Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/90aa1e-0098-4fda-9829-a15ccf5b413e/1/YJ9JkBf6sg05ioLpeg-BZ6OCRQw.roa
File: YJ9JkBf6sg05ioLpeg-BZ6OCRQw.roa (raw, json)
Hash identifier: jtUgsLdQOTvcwjhB9J4/6bEDD8PCwbs4R+6RPV7ym1s=
Subject key identifier: 60:9F:49:90:17:FA:B2:0D:39:8A:82:E9:7A:0F:81:67:A3:82:45:0C
Certificate issuer: /CN=7242a13715fc5578cdc05aaaa68c6a413cdbc9f5
Certificate serial: 0183F9EB0A718F3E48E8ABE4417D1E886C35
Authority key identifier: 72:42:A1:37:15:FC:55:78:CD:C0:5A:AA:A6:8C:6A:41:3C:DB:C9:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckKhNxX8VXjNwFqqpoxqQTzbyfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/90aa1e-0098-4fda-9829-a15ccf5b413e/1/YJ9JkBf6sg05ioLpeg-BZ6OCRQw.roa
Signing time: Fri 21 Oct 2022 09:41:13 +0000
ROA not before: Fri 21 Oct 2022 09:41:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47568
IP address blocks: 94.100.36.0/23 maxlen: 23
94.100.32.0/23 maxlen: 23
185.122.24.0/23 maxlen: 23
185.122.27.0/24 maxlen: 24
185.122.26.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:f9:eb:0a:71:8f:3e:48:e8:ab:e4:41:7d:1e:88:6c:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7242a13715fc5578cdc05aaaa68c6a413cdbc9f5
Validity
Not Before: Oct 21 09:41:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=609f499017fab20d398a82e97a0f8167a382450c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ca:d0:b8:e4:a1:93:55:f3:1e:8c:16:79:28:
d2:ed:50:02:df:73:c6:64:ae:61:b3:a5:f9:34:0c:
44:83:46:4f:60:0a:8f:6a:92:a2:58:72:18:77:10:
70:c5:70:47:c5:24:8b:ef:c6:35:48:88:5a:7f:ea:
d6:e4:ff:65:80:c3:16:66:20:78:b6:5e:26:c7:06:
16:46:16:37:fb:e3:42:3d:a2:ad:8c:f1:3f:14:cd:
cf:cf:13:18:d0:6f:d8:2b:e4:91:1c:07:c6:a8:e6:
ff:26:a7:71:fd:3e:41:d2:fe:93:55:f7:d9:1f:1c:
39:c9:04:73:da:7a:84:a5:65:c5:06:85:42:0a:a0:
20:e2:41:b8:8c:e3:eb:2a:88:ec:37:6b:0c:8f:a7:
8a:4a:c5:00:5b:56:7e:83:e2:9b:cf:0a:1f:6a:b2:
e2:e0:14:0a:11:cd:aa:3f:90:04:ff:f4:75:9c:03:
aa:26:ba:d8:3a:d2:2e:e3:b2:9a:6f:0f:ad:92:6d:
05:70:bc:ac:f4:e5:6c:d2:e5:a6:0c:08:0e:fe:2a:
a8:aa:e9:ee:b9:1f:18:30:89:ee:ad:28:cc:5b:12:
21:50:f7:7f:3a:71:d8:f7:21:eb:81:51:91:84:19:
f8:25:c1:47:cf:b0:86:90:42:55:05:50:b8:d1:bd:
0a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:9F:49:90:17:FA:B2:0D:39:8A:82:E9:7A:0F:81:67:A3:82:45:0C
X509v3 Authority Key Identifier:
keyid:72:42:A1:37:15:FC:55:78:CD:C0:5A:AA:A6:8C:6A:41:3C:DB:C9:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckKhNxX8VXjNwFqqpoxqQTzbyfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/90aa1e-0098-4fda-9829-a15ccf5b413e/1/YJ9JkBf6sg05ioLpeg-BZ6OCRQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/90aa1e-0098-4fda-9829-a15ccf5b413e/1/ckKhNxX8VXjNwFqqpoxqQTzbyfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.100.32.0/23
94.100.36.0/23
185.122.24.0/22
Signature Algorithm: sha256WithRSAEncryption
98:10:c7:7b:42:e8:ac:6f:65:89:fd:d3:7e:e5:f5:ff:c6:0c:
ab:3b:35:cd:b9:e4:5e:c9:2a:06:0f:32:95:81:83:77:6a:a1:
c5:a6:26:df:9d:64:4d:c3:6b:ba:6f:f8:00:9b:e9:53:21:1e:
d8:08:43:49:31:d8:61:e9:3c:07:61:a2:23:6e:b3:65:4a:9d:
6e:df:5b:f5:ed:47:ba:8b:88:9f:8d:0a:6d:07:4e:d1:38:83:
99:56:aa:c4:4e:fd:47:69:94:a1:71:88:0c:17:98:bb:64:85:
6f:90:f8:80:24:db:c8:db:a6:19:c4:01:54:49:0f:f3:55:b4:
3d:86:6e:ad:ac:5a:ee:74:c6:01:61:f2:68:df:08:bf:a1:8d:
e0:03:1f:95:88:6f:93:3b:a1:02:a2:1f:c4:d9:a3:20:51:ad:
79:0f:9d:ce:0b:29:ea:9c:ce:56:d1:09:07:99:a1:c4:25:6c:
d8:dd:f1:15:70:28:a9:ba:22:11:50:21:cf:6c:04:2f:61:02:
49:be:79:46:94:a9:91:8d:cd:aa:75:f1:97:0f:4d:b5:77:78:
b5:f2:06:3c:9d:66:60:e2:d7:ae:4c:eb:51:40:fe:e7:ce:cf:
4f:0c:df:21:96:1b:0d:56:08:54:29:c2:71:af:3b:52:1c:fa:
bc:3e:41:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:02 2024 by rpki-client on console-fra.rpki-client.org