Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/YVkWfGlSCY79GD4el1q58-vNrsE.roa
File: YVkWfGlSCY79GD4el1q58-vNrsE.roa (raw, json)
Hash identifier: CKPAwn88zDQLN734PTUc5fLgYh0D1ttZCw/EppMIKww=
Subject key identifier: 61:59:16:7C:69:52:09:8E:FD:18:3E:1E:97:5A:B9:F3:EB:CD:AE:C1
Certificate issuer: /CN=abbad3de831da94222c1add104caf4c3247689ac
Certificate serial: 17007E93
Authority key identifier: AB:BA:D3:DE:83:1D:A9:42:22:C1:AD:D1:04:CA:F4:C3:24:76:89:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q7rT3oMdqUIiwa3RBMr0wyR2iaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/YVkWfGlSCY79GD4el1q58-vNrsE.roa
Signing time: Mon 25 Apr 2022 15:06:22 +0000
ROA not before: Mon 25 Apr 2022 15:06:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 212.68.171.0/24 maxlen: 24
212.68.172.0/24 maxlen: 24
212.68.170.0/24 maxlen: 24
212.68.168.0/24 maxlen: 24
212.68.169.0/24 maxlen: 24
212.68.173.0/24 maxlen: 24
212.68.174.0/24 maxlen: 24
212.68.178.0/24 maxlen: 24
212.68.179.0/24 maxlen: 24
212.68.177.0/24 maxlen: 24
212.68.175.0/24 maxlen: 24
212.68.176.0/24 maxlen: 24
212.68.180.0/24 maxlen: 24
212.68.181.0/24 maxlen: 24
212.68.183.0/24 maxlen: 24
212.68.182.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 385908371 (0x17007e93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abbad3de831da94222c1add104caf4c3247689ac
Validity
Not Before: Apr 25 15:06:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6159167c6952098efd183e1e975ab9f3ebcdaec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:50:99:99:1c:d6:00:a5:01:6e:32:26:cf:73:
f6:36:cd:39:64:6c:b0:7e:d6:15:a4:16:fd:69:0e:
ef:e2:9c:32:b1:c4:df:bc:74:93:ce:63:9b:73:48:
f5:64:c4:31:fd:5a:53:85:c0:89:a6:a7:c1:30:09:
73:ef:41:a1:01:8d:80:d4:2e:91:f6:c2:76:2b:38:
e5:62:75:19:e7:c2:17:67:c4:10:5d:8d:1b:7b:27:
0d:e7:9a:8a:8a:d9:79:45:7b:43:30:8c:dd:b0:c0:
5f:a3:3e:bb:48:3d:00:ed:b6:4f:ee:5a:99:2d:c2:
d3:cd:8a:a9:33:b9:e5:b6:80:1b:b9:6b:8d:e2:4b:
74:67:38:83:9e:ec:d0:f1:1b:b4:10:20:f1:a0:c1:
ea:8c:65:9a:80:5b:23:10:6e:13:16:57:be:a6:ef:
d8:55:f2:38:20:a1:03:73:ea:43:97:fb:b8:b9:7b:
1d:1d:07:e0:4a:6a:c6:c0:cd:5a:11:b3:b2:1b:12:
04:41:d6:ad:8f:fc:78:6a:fc:8c:7e:9b:a2:6c:00:
13:68:e9:14:8b:ae:31:58:11:c1:15:59:f3:92:8e:
40:39:2c:ac:c1:3d:b6:b0:ac:ec:a9:85:1f:e3:2a:
b7:2f:a9:7c:5a:49:2a:34:3a:0e:f2:53:ef:9b:f8:
55:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:59:16:7C:69:52:09:8E:FD:18:3E:1E:97:5A:B9:F3:EB:CD:AE:C1
X509v3 Authority Key Identifier:
keyid:AB:BA:D3:DE:83:1D:A9:42:22:C1:AD:D1:04:CA:F4:C3:24:76:89:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q7rT3oMdqUIiwa3RBMr0wyR2iaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/YVkWfGlSCY79GD4el1q58-vNrsE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.68.168.0-212.68.183.255
Signature Algorithm: sha256WithRSAEncryption
64:43:d3:c0:37:ed:ee:d0:25:5e:43:5a:86:e5:47:99:e7:15:
6e:eb:ac:51:ee:0a:74:07:c0:a2:26:16:fa:5f:3e:fb:9e:2e:
8e:77:d0:0a:10:2a:24:a6:f9:84:9e:5b:71:73:f5:27:f7:83:
16:73:d4:5e:1c:8c:a0:a4:37:c3:46:51:82:ea:14:94:44:e7:
04:d7:7f:4b:4a:de:1b:59:e2:58:36:8a:e6:7e:36:77:58:b1:
e7:74:fb:62:cd:a3:df:94:66:c2:73:a0:a8:2c:6b:e0:28:ba:
ed:b5:76:9c:2a:52:55:11:af:8c:30:c9:85:d9:98:78:1e:01:
6c:15:72:70:d2:e9:c0:ac:a5:27:bf:56:8b:63:ce:9b:35:28:
80:b6:85:d2:fd:6e:41:4c:fe:5e:97:f3:f7:33:d0:4e:a2:3d:
87:14:f1:24:a3:39:a8:2e:d4:ef:7e:ec:c9:86:d7:20:cc:91:
db:e7:66:c6:dd:1a:9a:3f:3f:27:fb:a2:f8:ef:77:b0:96:e9:
4a:f8:04:ec:b2:d7:b1:fe:73:d8:53:b2:c2:9f:6d:20:66:64:
5c:88:f0:1a:f9:ad:6e:2d:87:d7:58:0e:e9:bd:5b:a1:4f:c4:
fc:b2:0e:62:8c:f7:32:22:de:51:1c:a9:ed:ab:5c:0d:3b:25:
64:92:17:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:49 2024 by rpki-client on console-fra.rpki-client.org