Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/YMoU1nze5zYqhRhhpluh-DljkHU.roa
File: YMoU1nze5zYqhRhhpluh-DljkHU.roa (raw, json)
Hash identifier: +6xCVz0OjbvV8nFJs+RDGSZUWLujmXhqc95339QPKbg=
Subject key identifier: 60:CA:14:D6:7C:DE:E7:36:2A:85:18:61:A6:5B:A1:F8:39:63:90:75
Certificate issuer: /CN=e520446f79ffc2d7c3a9ef340ce9de25723a719a
Certificate serial: 0184A466445C719D422CCBA4CAD44E55B954
Authority key identifier: E5:20:44:6F:79:FF:C2:D7:C3:A9:EF:34:0C:E9:DE:25:72:3A:71:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5SBEb3n_wtfDqe80DOneJXI6cZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/YMoU1nze5zYqhRhhpluh-DljkHU.roa
Signing time: Wed 23 Nov 2022 12:11:16 +0000
ROA not before: Wed 23 Nov 2022 12:11:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57615
IP address blocks: 185.27.83.0/24 maxlen: 24
185.27.81.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:a4:66:44:5c:71:9d:42:2c:cb:a4:ca:d4:4e:55:b9:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e520446f79ffc2d7c3a9ef340ce9de25723a719a
Validity
Not Before: Nov 23 12:11:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=60ca14d67cdee7362a851861a65ba1f839639075
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:25:74:bf:73:b1:b9:b8:9f:3b:d2:33:5b:3c:
96:c9:9b:b3:4c:4e:f1:fb:c6:3d:04:fb:65:56:39:
44:ec:25:d6:86:dd:28:e3:79:f9:5d:ac:38:fa:5d:
1e:63:1a:88:02:1d:74:bb:1f:2b:fc:c3:a6:29:f1:
10:75:50:e2:6b:94:84:5a:d7:24:6d:94:43:bc:61:
23:a0:e2:48:54:23:ac:c7:c5:40:85:ae:66:77:d6:
b5:79:8a:11:54:58:1f:dc:71:42:ef:66:f8:2b:d9:
61:74:bd:fc:a2:fc:d1:43:0e:30:89:2e:c4:f8:1d:
3b:ae:da:10:29:6b:71:96:5c:f1:6f:3e:3e:23:7e:
b8:20:71:a5:44:85:99:81:8c:e1:40:b5:74:79:af:
42:1e:d8:56:92:bb:50:9f:c2:3b:ab:35:8b:05:2a:
f4:af:c6:0c:af:5b:68:40:46:64:87:c8:7a:1c:19:
3b:2d:e7:d7:3c:d5:bb:38:6d:30:f4:67:25:1c:ad:
77:8a:5d:04:ee:aa:cf:4f:14:4d:17:f2:f4:64:16:
6d:8a:a1:60:e3:4f:7b:f0:da:4d:ee:8a:df:db:01:
54:20:e2:be:af:88:8c:ca:48:85:f8:95:be:a3:40:
04:23:d2:37:b9:0b:89:5f:2f:37:02:1c:27:a3:ff:
43:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:CA:14:D6:7C:DE:E7:36:2A:85:18:61:A6:5B:A1:F8:39:63:90:75
X509v3 Authority Key Identifier:
keyid:E5:20:44:6F:79:FF:C2:D7:C3:A9:EF:34:0C:E9:DE:25:72:3A:71:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5SBEb3n_wtfDqe80DOneJXI6cZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/YMoU1nze5zYqhRhhpluh-DljkHU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/5SBEb3n_wtfDqe80DOneJXI6cZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.27.81.0/24
185.27.83.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:1b:80:2b:d4:6c:f4:24:38:60:db:b3:45:a4:77:aa:f7:ef:
54:76:71:36:d8:6e:62:65:70:d9:46:2a:29:3c:b0:27:ef:68:
98:32:87:f5:6f:68:55:c5:0d:0c:0c:43:cb:90:df:3a:32:c4:
d9:a9:75:4b:3c:46:eb:a0:d3:4b:1d:28:98:0f:0d:67:e4:8a:
ed:76:68:a8:ce:19:34:c7:11:55:75:d0:7e:52:3b:f9:7c:98:
92:98:23:3f:b3:0d:02:3f:41:77:fc:52:27:f3:83:9b:82:1d:
13:7a:73:3b:14:ab:14:e8:69:8d:cb:c1:50:5e:25:8f:83:72:
25:3a:34:9c:59:7f:c4:6c:bb:d4:25:63:0a:1a:f3:c4:23:35:
28:72:b4:bf:0d:56:74:19:12:6e:11:3e:8c:95:10:96:9d:16:
45:aa:9e:55:5d:31:0c:9a:5a:16:5d:af:93:c7:73:81:ab:55:
c2:93:50:ce:31:91:f6:ae:fb:90:26:a3:0a:5a:64:45:e5:42:
58:00:43:cc:90:ad:9f:da:be:ee:4c:38:08:b2:0a:9b:16:dd:
93:b4:5d:5f:02:36:ff:5f:10:7a:82:04:40:33:8f:6b:eb:e6:
3c:d2:97:b1:f1:96:64:91:dc:0f:79:d8:4c:d2:31:18:e1:51:
ad:cc:86:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:25 2024 by rpki-client on console-ams.rpki-client.org