Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/CyScSpkCW_8BtY0EyD5B7ooJI0E.roa
File: CyScSpkCW_8BtY0EyD5B7ooJI0E.roa (raw, json)
Hash identifier: h43M//ozQP6vDMlkcgaImc71B8nWnWh1agSG284cqus=
Subject key identifier: 0B:24:9C:4A:99:02:5B:FF:01:B5:8D:04:C8:3E:41:EE:8A:09:23:41
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0182637E14CFA1729B954E085283A5869010
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/CyScSpkCW_8BtY0EyD5B7ooJI0E.roa
Signing time: Wed 03 Aug 2022 11:36:23 +0000
ROA not before: Wed 03 Aug 2022 11:36:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208911
IP address blocks: 164.40.185.0/24 maxlen: 24
80.76.49.0/24 maxlen: 24
193.222.98.0/24 maxlen: 24
194.48.248.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:63:7e:14:cf:a1:72:9b:95:4e:08:52:83:a5:86:90:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 3 11:36:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0b249c4a99025bff01b58d04c83e41ee8a092341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:9a:b5:0f:7c:19:ed:5d:60:da:e8:0f:98:6c:
bf:76:61:19:b3:ba:41:01:c3:1e:18:bb:95:9f:5e:
7b:f8:10:d7:c0:f5:f0:44:9b:6b:95:de:a4:b6:ff:
05:39:62:9e:21:01:8d:b8:c8:71:e4:47:6b:8f:57:
c5:e8:27:56:7b:02:3b:13:a3:9f:49:20:44:5e:88:
62:99:ea:56:34:83:01:aa:82:2b:3e:bc:51:03:04:
f1:61:04:47:c0:87:ca:75:93:50:f9:a0:27:f8:0f:
6d:8f:48:d0:50:15:2c:f3:d9:25:39:72:67:3b:0b:
46:ab:f4:f1:84:40:0b:78:33:30:62:b6:97:da:de:
cb:37:92:48:4b:cf:b3:0a:30:8d:f5:3f:c0:6c:61:
42:be:48:97:f1:6a:c5:14:87:3c:36:a0:07:4e:98:
6e:1e:c2:7d:8e:be:13:ef:ec:36:16:a6:26:ca:83:
fe:d2:46:19:78:3d:ed:48:47:5b:9a:42:8f:df:f1:
9e:94:70:3a:21:03:45:d4:14:43:ca:ff:83:27:fc:
60:0f:2f:a9:ec:16:4d:ff:b9:55:9b:22:4d:bd:c3:
b2:ea:fe:c3:84:95:2b:8a:5e:36:53:71:0d:4f:ec:
0c:c8:a1:ac:56:5b:e9:58:f6:ee:c1:16:10:ff:b1:
e9:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:24:9C:4A:99:02:5B:FF:01:B5:8D:04:C8:3E:41:EE:8A:09:23:41
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/CyScSpkCW_8BtY0EyD5B7ooJI0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.76.49.0/24
164.40.185.0/24
193.222.98.0/24
194.48.248.0/24
Signature Algorithm: sha256WithRSAEncryption
32:94:21:f6:5e:9c:a9:a7:48:07:41:83:86:7d:35:3b:8b:18:
21:a0:c1:bc:91:28:a4:79:f3:9e:56:f2:ab:64:0b:b1:f1:ca:
3e:e8:b8:28:1e:bc:d1:fa:40:f2:06:10:c0:ca:c1:f8:ef:66:
db:c5:3f:dd:61:43:c4:61:dc:d8:cd:db:11:2d:d2:a5:37:3d:
62:c3:8d:e6:ae:00:0f:c6:7e:09:54:3e:92:b8:24:72:a1:c5:
9a:cb:a3:e8:0c:4a:91:7b:5b:3f:7a:b0:fb:e5:b7:00:0f:fd:
8e:f9:ad:47:35:b9:b5:f7:56:ba:24:fb:c4:01:8b:00:96:ce:
ed:52:3e:bc:4d:9e:5d:4e:40:7b:81:84:e2:2a:9e:c3:ba:84:
b0:75:4c:a1:ca:74:1f:c2:a6:04:5c:16:d1:38:59:43:7b:d3:
8d:f5:d8:ee:9e:39:d1:51:f1:5e:92:0d:88:55:3e:9a:79:db:
df:89:26:25:05:dd:d1:1b:90:b7:08:33:c8:f1:72:d5:94:64:
6a:a6:70:99:d3:53:5a:a3:ee:21:2c:b8:a3:4b:c1:e3:6d:a3:
1c:9c:9c:ec:d1:75:82:d1:44:64:b3:88:fe:f1:ec:a4:25:07:
e5:0a:d1:23:db:ce:08:99:92:6a:24:55:54:fd:33:a8:27:87:
4b:52:0a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:33 2023 by rpki-client on console-ams.rpki-client.org