Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/YEGn3mUdLbml0IUYcpBh3fOgiPk.roa
File: YEGn3mUdLbml0IUYcpBh3fOgiPk.roa (raw, json)
Hash identifier: yR3j6kU717wXl9Yc7sKqIOpe2uLLc03x1NQAaUCKlng=
Subject key identifier: 60:41:A7:DE:65:1D:2D:B9:A5:D0:85:18:72:90:61:DD:F3:A0:88:F9
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 37F66A5A
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/YEGn3mUdLbml0IUYcpBh3fOgiPk.roa
Signing time: Thu 28 Apr 2022 12:13:46 +0000
ROA not before: Thu 28 Apr 2022 12:13:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61321
IP address blocks: 92.247.109.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 938895962 (0x37f66a5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Apr 28 12:13:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6041a7de651d2db9a5d08518729061ddf3a088f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:0f:c1:f8:b8:6e:ee:08:4d:94:0a:c5:f7:0e:
8e:88:49:26:e5:49:52:a0:06:b8:25:55:03:bc:b4:
07:ff:df:85:8f:f0:58:2b:c2:79:3d:5c:b3:20:e4:
99:a4:f6:1f:6b:da:bd:9e:52:13:29:0c:b8:6e:3b:
4a:ee:79:03:4a:03:cc:78:29:6b:9a:f8:0d:c0:55:
03:94:c3:c6:2c:02:21:e4:4c:b8:b1:d5:8a:d8:c2:
76:3b:6f:ac:9e:a1:fe:55:ed:2f:07:6f:60:e4:b7:
6d:07:8d:e9:89:3a:46:fb:86:2c:35:cb:06:da:61:
98:2d:fc:c6:1f:fc:4d:da:95:0d:40:ab:20:a9:cb:
9f:e6:d2:bf:bc:6e:2d:55:86:92:7c:e7:b8:ad:3a:
2c:82:6d:96:85:f8:ef:46:ea:a7:99:ed:80:e0:33:
44:c5:72:07:ad:87:a1:01:1c:58:8f:5e:1a:2e:b3:
f0:4e:f2:5b:ee:80:1c:93:0d:3f:4d:6e:d9:d4:5a:
43:01:63:72:68:a4:ee:56:23:79:b4:ec:94:ef:93:
db:c4:d3:45:5e:2c:71:d2:4e:5f:98:b6:22:e1:cc:
47:be:55:5c:4f:8a:bb:eb:7a:cb:0d:9f:1b:ce:23:
bc:53:b7:35:c4:6b:4c:f4:d9:a6:6b:ff:93:5e:2f:
d0:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:41:A7:DE:65:1D:2D:B9:A5:D0:85:18:72:90:61:DD:F3:A0:88:F9
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/YEGn3mUdLbml0IUYcpBh3fOgiPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.247.109.0/24
Signature Algorithm: sha256WithRSAEncryption
50:0d:92:59:d7:09:71:46:de:c0:5f:0d:c2:92:68:76:12:b2:
50:09:47:eb:32:22:64:56:a2:df:6b:1a:dd:70:e8:20:1b:9d:
6e:fb:83:3c:bf:35:af:46:3b:41:7c:b1:62:35:83:ad:7b:31:
58:96:8f:5b:74:19:9e:3e:fe:06:31:6d:05:cc:2a:bf:1e:61:
c9:a9:0c:32:35:74:6a:cc:a7:c4:2e:f9:77:c5:0f:e8:00:9d:
f0:6a:bd:2c:05:ff:ad:7f:c3:07:e8:02:82:79:b4:18:a8:53:
51:4c:15:ff:56:45:a0:b7:d9:0e:28:bd:e2:49:dd:d5:71:7b:
50:34:12:2f:9e:2b:ae:cd:af:e8:59:a7:1a:79:64:68:ee:17:
4a:70:dc:ad:87:da:b5:78:34:55:8e:66:67:83:01:5c:1a:52:
35:c7:b3:ae:78:e3:c5:78:0a:2e:02:a6:39:be:3e:38:bf:04:
18:30:3b:24:c6:0d:1c:68:79:64:fe:e0:a4:cc:28:ff:e9:ca:
ac:5e:d3:f3:f9:95:14:cd:8c:1d:3c:e7:b6:f2:f5:89:a7:da:
79:61:6d:48:c6:f1:19:b0:7c:9f:28:e1:b3:50:0d:fb:37:36:
68:45:76:44:d1:7e:f3:fb:15:b7:cc:9b:64:59:a5:20:99:a7:
e1:2b:3b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:19 2023 by rpki-client on console-fra.rpki-client.org