Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/Ybu3Jvb4CfO3gXLTGKrTriF5IOQ.roa
File: Ybu3Jvb4CfO3gXLTGKrTriF5IOQ.roa (raw, json)
Hash identifier: QCqzR3XYgLCMSZwjyR6iY9kh7tRum2oZ/x805BEAEyM=
Subject key identifier: 61:BB:B7:26:F6:F8:09:F3:B7:81:72:D3:18:AA:D3:AE:21:79:20:E4
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 0F80F237
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/Ybu3Jvb4CfO3gXLTGKrTriF5IOQ.roa
Signing time: Sat 01 Jan 2022 08:05:03 +0000
ROA not before: Sat 01 Jan 2022 08:05:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56958
IP address blocks: 194.226.137.0/24 maxlen: 24
194.226.34.0/23 maxlen: 24
195.208.220.0/23 maxlen: 24
195.19.10.0/23 maxlen: 24
62.76.96.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 260108855 (0xf80f237)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Jan 1 08:05:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=61bbb726f6f809f3b78172d318aad3ae217920e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:10:2d:4e:70:ec:72:52:05:92:f1:37:48:cc:
52:06:3c:b9:23:de:e4:b9:74:ed:d1:96:82:f8:12:
5c:f5:03:11:62:f2:e7:e2:7e:07:5d:db:1b:3e:de:
3e:d1:e9:0c:99:a4:36:9b:a5:26:40:ba:12:1d:15:
85:72:1e:d5:92:42:12:b6:22:5f:ea:17:9d:72:86:
69:76:cf:0b:c6:98:bf:10:85:cd:5c:f3:c1:a1:33:
a2:b5:52:95:26:2b:60:b6:91:13:01:bf:85:d0:72:
61:6b:5c:3d:19:03:c6:8a:bf:c7:67:14:ad:53:42:
9f:24:41:ad:fa:08:c7:27:22:32:74:e5:82:8e:f6:
f4:3a:78:a2:c9:7e:7d:a6:28:42:bb:f6:27:8b:14:
26:37:e4:bb:7d:95:a3:a5:45:9a:0a:a2:8c:08:02:
fe:67:33:4b:ed:4e:51:8e:32:eb:b9:51:04:84:b0:
51:e6:f8:c5:44:8a:3c:0a:6b:aa:7e:48:c2:d9:2d:
2e:31:8b:42:2f:db:a9:01:b2:47:e3:fd:64:9c:66:
2b:a4:f0:55:f0:62:6c:f2:6d:6f:67:f6:2a:b2:b5:
c2:94:bd:5b:4f:92:84:78:91:e6:01:e5:7a:af:a7:
c1:ba:2f:97:ae:e5:e9:12:91:da:2b:86:05:0b:c6:
36:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:BB:B7:26:F6:F8:09:F3:B7:81:72:D3:18:AA:D3:AE:21:79:20:E4
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/Ybu3Jvb4CfO3gXLTGKrTriF5IOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.96.0/23
194.226.34.0/23
194.226.137.0/24
195.19.10.0/23
195.208.220.0/23
Signature Algorithm: sha256WithRSAEncryption
39:dd:bc:95:7c:c7:d7:6d:46:17:81:14:ff:19:d6:70:ca:47:
ae:17:fe:71:62:29:62:8b:f1:a2:e9:34:23:59:f9:37:88:dd:
c5:7f:ff:1a:8f:eb:84:b0:55:30:f3:73:69:bd:eb:cc:9a:02:
22:7a:93:8d:01:7d:97:16:ae:97:49:b1:f5:39:74:cc:77:cb:
d5:6a:30:f2:a8:35:37:53:1d:a8:b3:be:3d:2b:b6:2e:9d:34:
be:5f:a4:5f:5d:b5:d6:c2:91:44:b5:c6:bb:b2:4d:59:da:4d:
4b:c8:a3:61:d3:e3:4c:b4:83:b7:ad:6a:b8:80:b3:d2:a5:4c:
33:36:a2:e7:ca:cf:d3:d1:3d:52:46:e9:f3:3c:ef:40:a1:bf:
e8:8a:f1:61:7e:4b:b3:fb:be:d2:69:6b:2b:a2:c2:4e:4a:ff:
50:c6:5a:76:cf:35:34:43:d9:c9:dc:d3:3d:a2:1b:40:f3:4d:
38:35:b2:33:1c:8a:67:5c:b0:7d:47:1b:b2:23:e9:0e:2d:6d:
da:5d:c9:45:5e:3b:05:d8:de:94:d0:6a:4a:82:85:03:92:a8:
c2:4f:8f:9c:c9:49:12:ae:49:16:b8:4d:a7:71:d8:aa:78:d6:
a1:08:49:ac:28:1a:98:c0:62:25:18:0d:57:a9:da:23:b7:fd:
30:9e:6e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:58 2024 by rpki-client on console-ams.rpki-client.org