Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/YFzRmJQEr6oEnRVA6PLZbilzU7U.roa
File: YFzRmJQEr6oEnRVA6PLZbilzU7U.roa (raw, json)
Hash identifier: Th6aJ5LDsSGIeULXNuzR3nHa5h2skvq5kzWixKF3adA=
Subject key identifier: 60:5C:D1:98:94:04:AF:AA:04:9D:15:40:E8:F2:D9:6E:29:73:53:B5
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01851A8A1846F67D47570DDF706F2D8D633D
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/YFzRmJQEr6oEnRVA6PLZbilzU7U.roa
Signing time: Fri 16 Dec 2022 10:45:35 +0000
ROA not before: Fri 16 Dec 2022 10:45:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39521
IP address blocks: 194.31.223.0/24 maxlen: 24
164.40.189.0/24 maxlen: 24
164.40.191.0/24 maxlen: 24
164.40.188.0/24 maxlen: 24
164.40.190.0/24 maxlen: 24
193.149.28.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:1a:8a:18:46:f6:7d:47:57:0d:df:70:6f:2d:8d:63:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Dec 16 10:45:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=605cd1989404afaa049d1540e8f2d96e297353b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9d:0d:04:a9:f0:68:f6:44:d4:78:74:33:fd:
d8:a5:76:db:b4:70:18:cf:3e:61:c5:27:29:9b:49:
94:d0:d0:c7:79:c4:ae:b0:b5:64:30:f2:a7:17:80:
43:10:40:cd:8e:c8:e6:4b:1d:18:89:6d:4a:bd:1d:
52:c4:26:27:e1:56:38:3c:2b:1c:4e:91:f4:2f:36:
d0:de:e9:eb:7b:81:a0:6b:75:05:10:ec:57:6c:6c:
07:7c:d8:0a:18:74:05:b0:41:e0:ec:46:8a:f6:37:
9c:41:c7:a2:58:8b:ff:70:da:95:1e:ae:1d:42:24:
be:5b:d9:9c:4a:a3:53:a2:00:74:9c:96:c4:2f:bb:
50:af:0c:7a:d4:0d:c8:c0:45:85:f4:73:62:5a:fa:
e8:aa:8e:8e:46:3b:e0:e4:b4:2b:8f:a8:3d:ac:41:
f0:01:dc:19:ba:3b:22:ab:89:c8:29:2c:2e:1c:63:
54:0f:48:9e:85:bb:01:81:ce:96:6b:4a:7c:f2:cc:
5d:bd:86:59:77:14:80:07:d5:bf:48:64:5b:54:b6:
80:9b:e8:0a:67:37:45:17:6f:81:29:82:50:e5:7e:
ad:3f:a8:c1:e6:f2:41:c1:7e:b5:41:37:0c:2e:e7:
76:73:39:78:77:c4:f6:44:39:42:73:da:98:0b:02:
b4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:5C:D1:98:94:04:AF:AA:04:9D:15:40:E8:F2:D9:6E:29:73:53:B5
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/YFzRmJQEr6oEnRVA6PLZbilzU7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.40.188.0/22
193.149.28.0/22
194.31.223.0/24
Signature Algorithm: sha256WithRSAEncryption
42:4a:21:bb:52:a4:d2:33:f0:42:42:a8:b1:49:51:8e:8c:bc:
0f:d9:c1:50:1e:83:87:b0:f1:f3:ff:96:00:d2:48:3c:95:49:
50:e4:5a:84:42:15:6f:3b:24:ea:75:26:d7:07:c1:48:ee:1e:
57:57:eb:63:c3:70:28:7f:e0:e0:c0:62:0e:cc:d3:e6:9a:10:
68:f2:0a:32:77:05:f9:b3:33:86:aa:17:2f:42:a8:0a:2b:6b:
84:04:06:4c:ea:43:34:d4:b1:95:1a:3e:2f:e0:c8:a5:c9:a1:
d5:77:b5:99:77:77:56:d9:99:4e:dd:85:a6:87:d1:53:11:dd:
f9:9e:81:a1:ca:d5:0b:cd:f0:1a:f3:89:a3:d1:6a:66:72:5d:
d1:12:3a:da:bb:1f:ad:6d:50:d2:ea:38:21:20:4c:5b:d2:55:
4c:ab:ed:ec:8d:78:a9:d2:2a:ca:07:94:0f:4d:89:36:2b:d5:
3d:af:db:99:a7:f7:e4:ee:05:a1:8d:3b:15:75:15:ea:47:ba:
e8:60:ec:19:45:b8:c0:f3:a9:5a:e1:4b:f5:56:32:a7:87:eb:
7c:6f:23:2c:80:60:3b:7c:82:60:fd:fa:29:3f:81:91:82:24:
c9:53:6d:9a:c7:c0:49:90:80:6b:37:e8:07:3b:bc:44:ff:9f:
ee:5d:a1:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:44 2023 by rpki-client on console-fra.rpki-client.org