Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Yv-9F9aH2urOAEmr8tJjmzjm3ds.roa
File: Yv-9F9aH2urOAEmr8tJjmzjm3ds.roa (raw, json)
Hash identifier: 58XhadMZF0kLbKMy0z8hSopOCyUbxaynv+YEUcFfehY=
Subject key identifier: 62:FF:BD:17:D6:87:DA:EA:CE:00:49:AB:F2:D2:63:9B:38:E6:DD:DB
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01840AF4A95AE352CA610E21C8D309BA9A82
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Yv-9F9aH2urOAEmr8tJjmzjm3ds.roa
Signing time: Mon 24 Oct 2022 17:05:17 +0000
ROA not before: Mon 24 Oct 2022 17:05:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 53850
IP address blocks: 194.87.117.0/24 maxlen: 24
194.87.118.0/24 maxlen: 24
194.87.33.0/24 maxlen: 24
212.193.11.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:0a:f4:a9:5a:e3:52:ca:61:0e:21:c8:d3:09:ba:9a:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 24 17:05:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62ffbd17d687daeace0049abf2d2639b38e6dddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ed:50:1c:87:f5:18:d9:10:a9:c8:3e:60:3a:
57:6c:fa:de:c6:06:88:82:a1:8b:13:7e:a1:68:01:
ec:03:6f:75:f7:41:24:a0:a8:34:f1:8c:fe:4e:9a:
a7:08:59:a8:f6:02:10:ac:2b:7a:df:95:fd:cd:8e:
4a:4b:51:01:de:53:fc:06:62:16:67:6d:0e:a2:42:
01:77:54:5e:ab:4a:df:0f:db:bc:e4:cd:69:82:47:
d1:2a:ae:03:76:71:2b:91:7f:7a:6f:d4:6d:54:41:
39:07:e3:97:cd:26:a2:fc:08:b1:4f:30:8f:9d:c2:
17:42:63:27:bf:4d:f7:af:fe:36:4e:ef:82:a3:ee:
f7:e9:c7:90:c8:ed:32:97:73:7c:02:1b:fe:46:f0:
f0:46:01:f8:de:c2:c6:b7:70:95:72:a4:1a:a8:60:
7e:79:0b:cf:2b:02:b7:eb:26:42:6a:28:38:a0:cd:
ee:fd:b6:43:d1:71:6d:24:a9:36:d3:49:67:82:4d:
47:a0:59:a1:62:dd:e1:64:5b:3f:43:af:31:c2:98:
b9:f9:bc:06:f6:b3:24:ea:da:ca:fd:36:23:6b:c1:
c6:7f:1e:80:45:30:b2:5d:55:ee:8b:82:5b:89:a7:
a8:f1:bf:ff:f8:f4:c2:d5:32:48:3b:fb:6a:c3:19:
4f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:FF:BD:17:D6:87:DA:EA:CE:00:49:AB:F2:D2:63:9B:38:E6:DD:DB
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Yv-9F9aH2urOAEmr8tJjmzjm3ds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.33.0/24
194.87.117.0-194.87.118.255
212.193.11.0/24
Signature Algorithm: sha256WithRSAEncryption
29:dd:a4:97:73:13:cc:66:1a:f8:5c:67:be:b6:d9:76:a7:ea:
8c:5a:75:71:cd:5b:86:42:ce:67:75:0d:fd:c8:da:0c:bb:0f:
9f:b4:83:4a:31:9a:46:38:a2:6c:62:31:75:db:16:c6:5e:d1:
2e:15:2c:39:44:e6:6e:a5:23:bc:09:4e:05:4f:68:f9:41:a0:
db:8b:25:16:9d:80:b4:a4:fd:39:28:22:98:e7:c6:38:cc:e8:
bc:fd:d5:25:ad:b1:8e:9c:ae:05:fa:14:68:9c:aa:96:04:68:
ee:e3:b2:db:84:c1:b6:7d:b2:78:d4:4b:49:5d:f2:44:5d:1f:
80:b8:1d:d6:08:ad:40:81:07:e7:7c:ab:8f:ef:df:47:c8:2f:
05:d7:71:6f:50:cd:78:c8:37:86:34:c7:7a:ac:31:2e:9a:e9:
b9:a6:e9:bf:4b:8d:98:f0:98:ea:a9:db:e9:4b:07:38:bc:5a:
52:37:6a:b3:69:8a:58:0a:fd:0c:d1:c8:c5:3b:7d:8d:67:d9:
07:3f:70:64:c6:16:43:a9:ac:8f:41:55:86:01:f7:9d:c4:99:
f9:b9:b4:0b:d7:45:b9:e4:7f:4a:6a:0c:b3:f8:38:d4:a6:85:
d9:1b:ee:7a:48:37:f1:51:29:51:8f:7b:0d:cd:05:c7:a9:ae:
22:49:43:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:06 2023 by rpki-client on console-fra.rpki-client.org