Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/ys0W84X_OEjtMtH2gZuGD38SC5E.roa
File: ys0W84X_OEjtMtH2gZuGD38SC5E.roa (raw, json)
Hash identifier: klRHS56VeQAz0IN1SowF7fIb44/vugOTqPX4CIoyXpg=
Subject key identifier: CA:CD:16:F3:85:FF:38:48:ED:32:D1:F6:81:9B:86:0F:7F:12:0B:91
Certificate issuer: /CN=845c58752f3336422ff0ee1726474591e7a41e5f
Certificate serial: 1937327E
Authority key identifier: 84:5C:58:75:2F:33:36:42:2F:F0:EE:17:26:47:45:91:E7:A4:1E:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFxYdS8zNkIv8O4XJkdFkeekHl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/ys0W84X_OEjtMtH2gZuGD38SC5E.roa
Signing time: Sat 01 Jan 2022 08:55:17 +0000
ROA not before: Sat 01 Jan 2022 08:55:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 5539
IP address blocks: 89.35.174.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 423047806 (0x1937327e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845c58752f3336422ff0ee1726474591e7a41e5f
Validity
Not Before: Jan 1 08:55:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cacd16f385ff3848ed32d1f6819b860f7f120b91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:45:49:26:b9:d7:b5:b5:e6:c5:af:29:ce:69:
04:e3:6b:22:43:2e:73:f8:c8:48:5d:74:dd:7d:54:
ca:01:0b:22:00:c1:37:ba:0e:a4:b5:2d:8d:e2:ad:
31:1d:e2:0e:dd:9c:52:01:9d:4f:6c:46:8f:10:3a:
e0:75:0c:55:d2:f1:99:ad:12:ff:14:90:ae:45:61:
55:57:f7:eb:6f:84:6a:ac:10:97:39:91:d4:06:7e:
fd:b6:f1:bf:be:0c:03:92:2f:a2:40:c7:65:fe:72:
c7:be:7b:5e:0d:28:67:de:45:3a:46:b0:72:ce:ca:
ad:29:ed:03:05:85:ec:7b:26:ba:97:cf:87:83:6c:
f9:46:6c:df:8f:a1:a2:53:bf:2e:4a:28:2f:dd:dd:
91:7f:76:78:46:a7:cb:9a:ed:34:fb:1a:55:80:dc:
df:6a:3e:22:72:64:68:8a:ea:54:18:1a:50:b7:0a:
83:34:cb:38:5d:18:d1:c1:71:55:b1:35:cc:21:fb:
b6:7d:c5:48:4c:a8:60:af:33:f4:ca:56:31:5b:bc:
75:45:29:e6:ff:0f:5a:fe:c3:39:93:2c:ef:3a:86:
92:39:68:18:00:29:d4:f2:a0:8b:e4:99:ae:7b:8b:
c0:f2:2c:ea:9d:b6:1d:74:a1:2b:56:cb:6b:59:9f:
47:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:CD:16:F3:85:FF:38:48:ED:32:D1:F6:81:9B:86:0F:7F:12:0B:91
X509v3 Authority Key Identifier:
keyid:84:5C:58:75:2F:33:36:42:2F:F0:EE:17:26:47:45:91:E7:A4:1E:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFxYdS8zNkIv8O4XJkdFkeekHl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/ys0W84X_OEjtMtH2gZuGD38SC5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.174.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:40:46:32:7d:63:4d:e3:d2:21:49:0b:98:6e:3b:c0:99:12:
0e:0e:ad:df:a8:2b:8a:01:7e:8a:83:30:7f:a4:0d:b4:19:25:
16:a8:ea:e1:c7:24:94:e6:7f:59:e2:10:59:a9:42:f2:5b:02:
7b:cf:53:0a:92:cd:79:17:8c:b4:04:d5:fe:1b:58:e4:af:e5:
88:8b:b3:a1:af:86:4d:e3:c5:30:c0:cc:07:04:5b:f6:50:82:
f6:19:d8:83:69:ef:08:bd:f4:d2:2c:cc:79:e5:f9:86:4d:e2:
e9:af:1d:39:89:af:ec:db:2b:16:a2:c4:2f:a0:9e:f7:1d:61:
0d:61:47:ed:67:69:66:f3:02:c8:48:c9:b9:58:e1:5c:f3:34:
e4:a0:c1:9d:b9:c8:5d:11:da:5a:16:b4:7b:b4:6a:3c:65:9a:
bf:8f:69:8b:71:3c:9c:b9:03:b5:aa:44:04:49:e0:28:0f:16:
6a:1d:7b:e2:c3:2a:15:19:40:c3:c2:1c:4a:51:8d:96:cb:90:
51:0a:09:37:2f:f9:cb:2a:49:36:89:11:0f:81:f8:a7:ed:07:
7d:60:c4:ee:6e:49:32:5a:18:96:3c:93:4b:3b:07:40:a4:a5:
87:ca:e5:65:82:45:7f:df:69:f6:3b:62:0e:50:79:33:9d:a3:
42:81:f4:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:26 2024 by rpki-client on console-ams.rpki-client.org