Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/YaC7ii0J1Q9MhQQ6ZdiMTd19yiw.roa
File: YaC7ii0J1Q9MhQQ6ZdiMTd19yiw.roa (raw, json)
Hash identifier: v3VpEKTigSG61TAL8XJxFCBgdYO01tJiYKBYHnooEF8=
Subject key identifier: 61:A0:BB:8A:2D:09:D5:0F:4C:85:04:3A:65:D8:8C:4D:DD:7D:CA:2C
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01853E96B449535F371F744EEEDE280664B5
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/YaC7ii0J1Q9MhQQ6ZdiMTd19yiw.roa
Signing time: Fri 23 Dec 2022 10:45:41 +0000
ROA not before: Fri 23 Dec 2022 10:45:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203639
IP address blocks: 194.87.204.0/24 maxlen: 24
194.87.208.0/24 maxlen: 24
194.87.231.0/24 maxlen: 24
195.133.15.0/24 maxlen: 24
195.58.38.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:3e:96:b4:49:53:5f:37:1f:74:4e:ee:de:28:06:64:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Dec 23 10:45:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=61a0bb8a2d09d50f4c85043a65d88c4ddd7dca2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:25:6b:b8:0a:1a:02:27:0a:b9:e6:e7:6f:e1:
00:64:6f:ad:90:96:30:b6:8e:cb:6e:98:77:34:60:
bf:08:13:71:d4:55:85:5b:d0:ff:09:d4:e8:ef:71:
b9:b1:70:06:b9:52:a3:69:6f:7d:7d:43:db:69:ff:
5f:34:79:bb:8c:a9:19:11:a3:39:83:47:5a:91:1d:
e4:20:48:5d:e6:f1:86:88:6d:2e:2b:a4:d9:8c:18:
af:21:78:26:da:a7:ed:6c:a2:03:2f:a1:cc:31:85:
46:51:a2:f6:77:e3:e5:26:c7:72:04:3c:9d:54:98:
32:f3:52:04:5a:bb:9a:68:77:e9:59:31:94:12:3d:
ff:db:e7:d5:4d:d6:84:8c:e2:c0:01:7c:a5:02:5c:
d2:28:91:be:65:f5:e6:11:11:8a:4f:96:57:c9:2b:
b8:2e:01:7f:2d:25:c7:36:98:fe:cd:38:68:5e:f9:
83:ce:0f:09:04:23:50:30:c1:e4:aa:c8:8f:b5:5d:
fc:8e:9a:55:77:59:2b:5c:3f:79:e5:02:6c:56:95:
3d:5a:58:a8:20:ca:a1:8e:89:df:a3:ed:dd:fc:a6:
e6:6a:4c:c5:de:a2:8d:c6:16:87:df:5b:87:ea:fc:
b6:91:de:9a:dd:de:a7:31:ac:40:84:54:1a:ea:7f:
3a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:A0:BB:8A:2D:09:D5:0F:4C:85:04:3A:65:D8:8C:4D:DD:7D:CA:2C
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/YaC7ii0J1Q9MhQQ6ZdiMTd19yiw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.204.0/24
194.87.208.0/24
194.87.231.0/24
195.58.38.0/24
195.133.15.0/24
Signature Algorithm: sha256WithRSAEncryption
35:43:cc:72:77:1c:f6:77:31:50:44:7c:cb:6d:87:bf:9f:96:
bb:fb:6e:07:67:ef:bb:c6:a6:bd:b6:8d:bc:aa:61:13:ee:42:
90:a2:44:2a:d4:cb:a1:1a:33:1b:f0:7e:3c:4b:a3:31:76:31:
1b:45:25:fe:79:e2:d6:47:16:c9:9b:17:fc:43:26:23:01:01:
31:e5:3b:d0:6b:79:82:e9:fa:1a:bb:fb:0c:7d:27:23:64:15:
23:43:1a:09:ba:d7:4b:85:36:11:02:38:94:39:3d:ae:71:e2:
e7:e7:b4:f4:b4:58:63:86:f4:d3:9f:96:b9:1f:07:58:ae:53:
e6:23:6a:13:cf:d5:5b:d8:cd:7f:12:08:04:7d:38:75:23:af:
1f:b5:99:4f:da:9e:5e:73:a8:75:ab:bb:ff:28:50:3a:8b:d8:
1e:d9:f6:9b:f9:4a:85:8e:62:7b:b5:12:03:de:60:90:db:ad:
dd:69:f3:55:60:03:4e:8f:60:f2:95:83:30:78:ee:e6:55:4b:
30:1f:f5:6b:71:eb:d4:03:16:c5:da:1f:0d:89:dc:90:b4:45:
cb:7b:32:2d:8a:9c:87:da:0a:dc:eb:4d:af:7a:c6:1f:5c:2c:
fd:a7:e6:c7:b7:8b:ae:20:ab:ff:ea:45:a6:8d:9f:75:48:19:
c5:5c:d7:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:00 2023 by rpki-client on console-ams.rpki-client.org