Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/5f5f6b-35e4-4391-9519-b97d336ea2f5/1/yBDk72IY2hU7Daha6g1z6Z8mK5I.roa
File: yBDk72IY2hU7Daha6g1z6Z8mK5I.roa (raw, json)
Hash identifier: RVocY2oPiqAwFHR9btegcty4YHVEFGOY+KgkoTDTlYs=
Subject key identifier: C8:10:E4:EF:62:18:DA:15:3B:0D:A8:5A:EA:0D:73:E9:9F:26:2B:92
Certificate issuer: /CN=e992a035bffc5a41412c497c1285d1838234ffb0
Certificate serial: 34D794B4
Authority key identifier: E9:92:A0:35:BF:FC:5A:41:41:2C:49:7C:12:85:D1:83:82:34:FF:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ZKgNb_8WkFBLEl8EoXRg4I0_7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/5f5f6b-35e4-4391-9519-b97d336ea2f5/1/yBDk72IY2hU7Daha6g1z6Z8mK5I.roa
Signing time: Sat 01 Jan 2022 15:01:32 +0000
ROA not before: Sat 01 Jan 2022 15:01:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47886
IP address blocks: 217.114.96.0/20 maxlen: 24
185.76.16.0/22 maxlen: 24
77.222.64.0/19 maxlen: 24
87.249.96.0/19 maxlen: 24
2001:1540::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 886543540 (0x34d794b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e992a035bffc5a41412c497c1285d1838234ffb0
Validity
Not Before: Jan 1 15:01:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c810e4ef6218da153b0da85aea0d73e99f262b92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ba:dd:5f:5b:4c:6e:64:e2:2e:86:c0:8c:65:
b3:f9:52:d3:83:bf:81:96:bd:95:b2:9c:dd:b5:8e:
82:cf:44:d6:e0:5a:21:62:20:ec:6b:e5:96:d7:3a:
97:9d:ab:d9:92:82:96:1f:37:a4:7e:83:d9:71:7e:
22:60:13:fe:0d:89:03:99:79:05:8c:37:4c:ab:ce:
fd:90:60:60:21:ac:50:16:3f:52:34:e3:7f:98:f9:
62:15:04:af:30:57:42:ea:a5:e2:c7:aa:97:3a:c5:
1d:09:39:a6:30:48:40:14:20:e1:cf:21:4e:b7:3e:
a6:c8:e0:77:db:24:39:93:cc:f6:f6:af:52:04:f8:
9a:40:88:cd:00:46:eb:a9:48:af:1e:32:3f:b0:1e:
27:38:22:33:e1:24:d2:6b:4d:49:be:d5:39:a1:4d:
93:79:11:a0:5a:e3:36:aa:a9:15:63:69:ff:54:14:
ce:15:b0:57:1f:f3:90:85:51:36:a4:46:16:8f:72:
8d:d3:35:a5:08:ce:fa:16:83:74:72:c8:07:9c:76:
b7:b4:a5:9a:81:d9:fd:3d:0d:51:ce:b3:51:c2:c7:
35:3d:f1:6a:c0:b9:0d:df:90:db:0c:9e:79:8c:ff:
96:e0:4f:04:ca:aa:68:1d:a5:2e:81:7e:46:39:7a:
88:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:10:E4:EF:62:18:DA:15:3B:0D:A8:5A:EA:0D:73:E9:9F:26:2B:92
X509v3 Authority Key Identifier:
keyid:E9:92:A0:35:BF:FC:5A:41:41:2C:49:7C:12:85:D1:83:82:34:FF:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ZKgNb_8WkFBLEl8EoXRg4I0_7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5f5f6b-35e4-4391-9519-b97d336ea2f5/1/yBDk72IY2hU7Daha6g1z6Z8mK5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5f5f6b-35e4-4391-9519-b97d336ea2f5/1/6ZKgNb_8WkFBLEl8EoXRg4I0_7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.222.64.0/19
87.249.96.0/19
185.76.16.0/22
217.114.96.0/20
IPv6:
2001:1540::/32
Signature Algorithm: sha256WithRSAEncryption
5a:45:27:71:39:23:8c:b0:66:04:1d:3c:00:4a:c1:4e:a7:33:
48:93:85:29:96:77:e4:a9:e8:1c:94:f1:cd:53:fa:c8:b4:29:
42:88:b1:5f:8b:20:f5:00:c4:ed:78:cf:52:ea:c1:8c:95:2f:
3f:59:7e:f5:8e:df:50:a4:97:0c:3b:f5:61:09:73:1d:6d:7b:
0d:eb:c4:bc:a8:29:5f:b0:5c:c1:b1:e2:3d:28:39:31:4a:3d:
8f:55:44:07:72:56:19:a6:2d:10:f5:91:3b:5d:25:50:78:47:
60:66:41:05:47:1f:31:4d:66:01:85:21:81:ea:66:77:00:15:
17:a7:29:c2:a0:95:f5:c5:5f:4a:e2:ca:54:61:95:e4:c0:54:
a5:e5:00:58:cb:8d:db:5a:07:d2:7e:96:de:12:9d:31:79:93:
90:54:4d:24:4f:66:eb:4c:3e:f8:72:19:ba:fc:32:f1:f4:81:
23:32:1d:a6:48:0d:ad:b7:84:9d:28:07:63:b1:38:e6:b3:ca:
e0:3d:ef:e1:5d:a4:5b:c2:5e:7b:dd:48:c4:c3:08:ea:4a:3a:
84:b8:1f:da:49:b0:bc:e3:70:48:55:91:34:a3:34:dc:2c:0b:
14:53:a1:e7:bb:04:1f:fc:c4:9a:bb:c7:4d:ca:31:84:ae:c1:
3a:b2:69:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:42 2024 by rpki-client on console-ams.rpki-client.org