Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ya6D4FgAI6SQpV6XlQDRh3d4Cb8.roa
File: ya6D4FgAI6SQpV6XlQDRh3d4Cb8.roa (raw, json)
Hash identifier: 4KYYAno5R4oC32AW2z5fALnhoPkkw3Dm3Z90g6wDgxo=
Subject key identifier: C9:AE:83:E0:58:00:23:A4:90:A5:5E:97:95:00:D1:87:77:78:09:BF
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0F3ADAFE
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ya6D4FgAI6SQpV6XlQDRh3d4Cb8.roa
Signing time: Thu 24 Mar 2022 11:44:07 +0000
ROA not before: Thu 24 Mar 2022 11:44:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49981
IP address blocks: 194.135.18.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 255515390 (0xf3adafe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Mar 24 11:44:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c9ae83e0580023a490a55e979500d187777809bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:af:12:e8:ae:0e:61:b3:89:1a:02:3e:26:19:
66:83:80:42:5e:41:50:4e:1a:ce:97:5f:fb:da:43:
2f:bc:21:29:43:d6:31:0e:12:9d:46:6e:5f:66:19:
78:ad:24:c9:ae:69:62:7e:f9:8b:97:db:9d:98:32:
0d:5b:67:5d:f4:f9:71:41:fb:6f:39:25:6a:8b:d0:
c4:a7:53:aa:82:4b:17:22:fb:7b:0f:41:b8:a2:02:
af:fa:72:00:e9:7a:8a:b8:22:3e:e9:2c:34:29:9a:
97:f7:a3:37:86:a0:5a:52:ea:6c:2b:eb:9a:c2:53:
e7:68:c7:52:ce:47:d3:20:d9:80:e3:ea:5c:4d:5c:
38:d1:c1:b1:ce:da:93:5e:c2:27:f5:a2:27:a2:87:
c3:ca:4e:30:7d:30:6a:50:ac:05:95:00:b1:d1:c7:
d3:23:ab:87:e5:fa:8f:71:e8:74:cc:81:c3:7f:2f:
5c:37:7d:7e:3f:ae:18:03:5e:dd:99:36:55:08:7b:
bf:0e:54:df:e7:85:b7:11:3d:94:de:7d:f6:59:03:
b2:79:65:d5:0f:c6:32:b0:76:69:c9:24:32:47:0f:
4c:a5:19:21:bb:85:f8:f7:db:c5:8f:dd:79:03:92:
7c:6a:27:38:84:1c:e1:eb:56:dd:73:ec:3b:c7:94:
f1:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:AE:83:E0:58:00:23:A4:90:A5:5E:97:95:00:D1:87:77:78:09:BF
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ya6D4FgAI6SQpV6XlQDRh3d4Cb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.135.18.0/24
Signature Algorithm: sha256WithRSAEncryption
32:28:a7:81:be:88:bc:e0:e9:4f:f5:cb:8f:de:ef:ce:78:a1:
87:f0:0f:3c:14:79:31:d5:71:88:a3:f3:1b:c5:85:f1:7b:29:
00:40:47:e8:5f:46:b9:69:ce:b5:fd:c0:eb:c6:8e:54:94:37:
c3:67:72:e0:af:49:49:cb:5d:72:49:8a:8e:46:de:a6:63:94:
b5:38:b2:85:d1:26:b0:b8:40:0e:fd:ea:36:33:1d:46:65:cb:
00:17:7c:a8:e2:69:9e:b7:e9:cb:2d:36:10:85:f7:8f:62:b7:
8c:d1:cf:15:fd:36:f8:44:ca:34:dc:a7:b3:73:12:ea:06:06:
d3:0d:28:b3:55:1f:45:14:1a:5b:d6:72:5d:7c:a1:50:98:9e:
6e:25:b7:ed:f4:b9:a7:8f:19:4d:46:21:2e:7a:5d:db:68:c1:
60:10:0e:3c:64:12:b0:fc:38:4c:03:cb:2a:78:3c:23:cb:84:
76:1a:a3:28:45:19:1e:3e:56:bb:70:95:c8:8b:30:aa:df:70:
49:37:6a:36:b2:15:0a:93:7d:2f:87:b9:c7:d2:ca:e7:b7:48:
db:db:71:1a:85:21:e6:51:48:aa:36:44:f8:30:f0:fd:00:65:
f7:a5:2f:ab:1a:6f:c2:c0:5d:30:38:88:05:dc:75:5e:0d:2e:
8d:b6:a1:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:14 2023 by rpki-client on console-fra.rpki-client.org