Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/yo-SmwaKKkCzqzoPRGlVuAE5Sys.roa
File: yo-SmwaKKkCzqzoPRGlVuAE5Sys.roa (raw, json)
Hash identifier: sMsGNbBJLRiERV8ci+sFN2zBet9fG8nVXFEmD+N0DjI=
Subject key identifier: CA:8F:92:9B:06:8A:2A:40:B3:AB:3A:0F:44:69:55:B8:01:39:4B:2B
Certificate issuer: /CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692
Certificate serial: 06BFFF6B
Authority key identifier: 87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/yo-SmwaKKkCzqzoPRGlVuAE5Sys.roa
Signing time: Sat 01 Jan 2022 12:57:37 +0000
ROA not before: Sat 01 Jan 2022 12:57:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34535
IP address blocks: 193.0.229.0/24 maxlen: 24
193.0.227.0/24 maxlen: 24
193.0.230.0/24 maxlen: 24
2a0f:cdc0::/32 maxlen: 32
2a0f:cdc1::/32 maxlen: 32
2a0f:cdc2::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113246059 (0x6bfff6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692
Validity
Not Before: Jan 1 12:57:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ca8f929b068a2a40b3ab3a0f446955b801394b2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:2a:bc:83:7c:66:db:06:99:d9:03:9a:64:3a:
14:67:a7:75:ef:8e:78:2e:01:de:d9:e5:aa:68:e3:
57:76:f6:e5:d3:e0:e0:ff:e9:8e:fe:8c:85:1b:aa:
63:f7:80:36:15:bb:84:78:1b:5b:65:71:3e:4a:3b:
7d:6f:7c:23:75:fc:a7:ae:38:01:71:d1:41:20:0d:
2c:85:85:fa:27:2f:91:d6:83:9f:c0:15:38:4e:dd:
34:82:84:07:bc:2f:96:ae:e4:68:7e:11:b8:5c:bd:
31:93:dc:45:e7:14:7e:86:c0:24:aa:ee:ff:22:25:
28:b3:16:49:58:47:5c:d2:a4:3b:6b:3c:de:97:20:
60:9c:ff:3c:a7:be:b4:bf:10:2d:3c:cd:f9:7b:39:
e7:63:07:fc:0c:7f:11:87:01:2d:91:dc:f0:54:54:
58:54:a4:32:d1:50:21:28:af:01:0a:0d:dd:40:60:
06:b1:2f:96:91:dd:61:15:ab:60:02:35:4f:44:91:
3d:bb:4c:51:59:15:2e:6a:44:b3:91:f6:e8:12:0d:
2a:97:c6:44:06:ee:96:2f:79:27:8b:63:1e:78:e4:
80:7f:75:55:98:48:75:c2:7e:31:54:dc:46:1b:a2:
de:b0:c6:59:25:50:80:15:f5:1c:9a:03:db:e3:18:
d7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:8F:92:9B:06:8A:2A:40:B3:AB:3A:0F:44:69:55:B8:01:39:4B:2B
X509v3 Authority Key Identifier:
keyid:87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/yo-SmwaKKkCzqzoPRGlVuAE5Sys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.227.0/24
193.0.229.0-193.0.230.255
IPv6:
2a0f:cdc0::-2a0f:cdc2:0:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
94:05:e4:bc:47:c1:a3:db:37:ec:43:aa:09:42:ee:5f:ff:11:
a8:2f:a4:43:6d:26:7a:f2:9b:c1:b9:b2:28:6f:d1:6f:68:77:
56:2c:72:29:05:3f:bf:cf:d1:d3:7e:b0:cc:28:2b:d3:25:81:
fd:db:5d:b0:52:1f:38:0f:bd:b7:2f:f0:75:50:af:22:78:e9:
24:c1:4b:35:e6:0f:a6:4e:8d:2a:f6:8e:43:a6:52:90:e3:1b:
76:51:45:c3:b5:af:aa:e2:83:88:7f:de:23:ad:eb:af:b9:36:
05:00:5d:34:2c:e4:bd:e3:98:7f:2e:9e:61:92:cd:87:5e:b7:
87:d3:42:c9:8c:4f:6d:66:65:01:df:dd:4b:c5:af:7d:ab:0a:
d1:98:2b:25:b8:33:5e:22:4c:6c:51:9e:8d:7f:d6:1c:24:da:
9e:f2:16:e7:19:5e:e3:4d:47:86:5c:ce:60:34:14:b6:a7:ef:
63:fe:c2:cd:f8:30:fd:61:01:ff:ee:5c:81:04:9a:8c:6b:ed:
fe:39:9e:0f:7c:15:4c:da:32:9a:9a:2e:bd:34:d0:68:26:a9:
33:ab:a8:84:f0:dd:4b:91:25:f6:92:ca:9d:06:d5:a8:c8:6d:
3b:92:cd:e1:72:03:d9:d5:67:40:2e:3e:a2:4c:9f:43:8e:e8:
83:72:41:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:53 2024 by rpki-client on console-ams.rpki-client.org