Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/yamhjKsFWCviYZyf42vGyG7KIsA.roa
File: yamhjKsFWCviYZyf42vGyG7KIsA.roa (raw, json)
Hash identifier: ZirRO0Hg1ehMvGyoQQ1Q5q9M1Ml0VNHxJTiRmZ6yuQI=
Subject key identifier: C9:A9:A1:8C:AB:05:58:2B:E2:61:9C:9F:E3:6B:C6:C8:6E:CA:22:C0
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0E73C8D7
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/yamhjKsFWCviYZyf42vGyG7KIsA.roa
Signing time: Thu 20 Jan 2022 15:12:34 +0000
ROA not before: Thu 20 Jan 2022 15:12:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 398343
IP address blocks: 194.135.104.0/24 maxlen: 24
195.133.21.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 242469079 (0xe73c8d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 20 15:12:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c9a9a18cab05582be2619c9fe36bc6c86eca22c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:bf:4e:15:f0:00:ee:9e:51:ae:2b:15:8d:81:
29:f0:e5:3b:ac:90:b8:0d:c4:22:60:09:c8:68:68:
d1:39:cb:cc:40:1c:40:30:9e:7b:77:7c:6d:b6:e3:
bf:c9:21:4a:d2:ed:c8:73:7d:54:4e:f8:09:93:e3:
1e:7d:11:d9:e7:36:bc:e1:15:3f:b3:a7:aa:2e:54:
45:b1:49:5d:ea:27:0a:cf:28:13:02:58:3b:1d:62:
64:43:97:b4:aa:e6:0a:e5:ff:cd:92:43:29:69:5f:
dd:4f:10:7c:a3:d0:ec:10:fa:c3:45:55:e0:c6:94:
c5:82:25:b0:6e:c5:d9:52:14:c5:3e:f2:fd:a4:c6:
92:48:b5:f8:a2:e2:21:ef:5b:44:45:21:5f:a3:88:
ad:bd:83:ce:59:93:6f:d1:c6:8f:06:c7:52:df:22:
b6:4b:9f:1d:13:47:84:8f:c6:f5:55:2f:18:2c:29:
dc:3b:ac:21:f1:70:8b:0d:be:1b:df:2d:b7:55:89:
dd:e5:b1:1d:69:ab:e2:50:51:2d:96:5d:42:1e:b3:
7b:a5:82:6a:2f:62:57:3c:2f:f2:bd:ba:e7:41:ff:
84:bd:6b:5f:62:e3:ea:69:76:51:b4:ed:e5:d9:4c:
cd:08:45:11:cb:72:44:1d:a2:60:31:5b:33:28:0a:
c1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:A9:A1:8C:AB:05:58:2B:E2:61:9C:9F:E3:6B:C6:C8:6E:CA:22:C0
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/yamhjKsFWCviYZyf42vGyG7KIsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.135.104.0/24
195.133.21.0/24
Signature Algorithm: sha256WithRSAEncryption
44:d1:89:59:cc:0a:e7:71:33:cc:9d:42:ab:f2:c5:e3:7a:b2:
79:fd:58:0b:8d:2d:f9:0c:a2:8b:c1:1f:3d:ab:82:48:7c:ae:
70:67:f6:f4:77:76:54:dc:12:36:14:3a:de:55:b5:eb:91:a2:
ea:c9:99:0d:2c:cc:7e:2f:58:67:90:a0:8a:ec:99:82:68:07:
61:ae:56:e3:b7:43:44:8e:14:79:3e:fa:a2:f2:9c:9a:49:fe:
4e:63:ab:a8:f9:e7:8a:0c:c4:fe:82:e7:61:0f:ef:bd:a0:46:
d9:d2:9e:26:6c:60:7b:a6:f5:41:8f:33:74:f9:60:23:e0:dc:
2a:c5:82:31:91:90:e9:95:29:25:36:fd:b9:b7:d9:1c:1c:1b:
ba:78:73:3f:df:96:ae:82:ac:66:17:eb:1c:ee:3f:e3:51:79:
ee:44:e0:60:1d:9e:4f:8d:c5:7e:04:ec:87:4b:9d:77:6b:f3:
28:e2:11:92:1a:05:1a:ef:4d:39:0c:ae:aa:38:af:78:6c:23:
35:31:30:7c:c1:28:bb:45:c9:a7:ee:aa:ed:13:57:ea:c5:4f:
e0:dc:9d:e1:39:0f:2e:6c:d0:89:8e:b1:00:09:b9:38:ca:89:
57:01:48:93:43:4c:1e:d0:e6:6c:21:d3:5b:cb:00:5f:58:5f:
4a:21:f4:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:30 2024 by rpki-client on console-fra.rpki-client.org