Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/YrufJWGHrZO0Qce3xBATfq5ex04.roa
File: YrufJWGHrZO0Qce3xBATfq5ex04.roa (raw, json)
Hash identifier: VptQhmtUf90ihB5kVsHktt+hJ5J88KdOXMtRj9uHbYQ=
Subject key identifier: 62:BB:9F:25:61:87:AD:93:B4:41:C7:B7:C4:10:13:7E:AE:5E:C7:4E
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 0181DDC8E345C41B9D7268139555835337AE
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/YrufJWGHrZO0Qce3xBATfq5ex04.roa
Signing time: Fri 08 Jul 2022 12:28:58 +0000
ROA not before: Fri 08 Jul 2022 12:28:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201776
IP address blocks: 2.63.224.0/20 maxlen: 20
2.63.144.0/20 maxlen: 20
176.211.120.0/22 maxlen: 22
2.63.176.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:dd:c8:e3:45:c4:1b:9d:72:68:13:95:55:83:53:37:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jul 8 12:28:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62bb9f256187ad93b441c7b7c410137eae5ec74e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:47:39:3d:46:f4:53:52:9c:a8:42:a7:f9:d3:
f1:33:13:03:81:8d:fd:ae:55:ca:d8:d1:75:bd:44:
2f:a3:93:3d:23:6e:7c:5c:96:f3:cb:bd:16:28:e1:
31:3f:ca:4f:70:2c:c0:ef:c5:75:cf:fa:ff:3b:b3:
4e:58:2a:08:e4:13:2b:9c:b4:14:5b:a7:97:49:ad:
02:9b:eb:8d:78:40:d9:4f:c5:26:56:f3:3d:61:88:
ce:3c:13:e8:d0:eb:82:b9:d9:9d:f6:44:39:7d:4c:
3a:63:74:82:a5:79:e7:a6:1b:37:68:44:c2:d3:37:
c2:28:82:b4:53:92:2d:d3:ab:6c:ba:46:1b:08:df:
08:91:be:ab:9d:41:6e:4b:3e:a0:c3:85:16:e6:84:
3d:22:5b:ae:2f:2d:b2:05:ad:c0:ae:b7:29:11:f1:
90:50:40:1d:03:46:ad:95:d3:a2:5d:cf:66:88:86:
dc:4b:8b:22:bf:d5:c0:26:af:41:51:ad:1d:3f:16:
e8:64:da:d8:45:51:12:32:6f:95:46:3c:a3:29:df:
8a:7d:cd:4f:62:59:1c:df:a4:8a:46:4c:65:02:06:
8a:df:45:76:b7:ea:44:19:17:bb:3b:e2:39:0c:45:
f5:97:46:d4:1e:4f:72:20:ba:ba:c0:aa:fe:8f:13:
1b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:BB:9F:25:61:87:AD:93:B4:41:C7:B7:C4:10:13:7E:AE:5E:C7:4E
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/YrufJWGHrZO0Qce3xBATfq5ex04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.63.144.0/20
2.63.176.0/20
2.63.224.0/20
176.211.120.0/22
Signature Algorithm: sha256WithRSAEncryption
92:6d:70:f9:3b:19:a6:d1:06:1d:21:e1:44:48:25:8d:d1:e6:
f2:27:0a:2a:73:2b:d1:dc:02:d4:ed:02:19:3b:9d:53:02:99:
57:85:2d:a4:c5:e2:fb:a2:fb:43:01:9e:6a:b2:b4:86:1a:85:
f6:ed:47:9a:54:38:1b:71:25:ba:3d:45:00:7f:c8:dd:d7:7e:
88:a5:1c:1e:85:8e:90:88:d2:c0:d8:78:84:02:16:b4:15:cf:
eb:35:03:53:07:41:39:5c:e2:e7:50:4b:8b:4f:d4:30:3f:38:
09:0a:a7:81:59:b4:63:44:42:06:9e:dd:c7:be:45:ea:5f:3d:
65:65:b6:a6:61:f4:20:22:6f:59:78:0f:cc:5f:68:e9:f4:c1:
9b:91:1e:9d:78:8b:46:8a:78:27:0a:50:1f:13:18:00:c2:00:
8d:c5:ce:f2:c3:e6:d8:92:f5:b4:e4:7e:b7:90:9a:3c:59:1e:
3f:08:d9:47:8b:06:57:76:75:b9:74:da:0c:a4:15:4e:80:70:
1f:03:88:6e:16:63:e2:e9:17:a7:e1:18:5d:47:b0:3b:a2:02:
39:47:14:20:bf:6a:b0:be:a6:35:ac:33:53:3e:15:f4:a8:01:
bf:26:ce:19:4c:b2:88:5c:a6:75:0c:6d:65:e1:29:67:55:cf:
43:85:8a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:56 2024 by rpki-client on console-fra.rpki-client.org