Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/UPyyZL0CBIVhCi2Tbsd4UgK9-_I.roa
File: UPyyZL0CBIVhCi2Tbsd4UgK9-_I.roa (raw, json)
Hash identifier: xTzWkYo0aWR/ahTR7B4Q3hm2Rk0wrAG+EY8mHcaHcWo=
Subject key identifier: 50:FC:B2:64:BD:02:04:85:61:0A:2D:93:6E:C7:78:52:02:BD:FB:F2
Certificate issuer: /CN=6278a768c910badcd5c4aef7c172a9f061547e8c
Certificate serial: 0183E6696CB5E4528CBEF7A3FDEEB951FF52
Authority key identifier: 62:78:A7:68:C9:10:BA:DC:D5:C4:AE:F7:C1:72:A9:F0:61:54:7E:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YninaMkQutzVxK73wXKp8GFUfow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/UPyyZL0CBIVhCi2Tbsd4UgK9-_I.roa
Signing time: Mon 17 Oct 2022 14:46:52 +0000
ROA not before: Mon 17 Oct 2022 14:46:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198371
IP address blocks: 185.47.211.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:e6:69:6c:b5:e4:52:8c:be:f7:a3:fd:ee:b9:51:ff:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6278a768c910badcd5c4aef7c172a9f061547e8c
Validity
Not Before: Oct 17 14:46:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=50fcb264bd020485610a2d936ec7785202bdfbf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:85:e9:94:61:42:12:3e:71:73:8b:29:2a:47:
bd:f1:7f:4d:ee:d3:fb:38:1b:af:a9:a6:05:2c:a2:
25:9d:8f:b7:c4:dc:90:1a:fb:7e:74:28:2b:90:86:
75:45:10:b5:46:01:94:b4:91:26:e3:cd:ca:c3:fb:
20:84:2a:57:1a:29:a6:d1:98:e1:b6:e8:5e:77:9b:
64:a3:cc:b0:bf:c5:b2:88:7a:2b:80:82:12:24:10:
84:40:15:9d:03:44:b5:85:a3:b7:cb:fc:c0:81:20:
9e:41:65:c8:d8:13:12:05:b7:16:6c:04:e3:70:44:
44:5d:d9:01:9d:57:3b:81:a5:5f:9f:59:49:a6:9e:
b2:ab:37:c2:f0:1e:37:5d:98:b8:f7:66:bd:48:6d:
e8:73:2e:ab:19:42:4f:86:1e:f9:63:ee:55:dc:18:
4f:10:f9:9a:e8:6b:05:06:79:ee:60:f5:82:c7:84:
a4:50:1c:32:ad:04:6f:3d:3b:43:9a:b7:30:12:36:
98:e8:28:d0:ea:3f:e8:4b:b3:6a:9e:fe:c1:e8:76:
b9:38:a2:a6:77:ef:73:6c:30:42:0e:24:be:2a:fa:
cc:c8:98:be:4c:92:00:46:25:d8:45:50:df:d8:2f:
ed:5e:36:da:24:e7:6c:da:98:e9:5d:1a:d3:53:f1:
e6:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:FC:B2:64:BD:02:04:85:61:0A:2D:93:6E:C7:78:52:02:BD:FB:F2
X509v3 Authority Key Identifier:
keyid:62:78:A7:68:C9:10:BA:DC:D5:C4:AE:F7:C1:72:A9:F0:61:54:7E:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YninaMkQutzVxK73wXKp8GFUfow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/UPyyZL0CBIVhCi2Tbsd4UgK9-_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/YninaMkQutzVxK73wXKp8GFUfow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.47.211.0/24
Signature Algorithm: sha256WithRSAEncryption
65:95:10:94:29:3e:d2:ec:bf:90:70:0e:d1:6c:cf:69:6c:18:
3d:7b:25:85:60:f6:cd:08:c7:12:c4:fd:69:9d:4f:39:6d:ee:
eb:ba:54:3e:3e:ce:ec:3f:f3:b1:bb:25:5d:e3:56:77:2b:a8:
6e:4c:de:54:d4:b1:bd:58:48:e5:96:05:60:39:84:54:22:0b:
4f:59:75:63:59:96:8b:e6:af:61:91:13:aa:11:9d:96:aa:c4:
20:b9:cf:2f:5c:23:64:04:6b:2f:d2:40:52:c5:42:a3:57:4a:
7e:fa:8c:85:f7:0a:3f:c3:03:7e:b2:36:32:97:b3:0b:23:d6:
1f:99:78:1d:3d:ee:15:d6:95:c3:39:b7:cd:2b:ea:98:ce:c3:
f2:77:36:9d:64:b0:bf:93:2f:d7:3f:f9:79:2f:40:41:a4:d3:
8c:c2:b1:03:41:d3:ff:00:85:d1:5a:1b:ea:57:89:d5:71:b2:
a8:bf:5f:b4:b6:fb:05:6f:fe:e6:f6:cf:e9:cd:e0:04:7b:5c:
d1:83:5c:c8:0a:3c:6e:9c:62:9f:28:5f:ce:8e:4c:f1:f7:93:
28:36:91:1b:de:c9:41:2e:8e:00:95:61:5b:e4:30:80:96:e3:
2b:3d:38:5e:92:33:7f:f4:3a:78:2e:3a:45:36:22:04:b7:3a:
b2:91:13:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:24 2023 by rpki-client on console-ams.rpki-client.org