:96:78:4f:37:79:3b:26:6a:c2:37:
90:88:36:18:2c:ba:c4:14:3c:8a:3e:61:d1:c3:c8:00:44:ea:
b1:25:87:c3:10:d6:ee:ff:76:88:1f:5b:0a:27:67:06:22:99:
98:ba:70:2b:33:49:33:c0:69:ae:e1:d9:6c:da:3d:ed:98:18:
ad:71:a8:ab:27:7c:0e:06:8a:ae:bf:57:60:55:f7:96:df:50:
fa:40:6f:ce:99:80:25:e4:d4:2b:67:7a:f2:9c:3e:3d:c1:cc:
7d:b1:9c:2e:ac:e0:d6:62:d9:6f:c7:1b:15:07:fa:b6:10:b8:
36:86:31:d2:05:07:bd:e8:2a:80:e3:95:66:5f:fb:33:4b:61:
6d:61:ff:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:29 2024 by rpki-client on console-fra.rpki-client.org