Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/ymBprCfgRNaXmqtC7XBMjxyuHiQ.roa
File: ymBprCfgRNaXmqtC7XBMjxyuHiQ.roa (raw, json)
Hash identifier: 319dXrGbNBM0TWK6WaPwZVyTm9zAR/jnD5wOmRcFG5k=
Subject key identifier: CA:60:69:AC:27:E0:44:D6:97:9A:AB:42:ED:70:4C:8F:1C:AE:1E:24
Certificate issuer: /CN=2e0e338d73e758468456632f5bcaae07af0d8731
Certificate serial: 05BB6006
Authority key identifier: 2E:0E:33:8D:73:E7:58:46:84:56:63:2F:5B:CA:AE:07:AF:0D:87:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lg4zjXPnWEaEVmMvW8quB68NhzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/ymBprCfgRNaXmqtC7XBMjxyuHiQ.roa
Signing time: Sat 01 Jan 2022 16:03:32 +0000
ROA not before: Sat 01 Jan 2022 16:03:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13136
IP address blocks: 80.85.128.0/21 maxlen: 21
2a02:13d0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96165894 (0x5bb6006)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e0e338d73e758468456632f5bcaae07af0d8731
Validity
Not Before: Jan 1 16:03:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ca6069ac27e044d6979aab42ed704c8f1cae1e24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0e:b1:e6:9e:19:58:d1:12:3d:50:ae:2a:f8:
4e:54:fa:fb:9b:39:05:49:9c:2a:65:bc:a9:5c:09:
f6:3e:c1:b5:62:8b:7a:6e:9f:03:cd:9a:50:b0:e8:
5f:f3:19:b3:99:c8:dd:d2:78:55:c5:96:70:c6:79:
88:c0:77:a8:9f:64:9b:67:a2:f3:4d:28:12:62:64:
42:d0:fc:68:e9:54:6c:b9:b0:45:51:98:3d:00:e1:
6c:a2:37:59:ed:cb:11:8d:d1:6d:93:61:06:40:c1:
19:f9:35:27:b8:f2:36:a1:fb:a0:27:1a:0a:cb:dd:
6a:6e:a2:0d:c3:86:e4:02:35:53:fb:4a:61:a0:92:
16:71:ce:89:18:f3:86:73:e9:56:cb:95:73:da:98:
3a:3e:6c:35:45:c2:7b:cb:27:7b:5b:f2:36:07:f7:
b7:77:fd:04:d9:3b:3a:1f:c6:4a:49:32:7a:ea:13:
fa:7d:36:82:65:36:d3:1c:4e:fa:8a:10:c9:85:05:
58:85:08:73:cc:ef:89:f6:68:47:3b:cb:9a:09:70:
19:e2:49:e6:6b:bd:d9:55:0f:f2:cb:91:74:b6:9c:
40:4c:c2:3d:ce:3f:12:5c:4e:d4:50:60:0e:4d:50:
52:62:b1:44:26:5c:dc:62:c1:36:44:7c:68:48:9f:
c2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:60:69:AC:27:E0:44:D6:97:9A:AB:42:ED:70:4C:8F:1C:AE:1E:24
X509v3 Authority Key Identifier:
keyid:2E:0E:33:8D:73:E7:58:46:84:56:63:2F:5B:CA:AE:07:AF:0D:87:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lg4zjXPnWEaEVmMvW8quB68NhzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/ymBprCfgRNaXmqtC7XBMjxyuHiQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/Lg4zjXPnWEaEVmMvW8quB68NhzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.85.128.0/21
IPv6:
2a02:13d0::/29
Signature Algorithm: sha256WithRSAEncryption
