Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/91cdfd-2c72-4236-a4c2-2b8f7346f350/1/yPtTLG4wNgrrEtJEi02B-6KybUg.roa
File: yPtTLG4wNgrrEtJEi02B-6KybUg.roa (raw, json)
Hash identifier: 418DySCrf3oJUsSwZ8A5wJl4PVY08r+ITg0YgBEQfLI=
Subject key identifier: C8:FB:53:2C:6E:30:36:0A:EB:12:D2:44:8B:4D:81:FB:A2:B2:6D:48
Certificate issuer: /CN=2fe5b7ccb403d30a44857d47c58cf1346546d283
Certificate serial: 0EC8B41A
Authority key identifier: 2F:E5:B7:CC:B4:03:D3:0A:44:85:7D:47:C5:8C:F1:34:65:46:D2:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L-W3zLQD0wpEhX1HxYzxNGVG0oM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/91cdfd-2c72-4236-a4c2-2b8f7346f350/1/yPtTLG4wNgrrEtJEi02B-6KybUg.roa
Signing time: Sat 01 Jan 2022 04:53:04 +0000
ROA not before: Sat 01 Jan 2022 04:53:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34984
IP address blocks: 159.253.82.0/24 maxlen: 24
159.253.81.0/24 maxlen: 24
159.253.84.0/24 maxlen: 24
159.253.80.0/24 maxlen: 24
159.253.83.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 248034330 (0xec8b41a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fe5b7ccb403d30a44857d47c58cf1346546d283
Validity
Not Before: Jan 1 04:53:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c8fb532c6e30360aeb12d2448b4d81fba2b26d48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:31:25:f8:e6:60:45:7f:42:72:c3:63:cf:85:
64:2a:17:13:6a:b4:ad:ed:b2:3e:aa:34:2f:36:6b:
0a:01:bb:73:f4:32:bd:94:ff:66:e8:47:0a:d1:67:
b8:79:69:ec:eb:af:bb:d5:e4:18:42:08:45:da:58:
34:73:63:d7:4e:f8:ee:47:13:03:ea:8c:5d:7a:3a:
ba:21:ef:30:02:66:80:84:41:56:56:94:60:e0:c3:
4b:7b:2e:34:54:a4:00:f4:7f:74:6d:aa:2c:7f:be:
9a:81:9f:27:55:0b:34:90:43:0c:0c:c9:d2:3c:95:
93:97:a9:19:3d:f3:26:92:00:31:5b:f6:5c:96:b0:
d5:61:fb:df:8f:62:4d:82:9f:6f:b0:32:76:1c:90:
7f:fc:29:9f:3b:53:70:a8:6d:76:d0:95:1c:48:96:
db:9c:e4:da:04:77:a5:03:75:40:a9:4e:29:ad:6e:
b7:54:70:8e:de:f9:2e:11:1d:4f:14:c5:f1:15:16:
20:87:af:41:f1:72:66:e5:02:97:42:00:e0:1d:d0:
79:4d:18:8a:f3:7e:e0:d2:61:f7:1d:73:55:81:c3:
76:02:c1:97:d2:9b:7a:ae:f8:74:3f:54:e9:bb:2a:
70:bd:b5:5f:39:51:a7:29:37:d2:67:59:bc:4b:03:
b8:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:FB:53:2C:6E:30:36:0A:EB:12:D2:44:8B:4D:81:FB:A2:B2:6D:48
X509v3 Authority Key Identifier:
keyid:2F:E5:B7:CC:B4:03:D3:0A:44:85:7D:47:C5:8C:F1:34:65:46:D2:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L-W3zLQD0wpEhX1HxYzxNGVG0oM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91cdfd-2c72-4236-a4c2-2b8f7346f350/1/yPtTLG4wNgrrEtJEi02B-6KybUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91cdfd-2c72-4236-a4c2-2b8f7346f350/1/L-W3zLQD0wpEhX1HxYzxNGVG0oM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.253.80.0-159.253.84.255
Signature Algorithm: sha256WithRSAEncryption
b1:37:40:34:be:ce:5c:84:33:99:70:37:de:e7:29:23:c8:43:
09:d2:c8:be:d1:f6:67:44:11:b3:d3:a3:5a:4c:78:0a:f5:51:
58:6c:46:8c:f4:bc:22:80:69:e5:80:f7:0c:dd:bb:48:a1:92:
cb:c7:90:81:1f:4e:32:c4:ea:05:af:dd:5e:66:a3:58:11:85:
30:e3:82:90:30:13:05:ab:36:52:50:d8:43:f3:9c:3c:f3:70:
32:20:b5:4e:3b:bd:1c:37:12:4d:72:ed:b9:01:4c:25:91:01:
c9:dd:28:d1:26:2b:30:5e:90:75:ad:93:80:28:69:20:95:9e:
47:5a:71:13:cd:51:22:f0:fd:c6:99:34:39:42:f6:f9:26:21:
96:fd:bc:83:d0:f4:b6:02:44:0c:37:bf:49:9d:2b:62:8e:78:
35:bb:63:ba:45:a2:f8:02:66:91:7e:47:75:e0:95:7a:bf:9f:
55:a5:1a:63:98:82:40:20:30:73:59:f9:5f:84:81:67:b5:ef:
9c:d6:6e:8d:97:68:87:57:69:4b:a4:ab:ff:01:89:8e:00:f4:
55:87:06:60:68:a3:87:e0:12:c5:10:6a:fd:e8:0e:26:5f:03:
92:ea:ff:b2:34:e7:9f:45:af:b9:33:05:f6:bb:96:b4:1c:2b:
d5:56:8c:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:25 2024 by rpki-client on console-fra.rpki-client.org