Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/5f5f6b-35e4-4391-9519-b97d336ea2f5/1/YZEDKBztH-pAQiWRIpidDaVBVX4.roa
File: YZEDKBztH-pAQiWRIpidDaVBVX4.roa (raw, json)
Hash identifier: Que/xuPzA2P9b9zpJKxn9HJVOwJwpyZIvzq7SF3arMc=
Subject key identifier: 61:91:03:28:1C:ED:1F:EA:40:42:25:91:22:98:9D:0D:A5:41:55:7E
Certificate issuer: /CN=e992a035bffc5a41412c497c1285d1838234ffb0
Certificate serial: 34D5E5EE
Authority key identifier: E9:92:A0:35:BF:FC:5A:41:41:2C:49:7C:12:85:D1:83:82:34:FF:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ZKgNb_8WkFBLEl8EoXRg4I0_7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/5f5f6b-35e4-4391-9519-b97d336ea2f5/1/YZEDKBztH-pAQiWRIpidDaVBVX4.roa
Signing time: Sat 01 Jan 2022 15:01:32 +0000
ROA not before: Sat 01 Jan 2022 15:01:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15830
IP address blocks: 217.114.96.0/20 maxlen: 24
185.76.16.0/22 maxlen: 24
77.222.64.0/19 maxlen: 24
87.249.96.0/19 maxlen: 24
2001:1540::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 886433262 (0x34d5e5ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e992a035bffc5a41412c497c1285d1838234ffb0
Validity
Not Before: Jan 1 15:01:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=619103281ced1fea4042259122989d0da541557e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3a:77:6f:b1:02:0d:27:87:04:64:a9:2a:cc:
84:c6:e0:62:4a:b4:96:52:23:43:6c:47:fa:c8:e9:
e5:66:45:75:47:7a:80:1f:d6:af:08:0e:d7:d6:c3:
f3:77:3e:16:d5:a1:87:5c:78:56:83:ee:6d:39:c5:
8d:a9:ea:05:95:52:5b:56:f5:7e:4e:b0:e7:f9:d7:
9c:20:a1:0b:e3:d3:18:b2:f9:de:78:89:c7:14:c4:
0c:54:b1:87:ca:14:cd:f6:23:70:e3:1b:dd:a9:96:
17:34:c8:51:76:1c:96:45:a7:2b:99:da:41:29:6a:
ce:68:b1:bb:c4:74:88:3a:b4:fe:73:31:58:48:13:
70:94:29:23:6e:aa:fb:80:3d:fc:b5:1b:9d:7e:a2:
fd:a2:25:aa:26:b8:1b:3b:35:41:46:4a:26:b1:c1:
02:0f:16:b8:ad:fe:f4:ed:7a:40:b8:6c:79:48:ca:
dd:ec:1a:c6:ed:50:0b:f1:7b:ee:f5:23:7b:49:f3:
6e:6f:41:4b:38:0d:88:19:96:64:c8:3f:06:56:8d:
88:8e:be:ca:e0:44:ce:97:6c:93:48:b1:0e:ae:75:
08:ea:67:24:ca:38:bc:19:cf:1f:ae:7b:78:f2:30:
0a:92:e8:f5:9f:c7:60:c4:c7:45:f5:ba:29:44:99:
0a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:91:03:28:1C:ED:1F:EA:40:42:25:91:22:98:9D:0D:A5:41:55:7E
X509v3 Authority Key Identifier:
keyid:E9:92:A0:35:BF:FC:5A:41:41:2C:49:7C:12:85:D1:83:82:34:FF:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ZKgNb_8WkFBLEl8EoXRg4I0_7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5f5f6b-35e4-4391-9519-b97d336ea2f5/1/YZEDKBztH-pAQiWRIpidDaVBVX4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5f5f6b-35e4-4391-9519-b97d336ea2f5/1/6ZKgNb_8WkFBLEl8EoXRg4I0_7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.222.64.0/19
87.249.96.0/19
185.76.16.0/22
217.114.96.0/20
IPv6:
2001:1540::/32
Signature Algorithm: sha256WithRSAEncryption
8b:f7:a7:67:53:55:8b:9e:58:bd:66:87:d8:4e:3a:d6:41:99:
92:ac:64:9e:88:38:0f:29:a8:ce:f1:ed:e1:3f:e0:b7:d9:43:
78:c9:a5:13:4a:6f:42:8d:98:1a:98:47:41:c8:67:07:57:f3:
ca:65:d6:c7:66:f7:12:4f:55:32:bf:bc:4a:fb:e3:3d:52:1c:
ea:e3:ff:7a:12:57:b4:6e:26:14:ce:dd:bc:16:71:b0:5d:eb:
f5:88:a3:e1:95:1e:ef:04:96:c3:22:95:32:25:5e:67:96:fd:
5e:e4:6d:ec:95:d6:ef:4b:c1:1c:13:3a:25:ce:a9:85:29:a9:
63:72:3a:7c:3c:7a:da:aa:02:9f:11:14:bc:98:b2:ff:bd:ba:
ef:36:ec:68:90:c6:4e:3e:86:04:43:ec:b1:67:7f:2f:b4:bb:
34:10:e7:55:ad:f8:a5:19:9c:05:bc:f6:32:9b:ec:fa:15:21:
36:d4:7d:b3:5b:2d:ed:27:4c:72:79:c2:1c:d8:fb:bf:b9:1b:
63:5f:73:33:84:cc:d7:a5:d7:9b:ef:ff:6b:53:25:0f:f9:b2:
fb:09:44:86:84:ca:31:53:00:da:08:5c:19:42:81:fc:92:92:
bb:87:02:f8:4f:2c:75:1a:1c:1e:4d:81:06:e0:f3:f8:8f:0d:
91:75:38:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:33 2024 by rpki-client on console-fra.rpki-client.org