88:ad:c6:4e:c3:ff:9e:b5:d9:e8:1f:64:81:ec:2b:93:1e:25:
93:b4:3e:53:82:79:5d:de:56:3e:fb:cc:91:28:e4:49:3d:9e:
90:02:42:e2:b5:5e:ea:01:08:39:a1:f0:f6:2f:f2:8a:7b:db:
06:3a:41:bb:a2:8f:f2:f9:1d:56:43:32:d6:63:fe:1c:60:4e:
31:30:a7:77:a7:22:59:b9:4e:22:d7:eb:b6:0e:5d:54:16:97:
9a:56:54:19:95:b2:ca:8d:37:ce:60:b2:1c:0f:4b:ab:cb:1d:
1d:9b:f1:f2:73:bf:0e:fb:a1:6f:06:b2:75:05:d9:5f:c8:4d:
ac:f2:3e:61:0f:c6:52:f8:e4:91:64:0b:06:83:57:79:2b:41:
33:f5:07:e2:a0:84:8c:9f:3a:5c:5a:66:85:79:b8:c4:45:ea:
d3:3d:f5:14:9c:75:26:88:f0:b3:b5:14:8b:40:90:13:e1:73:
68:83:f3:36:46:03:be:bf:f8:36:c2:eb:85:ce:03:63:41:4c:
02:14:fb:59:c9:01:98:dc:98:90:8c:b0:f0:00:52:f7:4e:8d:
82:05:51:ae:b0:64:3b:e5:a7:cf:1f:09:3b:16:09:8e:d2:f7:
36:d9:f1:b5:a4:bd:be:14:97:8d:40:19:2c:06:4c:ac:52:73:
f0:a6:fd:bd
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEBbtgBjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
ZTBlMzM4ZDczZTc1ODQ2ODQ1NjYzMmY1YmNhYWUwN2FmMGQ4NzMxMB4XDTIyMDEw
MTE2MDMzMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoY2E2MDY5YWMyN2Uw
NDRkNjk3OWFhYjQyZWQ3MDRjOGYxY2FlMWUyNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK8OseaeGVjREj1Qrir4TlT6+5s5BUmcKmW8qVwJ9j7BtWKL
em6fA82aULDoX/MZs5nI3dJ4VcWWcMZ5iMB3qJ9km2ei800oEmJkQtD8aOlUbLmw
RVGYPQDhbKI3We3LEY3RbZNhBkDBGfk1J7jyNqH7oCcaCsvdam6iDcOG5AI1U/tK
YaCSFnHOiRjzhnPpVsuVc9qYOj5sNUXCe8sne1vyNgf3t3f9BNk7Oh/GSkkyeuoT
+n02gmU20xxO+ooQyYUFWIUIc8zvifZoRzvLmglwGeJJ5mu92VUP8suRdLacQEzC
Pc4/ElxO1FBgDk1QUmKxRCZc3GLBNkR8aEifwoMCAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBTKYGmsJ+BE1peaq0LtcEyPHK4eJDAfBgNVHSMEGDAWgBQuDjONc+dYRoRW
Yy9byq4Hrw2HMTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0xnNHpqWFBuV0VhRVZtTXZXOHF1QjY4Tmh6RS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDMvODExMTA4LWU4ZjctNDdhZi1iYzhiLWE1Yjc4MzFhOGNlMS8x
L3ltQnByQ2ZnUk5hWG1xdEM3WEJNanh5dUhpUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDMv
ODExMTA4LWU4ZjctNDdhZi1iYzhiLWE1Yjc4MzFhOGNlMS8xL0xnNHpqWFBuV0Vh
RVZtTXZXOHF1QjY4Tmh6RS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEA1BVgDANBAIAAjAHAwUDKgIT0DAN
BgkqhkiG9w0BAQsFAAOCAQEAiK3GTsP/nrXZ6B9kgewrkx4lk7Q+U4J5Xd5WPvvM
kSjkST2ekAJC4rVe6gEIOaHw9i/yinvbBjpBu6KP8vkdVkMy1mP+HGBOMTCnd6ci
WblOItfrtg5dVBaXmlZUGZWyyo03zmCyHA9Lq8sdHZvx8nO/DvuhbwaydQXZX8hN
rPI+YQ/GUvjkkWQLBoNXeStBM/UH4qCEjJ86XFpmhXm4xEXq0z31FJx1Jojws7UU
i0CQE+FzaIPzNkYDvr/4NsLrhc4DY0FMAhT7WckBmNyYkIyw8ABS906NggVRrrBk
O+Wnzx8JOxYJjtL3NtnxtaS9vhSXjUAZLAZMrFJz8Kb9vQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:21 2024 by rpki-client on console-ams.rpki-client.org