Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/YkF5VZVSLZTaMF9aymOPekEgfw4.roa
File: YkF5VZVSLZTaMF9aymOPekEgfw4.roa (raw, json)
Hash identifier: aEwtjbO8j1HmguYLkeuDLXI8YZb35/NVQ4BXVbdPfyw=
Subject key identifier: 62:41:79:55:95:52:2D:94:DA:30:5F:5A:CA:63:8F:7A:41:20:7F:0E
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01826E7B8003EA5F8B6EDCE4C79EEDFB5E75
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/YkF5VZVSLZTaMF9aymOPekEgfw4.roa
Signing time: Fri 05 Aug 2022 14:49:23 +0000
ROA not before: Fri 05 Aug 2022 14:49:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15731
IP address blocks: 195.133.77.0/24 maxlen: 24
195.133.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:6e:7b:80:03:ea:5f:8b:6e:dc:e4:c7:9e:ed:fb:5e:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Aug 5 14:49:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6241795595522d94da305f5aca638f7a41207f0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ff:83:1c:63:d7:61:c7:7e:43:d2:d7:4d:80:
d2:29:db:72:6b:6f:06:41:0d:8f:b6:f8:18:72:8b:
9f:0a:ca:9a:65:38:ff:eb:f1:99:8a:dd:8c:20:ba:
cd:0e:28:cb:be:56:1a:c5:b2:df:4d:93:84:88:71:
b3:4a:66:43:37:ac:8a:df:bc:a7:d0:10:d6:0b:f9:
ff:ab:92:82:0d:ea:66:ff:8f:eb:e1:6a:21:b9:4d:
29:db:bc:b9:e1:8d:02:92:53:67:db:8e:f7:e2:a4:
28:bb:20:bc:65:2c:f9:93:b1:0e:36:0e:7a:6e:23:
7f:bb:d4:f0:56:db:d2:9c:3e:b0:5c:44:be:a3:ea:
b3:e2:25:63:78:ae:d5:6c:d6:42:30:26:c4:dd:a1:
7e:c3:57:11:70:1d:f9:8f:39:48:b6:7e:0a:bb:12:
74:9e:90:dc:a4:00:b0:9f:e1:68:55:5a:f7:5e:f3:
29:7e:3d:3d:79:f3:07:22:04:f5:48:ae:82:af:f7:
30:85:86:e8:6d:c9:25:ed:0e:b0:97:fa:51:16:9c:
37:b5:6b:f5:17:9d:50:e2:44:f3:55:fd:c5:8e:94:
2c:b1:3e:26:f3:87:ee:9f:67:cd:6c:e9:8f:a5:0e:
ef:d2:98:be:fc:48:49:52:2a:bc:c5:c3:88:2c:ca:
ce:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:41:79:55:95:52:2D:94:DA:30:5F:5A:CA:63:8F:7A:41:20:7F:0E
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/YkF5VZVSLZTaMF9aymOPekEgfw4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.133.0.0/24
195.133.77.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:d7:1b:7b:c5:04:5d:39:c8:6d:18:9e:8f:cd:00:df:52:8f:
df:4f:80:a8:37:a6:ac:08:18:6b:59:8d:f1:45:be:b5:a5:54:
44:70:4e:b2:1b:6c:c9:0c:c2:29:06:86:12:47:1a:6b:32:8b:
a4:db:60:05:9f:35:0f:44:c4:a0:b9:ee:83:04:10:85:6c:17:
f5:a9:57:b8:ab:aa:f7:c0:09:98:3b:ab:2b:8d:8d:80:c4:bc:
5a:92:a8:02:29:4c:1b:7b:09:aa:24:1f:ce:f7:58:01:72:e2:
b0:a1:37:39:f6:6e:96:d4:74:1a:7e:28:62:2e:b9:52:f5:f2:
af:cd:ce:31:9a:ef:75:5d:60:a1:c6:3e:e3:4b:e7:33:1e:58:
43:38:ae:8e:9f:c0:aa:28:24:06:90:2d:3e:6f:5e:9c:78:57:
1b:29:13:e4:82:cc:af:54:85:0c:2d:d7:c8:8f:9b:44:76:74:
af:f5:4c:a6:5b:57:ee:d4:47:b1:df:9b:2f:2a:1e:0b:6f:ca:
94:81:e6:75:4a:3b:9a:d0:b6:5e:9e:13:59:49:77:5f:e4:bf:
be:88:e5:0a:75:07:86:24:90:5a:0c:47:db:35:dc:e9:a8:3c:
9a:31:2d:a6:b8:b3:01:09:80:39:16:99:0c:97:14:cb:40:29:
05:13:be:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:06 2023 by rpki-client on console-fra.rpki-client.org