Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/YmjCXXB_9RwzIoewS5IaxtSWuJE.roa
File: YmjCXXB_9RwzIoewS5IaxtSWuJE.roa (raw, json)
Hash identifier: Kizq1+t7CiKYo9ZAs9e5WtPxrZn8ivi+qIga2YKr7+w=
Subject key identifier: 62:68:C2:5D:70:7F:F5:1C:33:22:87:B0:4B:92:1A:C6:D4:96:B8:91
Certificate issuer: /CN=ae83f7879c2c74a11652b5e08af64aac90800b04
Certificate serial: 0A078931
Authority key identifier: AE:83:F7:87:9C:2C:74:A1:16:52:B5:E0:8A:F6:4A:AC:90:80:0B:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/roP3h5wsdKEWUrXgivZKrJCACwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/YmjCXXB_9RwzIoewS5IaxtSWuJE.roa
Signing time: Sat 01 Jan 2022 03:52:35 +0000
ROA not before: Sat 01 Jan 2022 03:52:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 786
IP address blocks: 136.206.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 168266033 (0xa078931)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae83f7879c2c74a11652b5e08af64aac90800b04
Validity
Not Before: Jan 1 03:52:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6268c25d707ff51c332287b04b921ac6d496b891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:04:f2:a8:2d:f6:aa:4b:dc:de:11:05:84:b0:
86:87:17:bd:9c:1d:e8:69:0f:60:76:60:2d:e6:43:
a5:65:22:86:e3:14:e0:25:d8:81:65:11:4c:c5:c7:
be:2c:e1:2b:e8:32:2d:34:cc:bc:8e:46:15:5e:9d:
84:32:a0:23:3a:a6:4d:50:4c:76:7b:73:d4:9e:28:
27:61:be:f0:fe:3d:30:3c:78:37:64:e3:4f:e5:46:
3e:a4:b0:9a:4d:d4:ae:7c:c3:07:33:d2:8f:09:a8:
2e:4f:eb:6c:f0:8d:c1:c5:4c:36:12:3b:d5:09:f8:
01:3d:a1:cb:c4:8d:49:29:d3:5e:94:a2:dd:cf:3b:
6c:eb:1d:26:4d:75:23:85:54:29:d8:36:53:fd:a4:
6c:84:c0:a9:fb:67:00:85:6b:23:6e:d4:38:68:1c:
14:3b:d3:b7:9b:9f:e4:27:27:71:32:92:c7:f0:15:
bb:1c:10:09:f2:b6:da:8a:f7:77:56:35:ac:f9:e8:
d0:1d:d3:2a:b5:35:69:94:d3:18:91:27:e9:c0:cc:
22:16:51:c4:ee:86:11:12:5d:89:16:ca:cf:99:2a:
88:12:ea:0f:9b:f3:5a:5b:f9:c6:e0:28:94:84:87:
cb:db:1f:cd:8e:9e:c1:56:c6:2f:8b:a9:da:4d:d2:
ef:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:68:C2:5D:70:7F:F5:1C:33:22:87:B0:4B:92:1A:C6:D4:96:B8:91
X509v3 Authority Key Identifier:
keyid:AE:83:F7:87:9C:2C:74:A1:16:52:B5:E0:8A:F6:4A:AC:90:80:0B:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/roP3h5wsdKEWUrXgivZKrJCACwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/YmjCXXB_9RwzIoewS5IaxtSWuJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.206.0.0/16
Signature Algorithm: sha256WithRSAEncryption
06:6f:15:07:ee:4a:b2:53:a5:02:90:44:21:b5:fa:3e:9e:b0:
c6:2e:ba:1e:71:f4:90:32:20:4a:c0:28:ef:29:1c:72:94:de:
c4:83:bc:40:3c:b0:03:98:c1:8a:2b:33:83:54:04:29:a0:7b:
28:4e:1a:91:a2:18:90:0e:33:51:e1:a8:f7:6a:32:64:5f:2e:
4f:52:71:f3:18:ff:f0:e1:6c:92:81:5f:30:64:d2:2a:d3:0b:
2d:ca:15:db:94:d7:ab:51:3f:cf:24:5a:4e:4d:e9:b7:85:8f:
6e:92:09:e0:c7:d4:65:90:db:0a:a3:da:85:b8:4f:2c:48:c7:
a6:92:e8:2e:0a:9a:05:62:8e:19:9b:89:85:9f:05:d1:b4:15:
6e:4a:08:34:68:2f:67:d3:47:a2:ca:96:3b:93:6f:c7:3f:92:
df:b6:72:fc:44:70:06:93:30:9a:de:3d:b3:f6:a4:77:db:de:
5e:a1:1c:77:d7:a6:41:3d:fe:3a:b4:8a:0c:da:10:20:38:ff:
c1:20:67:bc:cb:d0:c0:5b:d4:2a:48:f4:c6:77:fe:6d:8e:be:
72:7b:3f:9d:9b:7c:80:e1:e9:8b:e3:a7:3d:e3:5d:37:2d:41:
6a:0b:ab:35:7b:fd:69:f0:ad:ef:f2:1e:9a:82:e8:53:18:18:
5b:c5:8c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:54 2024 by rpki-client on console-ams.rpki-client.org