Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/ySejHsqHF22fXvfHH6E7J9N3oWQ.roa
File: ySejHsqHF22fXvfHH6E7J9N3oWQ.roa (raw, json)
Hash identifier: WUgb/qZjfVFTaGlttb46w/Jetk9Z7YG7G4IKhH6pNAI=
Subject key identifier: C9:27:A3:1E:CA:87:17:6D:9F:5E:F7:C7:1F:A1:3B:27:D3:77:A1:64
Certificate issuer: /CN=eea02b197dbaf7deb74e0a27d9d4ecd3fae1e8ed
Certificate serial: 0184621A0496FD32C4CED0B1E76BB7B25B12
Authority key identifier: EE:A0:2B:19:7D:BA:F7:DE:B7:4E:0A:27:D9:D4:EC:D3:FA:E1:E8:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7qArGX269963Tgon2dTs0_rh6O0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/ySejHsqHF22fXvfHH6E7J9N3oWQ.roa
Signing time: Thu 10 Nov 2022 15:13:02 +0000
ROA not before: Thu 10 Nov 2022 15:13:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57152
IP address blocks: 185.73.128.0/22 maxlen: 24
104.247.172.0/24 maxlen: 24
104.247.171.0/24 maxlen: 24
104.247.170.0/24 maxlen: 24
104.247.175.0/24 maxlen: 24
104.247.174.0/24 maxlen: 24
104.247.173.0/24 maxlen: 24
104.247.179.0/24 maxlen: 24
104.247.178.0/24 maxlen: 24
104.247.177.0/24 maxlen: 24
104.247.176.0/24 maxlen: 24
104.247.180.0/24 maxlen: 24
185.137.215.0/24 maxlen: 24
2a03:a5a0:1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:62:1a:04:96:fd:32:c4:ce:d0:b1:e7:6b:b7:b2:5b:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eea02b197dbaf7deb74e0a27d9d4ecd3fae1e8ed
Validity
Not Before: Nov 10 15:13:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c927a31eca87176d9f5ef7c71fa13b27d377a164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ea:65:ba:d5:d4:14:a3:6e:f1:85:2d:6e:c5:
16:5d:4c:d9:af:3c:f2:e7:ae:98:83:6b:e4:00:65:
1d:fa:91:a7:34:d2:3d:02:74:c1:79:c2:c7:f6:09:
33:84:5b:6c:29:9c:23:8e:63:6b:02:22:56:03:76:
73:11:69:05:97:87:28:15:66:ae:ec:bb:ed:59:18:
e0:8e:af:a3:8f:cb:5d:fa:e8:cf:6c:34:74:41:71:
47:98:2c:7d:0c:b4:96:47:16:d0:78:26:17:91:c5:
8a:ad:7c:25:e3:28:52:f8:63:87:9d:e6:41:3e:e6:
ee:1e:ec:a0:f4:3e:6a:07:5f:45:00:fb:f4:c7:66:
24:7e:bd:df:f8:74:f2:95:6c:b4:a2:5c:bc:30:e5:
52:95:e9:b6:f1:b9:3f:04:8f:24:91:65:2c:dc:77:
86:c4:d5:97:a2:55:b7:82:e6:71:5a:75:fc:a9:35:
b4:dc:bc:c6:14:81:6f:be:8d:24:b4:d3:74:4f:07:
5e:61:d8:b2:4f:ae:2b:da:db:1e:df:e6:68:70:a2:
94:f3:81:90:e5:8b:30:8e:9f:44:76:36:40:34:07:
16:87:04:62:fb:25:19:eb:b0:af:03:09:e6:96:fb:
79:af:1e:c0:f9:6f:e4:3b:c8:af:21:6b:22:8a:42:
65:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:27:A3:1E:CA:87:17:6D:9F:5E:F7:C7:1F:A1:3B:27:D3:77:A1:64
X509v3 Authority Key Identifier:
keyid:EE:A0:2B:19:7D:BA:F7:DE:B7:4E:0A:27:D9:D4:EC:D3:FA:E1:E8:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7qArGX269963Tgon2dTs0_rh6O0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/ySejHsqHF22fXvfHH6E7J9N3oWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/7qArGX269963Tgon2dTs0_rh6O0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.247.170.0-104.247.180.255
185.73.128.0/22
185.137.215.0/24
IPv6:
2a03:a5a0:1::/48
Signature Algorithm: sha256WithRSAEncryption
70:78:4c:30:ad:5a:33:f6:e3:15:25:0c:7e:33:6a:38:98:ea:
e5:39:2b:2e:1b:79:b6:29:d4:71:83:3b:13:ce:3d:68:7a:cc:
6e:ed:95:43:18:16:92:cf:45:60:32:33:0f:83:f1:ec:b5:0d:
6d:8f:03:14:0e:2e:57:3d:0e:bc:3b:d7:1e:a6:ce:25:e8:61:
02:f5:04:49:36:53:a0:33:0b:01:b9:f1:0a:e9:75:48:fc:cf:
06:0f:ef:7f:24:87:d6:21:e6:17:2b:41:a9:e7:8e:94:4d:23:
67:44:fd:88:9d:57:f4:d4:d5:c7:aa:15:80:8d:1e:3c:c5:04:
f6:b0:6d:bd:d0:ff:a6:c1:27:0c:2c:d1:07:a7:27:17:52:a8:
69:08:72:76:b0:ab:9d:b8:89:c4:8b:04:4b:cf:64:95:eb:f4:
80:fc:34:e2:36:b7:07:42:0b:59:47:36:59:1d:15:67:d7:f8:
50:c0:f4:52:8d:46:ec:dd:bf:60:9d:db:a4:32:2f:35:a9:de:
79:a2:eb:a6:0e:7c:fb:ab:67:40:d1:14:f9:87:a7:e7:9e:19:
f5:a9:5a:49:9a:0f:30:d5:17:02:99:52:bd:52:6b:ae:b2:5c:
b8:e6:29:8c:dd:21:89:20:46:50:b1:7f:86:99:41:81:a3:e8:
13:5c:3a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:55 2024 by rpki-client on console-ams.rpki-client.org