Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Y7Z1S1yThCXGk9iv1drwu6IFvFk.roa
File: Y7Z1S1yThCXGk9iv1drwu6IFvFk.roa (raw, json)
Hash identifier: +TWIZzuRg+BYyaaE2mF5vYXo5poiYD0LgptiAQ3ARhE=
Subject key identifier: 63:B6:75:4B:5C:93:84:25:C6:93:D8:AF:D5:DA:F0:BB:A2:05:BC:59
Certificate issuer: /CN=3ecd53c66424c3f369ca88ee7af76adb25e18451
Certificate serial: 0128718B
Authority key identifier: 3E:CD:53:C6:64:24:C3:F3:69:CA:88:EE:7A:F7:6A:DB:25:E1:84:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ps1TxmQkw_Npyojuevdq2yXhhFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Y7Z1S1yThCXGk9iv1drwu6IFvFk.roa
Signing time: Sat 01 Jan 2022 05:59:34 +0000
ROA not before: Sat 01 Jan 2022 05:59:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48329
IP address blocks: 185.159.86.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19427723 (0x128718b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ecd53c66424c3f369ca88ee7af76adb25e18451
Validity
Not Before: Jan 1 05:59:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=63b6754b5c938425c693d8afd5daf0bba205bc59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b5:8d:79:2a:d5:14:49:9e:4d:e3:17:1e:b4:
a9:d2:d6:f7:5a:af:b5:d8:52:f4:71:c2:66:95:0a:
03:13:f4:80:37:14:dd:f3:70:8d:51:99:c0:c9:7a:
bb:d5:35:7a:5e:ff:5c:eb:f5:49:b0:1f:89:43:7b:
ce:2c:45:37:4d:57:84:9d:ea:94:ae:61:98:35:1d:
63:76:19:fc:59:ba:23:e1:35:73:53:64:ce:01:df:
ff:8b:47:fb:d3:c9:b4:0e:52:23:54:50:2d:a4:c9:
7d:38:76:20:91:f6:22:ea:61:01:5f:4f:f2:4d:d1:
32:5e:44:f8:fa:01:71:0b:f9:4d:ed:4d:25:16:fe:
8b:9a:f6:46:82:f1:99:a7:dc:ae:7a:ea:1c:dd:9f:
f4:a7:89:eb:59:66:5e:26:ea:33:16:f9:6b:8c:27:
e7:ce:ac:d2:d5:1a:97:a4:94:4c:0f:b2:cc:1b:cc:
ea:9e:39:0d:8d:be:7a:fe:74:c3:3e:5e:2e:fc:ab:
fd:ab:d3:45:86:4e:64:04:8c:c7:3f:3f:ee:b9:1d:
d2:17:1c:5d:20:b8:69:32:1c:07:59:4b:1c:5c:75:
7e:8b:0d:e4:25:ff:6a:90:ee:69:8d:12:21:fd:5b:
32:ab:db:56:0e:04:e5:61:2b:bc:17:bb:d1:fc:12:
0f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:B6:75:4B:5C:93:84:25:C6:93:D8:AF:D5:DA:F0:BB:A2:05:BC:59
X509v3 Authority Key Identifier:
keyid:3E:CD:53:C6:64:24:C3:F3:69:CA:88:EE:7A:F7:6A:DB:25:E1:84:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ps1TxmQkw_Npyojuevdq2yXhhFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Y7Z1S1yThCXGk9iv1drwu6IFvFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.159.86.0/24
Signature Algorithm: sha256WithRSAEncryption
42:27:64:30:e6:04:17:e2:b8:0d:0d:2d:72:c5:ed:d5:92:27:
8a:a1:4e:0f:aa:3e:89:be:e7:3e:1a:ec:ca:5d:28:a0:c4:51:
8a:6e:44:21:3c:2d:88:3a:42:9d:25:21:82:d6:ec:50:a9:7e:
3c:7d:e0:dd:23:20:6c:38:dc:ec:f5:26:29:2d:9e:9b:17:09:
3e:e3:29:74:d9:c9:70:aa:26:01:51:02:bc:f4:29:23:59:20:
3e:bc:22:c3:ce:79:37:06:ea:3a:0e:0e:c5:c5:35:ed:ae:4c:
44:6b:ab:4e:83:6e:d0:a9:e0:a1:95:e0:50:29:77:93:2f:83:
8e:19:3a:73:c3:d8:30:12:50:16:a4:28:9b:e6:09:5f:d9:55:
50:e1:e8:bc:92:5d:c4:ff:ec:46:1a:9b:a8:92:df:03:1c:4d:
22:fe:ba:c5:d1:a2:f5:13:4c:8c:35:8e:b6:a1:a7:22:fc:2e:
07:cc:03:a5:ec:01:4b:7f:f6:d5:e4:42:42:1c:a7:38:b0:45:
65:34:67:4c:20:1f:03:34:c6:3b:2a:1c:a1:5a:d0:0d:81:66:
e1:01:a7:e6:cd:d6:3e:34:97:2d:91:d3:e9:9d:d7:4f:59:20:
f2:a1:4d:63:d3:7c:57:fa:c3:01:18:53:ff:1b:69:72:fb:72:
ca:ac:55:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:42:48 2025 by rpki-client