Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/yzfIVdSAjWnsetGxinD4N-D_03Q.roa
File: yzfIVdSAjWnsetGxinD4N-D_03Q.roa (raw, json)
Hash identifier: mQLh7k/qk/cSUc5peOLBL4x43kI5PxIpe7O2JqkeNQ4=
Subject key identifier: CB:37:C8:55:D4:80:8D:69:EC:7A:D1:B1:8A:70:F8:37:E0:FF:D3:74
Certificate issuer: /CN=1c97b4823d3c9e121ec649821e00f0a79aeb9b8d
Certificate serial: 0182CA7D260D681927DC28EE17D2BAFEC969
Authority key identifier: 1C:97:B4:82:3D:3C:9E:12:1E:C6:49:82:1E:00:F0:A7:9A:EB:9B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJe0gj08nhIexkmCHgDwp5rrm40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/yzfIVdSAjWnsetGxinD4N-D_03Q.roa
Signing time: Tue 23 Aug 2022 11:36:15 +0000
ROA not before: Tue 23 Aug 2022 11:36:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43608
IP address blocks: 78.24.104.0/21 maxlen: 21
185.61.57.0/24 maxlen: 24
185.61.56.0/22 maxlen: 24
2a00:9500::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ca:7d:26:0d:68:19:27:dc:28:ee:17:d2:ba:fe:c9:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c97b4823d3c9e121ec649821e00f0a79aeb9b8d
Validity
Not Before: Aug 23 11:36:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cb37c855d4808d69ec7ad1b18a70f837e0ffd374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:47:de:ff:b6:6e:a7:c1:61:6f:22:aa:5b:84:
f9:68:bb:b5:06:6a:cb:57:4d:c6:d9:d2:87:d4:01:
cd:ea:cd:80:76:1b:83:53:a4:be:76:3f:ba:ba:1c:
15:02:50:e4:32:b1:3a:2c:53:81:31:56:b7:7e:c2:
b7:b5:92:08:f2:d1:d3:8c:3b:23:4f:3f:57:48:09:
73:c0:e7:ee:db:b7:26:87:af:27:ac:12:59:40:a8:
d8:91:d4:23:46:dd:4e:e7:cc:3f:65:aa:88:3f:29:
a0:44:75:3c:38:97:6c:f4:b9:fa:51:0c:87:16:13:
c5:09:9a:cc:9b:4f:ca:e8:25:be:34:e2:66:76:f5:
9b:44:40:8a:d2:43:aa:db:18:da:b1:1b:67:40:e0:
70:ea:e1:4f:70:9c:2c:64:a3:61:b6:32:c5:63:e4:
ad:4e:58:98:5a:29:b0:98:32:cd:e1:61:02:37:50:
37:c3:b1:7e:93:ee:1d:62:a1:35:27:ce:53:a1:82:
3f:b6:bb:7a:4a:63:22:3d:5f:63:ce:1a:43:3f:2f:
fb:fb:50:05:98:36:c3:2a:c1:59:7f:1a:f6:a8:3b:
54:8b:90:90:bd:e1:b0:f7:f3:f8:c7:ae:0b:05:11:
a4:9f:8b:ed:e7:04:a1:fd:23:0e:67:fa:bc:b5:25:
67:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:37:C8:55:D4:80:8D:69:EC:7A:D1:B1:8A:70:F8:37:E0:FF:D3:74
X509v3 Authority Key Identifier:
keyid:1C:97:B4:82:3D:3C:9E:12:1E:C6:49:82:1E:00:F0:A7:9A:EB:9B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJe0gj08nhIexkmCHgDwp5rrm40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/yzfIVdSAjWnsetGxinD4N-D_03Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.24.104.0/21
185.61.56.0/22
IPv6:
2a00:9500::/32
Signature Algorithm: sha256WithRSAEncryption
