Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/YCRyzLgi-gD1zG33AIYwRBDNPvY.roa
File: YCRyzLgi-gD1zG33AIYwRBDNPvY.roa (raw, json)
Hash identifier: GD6DQvb5m5q395WsttCQydKdS62SOPc7vILraMjCmHY=
Subject key identifier: 60:24:72:CC:B8:22:FA:00:F5:CC:6D:F7:00:86:30:44:10:CD:3E:F6
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0F599AFE
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/YCRyzLgi-gD1zG33AIYwRBDNPvY.roa
Signing time: Mon 04 Apr 2022 14:08:29 +0000
ROA not before: Mon 04 Apr 2022 14:08:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205220
IP address blocks: 194.87.63.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 257530622 (0xf599afe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Apr 4 14:08:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=602472ccb822fa00f5cc6df70086304410cd3ef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ea:5a:1e:8c:e5:e9:b5:ff:54:a8:f8:b3:43:
67:df:77:fd:f7:96:50:37:94:40:24:69:82:8a:9e:
17:5d:4f:01:a6:f4:1a:ad:54:22:6c:34:af:a8:cd:
93:d4:8d:19:43:00:b5:66:5e:13:84:a2:54:36:11:
15:85:21:8f:c0:88:64:1d:06:ac:6e:03:e0:80:6b:
0f:21:36:75:ab:38:7b:40:d4:be:2e:1f:f2:26:a2:
f6:66:88:37:a7:86:c1:fa:e9:71:28:9a:c6:e5:28:
31:c1:67:bb:57:5f:0c:ca:23:4e:ad:ba:86:4e:07:
87:2a:8c:d6:3c:96:6e:65:4a:14:2a:d9:27:ab:e2:
38:7e:32:7e:2c:2f:95:12:d4:2f:f7:01:60:14:55:
bb:64:d1:b2:20:1d:69:fc:ba:8f:a5:0f:47:dd:7a:
f8:ef:c3:8a:08:59:9f:60:fd:91:ba:c5:8c:b9:f6:
d5:8f:a2:8f:12:56:83:50:0b:f9:e8:fa:a6:88:55:
d1:61:7e:7c:27:49:a5:49:f1:55:6f:7f:b9:56:63:
26:83:a3:e0:73:03:3a:0a:4e:9b:1f:0b:a1:cd:89:
06:a5:05:15:11:da:22:bf:84:5e:23:c5:a4:b6:c3:
80:31:49:3d:09:98:cd:bd:48:b0:38:2d:b4:36:6d:
1b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:24:72:CC:B8:22:FA:00:F5:CC:6D:F7:00:86:30:44:10:CD:3E:F6
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/YCRyzLgi-gD1zG33AIYwRBDNPvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.63.0/24
Signature Algorithm: sha256WithRSAEncryption
89:af:b8:d9:a9:21:09:e4:80:66:d3:11:e6:30:55:18:e4:9d:
99:4e:fa:65:f3:0a:99:ba:2c:e7:5d:5d:36:21:ce:e8:49:da:
ea:11:23:1e:85:89:4c:4a:d6:f5:45:fc:f4:02:26:0c:11:8e:
33:57:a3:94:b3:d6:c5:db:a2:09:b2:0a:c0:3b:d0:40:96:9f:
bd:e3:7d:33:02:4b:5e:25:80:4f:85:5e:62:c2:50:6b:28:ed:
c6:d1:3d:6b:b8:f3:9e:bb:63:3d:b4:da:e1:0f:99:0c:2f:d0:
20:8c:6c:ea:76:b8:c7:2b:39:3a:78:fd:7d:44:ae:9f:07:4a:
5d:22:6e:db:2a:f4:20:21:76:32:e4:8a:83:25:59:83:ed:9c:
d1:40:52:1b:7d:d2:9c:9b:88:b8:29:b0:ae:26:02:30:1e:00:
3e:0e:26:9d:8b:01:66:21:59:c7:ef:8b:1d:c0:5b:be:f5:d9:
6b:2e:8c:53:af:e0:99:e7:10:3a:6c:15:44:b4:72:ef:a8:af:
9f:09:c6:cb:4a:06:52:83:e1:94:28:98:ff:35:ae:0f:e7:b0:
57:8b:3f:10:1a:bd:4e:71:e7:bb:ed:fd:cf:8a:c7:77:b6:9c:
fa:75:a7:d2:99:44:b9:93:d8:46:89:68:bc:4e:64:93:e6:38:
10:7c:c1:12
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIED1ma/jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
NTY5MGY1ZTMyZDVjODZhZjFlMTM0OWRmZDRlOGNlZWI3MGUxYWM3MB4XDTIyMDQw
NDE0MDgyOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjAyNDcyY2NiODIy
ZmEwMGY1Y2M2ZGY3MDA4NjMwNDQxMGNkM2VmNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALDqWh6M5em1/1So+LNDZ993/feWUDeUQCRpgoqeF11PAab0
Gq1UImw0r6jNk9SNGUMAtWZeE4SiVDYRFYUhj8CIZB0GrG4D4IBrDyE2das4e0DU
vi4f8iai9maIN6eGwfrpcSiaxuUoMcFnu1dfDMojTq26hk4HhyqM1jyWbmVKFCrZ
J6viOH4yfiwvlRLUL/cBYBRVu2TRsiAdafy6j6UPR916+O/DighZn2D9kbrFjLn2
1Y+ijxJWg1AL+ej6pohV0WF+fCdJpUnxVW9/uVZjJoOj4HMDOgpOmx8Loc2JBqUF
FRHaIr+EXiPFpLbDgDFJPQmYzb1IsDgttDZtG6UCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRgJHLMuCL6APXMbfcAhjBEEM0+9jAfBgNVHSMEGDAWgBQ1aQ9eMtXIavHh
NJ39Tozutw4axzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L05Xa1BYakxWeUdyeDRUU2RfVTZNN3JjT0dzYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDAvZTE0NDdhLThmMTgtNGE4MC1hNDIyLTVhNDI0MjhmMTE0My8x
L1lDUnl6TGdpLWdEMXpHMzNBSVl3UkJETlB2WS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDAv
ZTE0NDdhLThmMTgtNGE4MC1hNDIyLTVhNDI0MjhmMTE0My8xL05Xa1BYakxWeUdy
eDRUU2RfVTZNN3JjT0dzYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMJXPzANBgkqhkiG9w0BAQsFAAOC
AQEAia+42akhCeSAZtMR5jBVGOSdmU76ZfMKmbos511dNiHO6Ena6hEjHoWJTErW
9UX89AImDBGOM1ejlLPWxduiCbIKwDvQQJafveN9MwJLXiWAT4VeYsJQayjtxtE9
a7jznrtjPbTa4Q+ZDC/QIIxs6na4xys5Onj9fUSunwdKXSJu2yr0ICF2MuSKgyVZ
g+2c0UBSG33SnJuIuCmwriYCMB4APg4mnYsBZiFZx++LHcBbvvXZay6MU6/gmecQ
OmwVRLRy76ivnwnGy0oGUoPhlCiY/zWuD+ewV4s/EBq9TnHnu+39z4rHd7ac+nWn
0plEuZPYRolovE5kk+Y4EHzBEg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:00 2023 by rpki-client on console-ams.rpki-client.org