55:ad:ef:35:5f:b3:93:93:29:e8:9a:4e:f7:e7:19:22:92:d2:
47:11:75:2e:04:d4:69:88:87:1c:7a:5b:fd:90:ec:cd:7d:0f:
a5:5e:fc:12:c1:1b:76:55:0f:c9:b0:4e:1b:12:6a:e7:14:4a:
b8:a0:8e:c9:3f:58:a8:d9:12:d1:6e:29:96:74:cf:7f:a9:9f:
db:49:50:70:5d:e5:4d:78:18:f7:e0:7e:4b:c3:60:4e:cb:b0:
66:dd:3b:8b:06:f3:57:b3:75:74:e3:88:aa:38:8f:f3:a2:81:
a0:45:fc:cd:fa:ca:e3:5a:a0:dd:78:b0:fc:ad:f6:bf:78:04:
20:bb:7b:2b:52:fa:78:2c:d4:54:5c:8e:82:24:7f:77:e0:36:
b7:2e:6b:2e:c2:a5:58:4e:e3:ed:81:fb:29:93:f2:45:0c:36:
f9:48:7a:09:1d:be:47:b3:b7:7c:e8:de:e7:38:1f:04:4d:e7:
00:e3:bd:69:46:c7:0d:d2:50:17:7b:d5:8c:bb:c3:da:30:83:
92:21:4f:3e:d9:97:a0:b5:7a:2b:b7:86:9f:0b:9d:13:56:1e:
7e:d9:84:4c:d2:5d:80:5e:94:bb:60:e1:87:04:fe:82:6a:b6:
a5:50:43:6c:a1:90:b0:4d:17:be:38:c4:04:a0:d2:48:6b:b5:
7b:ee:55:aa
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYLKfSYNaBkn3CjuF9K6/slpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTdiNDgyM2QzYzllMTIxZWM2NDk4MjFlMDBmMGE3OWFl
YjliOGQwHhcNMjIwODIzMTEzNjE1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYjM3Yzg1NWQ0ODA4ZDY5ZWM3YWQxYjE4YTcwZjgzN2UwZmZkMzc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0fe/7Zup8FhbyKqW4T5aLu1BmrL
V03G2dKH1AHN6s2AdhuDU6S+dj+6uhwVAlDkMrE6LFOBMVa3fsK3tZII8tHTjDsj
Tz9XSAlzwOfu27cmh68nrBJZQKjYkdQjRt1O58w/ZaqIPymgRHU8OJds9Ln6UQyH
FhPFCZrMm0/K6CW+NOJmdvWbRECK0kOq2xjasRtnQOBw6uFPcJwsZKNhtjLFY+St
TliYWimwmDLN4WECN1A3w7F+k+4dYqE1J85ToYI/trt6SmMiPV9jzhpDPy/7+1AF
mDbDKsFZfxr2qDtUi5CQveGw9/P4x64LBRGkn4vt5wSh/SMOZ/q8tSVn7QIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFMs3yFXUgI1p7HrRsYpw+Dfg/9N0MB8GA1UdIwQY
MBaAFByXtII9PJ4SHsZJgh4A8Kea65uNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEplMGdqMDhuaElleGttQ0hnRHdwNXJybTQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8xNTY0MWEtNjYxNC00NWU0LWEyYTkt
OWI5Y2Q4OTY1OWUwLzEveXpmSVZkU0FqV25zZXRHeGluRDROLURfMDNRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS8xNTY0MWEtNjYxNC00NWU0LWEyYTktOWI5Y2Q4OTY1OWUw
LzEvSEplMGdqMDhuaElleGttQ0hnRHdwNXJybTQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDThhoAwQC
uT04MA0EAgACMAcDBQAqAJUAMA0GCSqGSIb3DQEBCwUAA4IBAQBVre81X7OTkyno
mk735xkiktJHEXUuBNRpiIccelv9kOzNfQ+lXvwSwRt2VQ/JsE4bEmrnFEq4oI7J
P1io2RLRbimWdM9/qZ/bSVBwXeVNeBj34H5Lw2BOy7Bm3TuLBvNXs3V044iqOI/z
ooGgRfzN+srjWqDdeLD8rfa/eAQgu3srUvp4LNRUXI6CJH934Da3LmsuwqVYTuPt
gfspk/JFDDb5SHoJHb5Hs7d86N7nOB8ETecA471pRscN0lAXe9WMu8PaMIOSIU8+
2ZegtXort4afC50TVh5+2YRM0l2AXpS7YOGHBP6CaralUENsoZCwTRe+OMQEoNJI
a7V77lWq
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:39 2024 by rpki-client on console-fra.rpki-client.org