Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/YRsxWy5ykW48rVOsYiiHJy6Dcyw.roa
File: YRsxWy5ykW48rVOsYiiHJy6Dcyw.roa (raw, json)
Hash identifier: cxrCzdg5W4ay+03QRmIC6Osy6FtsQqt3zJSETFoo1fY=
Subject key identifier: 61:1B:31:5B:2E:72:91:6E:3C:AD:53:AC:62:28:87:27:2E:83:73:2C
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 04D21601
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/YRsxWy5ykW48rVOsYiiHJy6Dcyw.roa
Signing time: Tue 22 Feb 2022 18:16:32 +0000
ROA not before: Tue 22 Feb 2022 18:16:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 193.233.100.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80877057 (0x4d21601)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Feb 22 18:16:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=611b315b2e72916e3cad53ac622887272e83732c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e6:e7:22:f6:7d:27:e8:68:23:1f:08:c9:33:
73:cb:59:3a:aa:01:6d:75:88:8b:94:92:40:a3:fd:
89:02:d1:95:b9:b5:09:bf:54:41:fa:63:4f:a8:58:
e0:da:47:a6:61:2e:e5:1e:cc:67:c7:50:26:a9:e2:
bd:94:e2:44:8c:ee:3b:d6:a3:f7:99:e8:7e:f8:af:
43:20:57:67:26:13:bc:54:2b:62:81:64:43:71:af:
b8:85:29:59:9e:af:f0:5b:59:fd:46:c5:9d:02:1e:
2e:8e:19:c0:5d:cf:76:a4:8b:b2:be:49:d7:20:34:
8e:9f:71:9d:b6:07:e0:56:76:55:16:36:98:bf:3b:
cb:59:df:e5:15:e2:77:f8:49:0e:3b:8c:1c:26:42:
45:c8:8c:6e:50:9b:bb:dd:f7:dc:63:78:f1:87:9f:
54:10:e7:ff:c5:3f:84:29:93:6e:9e:f1:64:80:ce:
9a:e1:8e:dd:ff:52:73:e9:4b:97:0b:0e:bb:07:ee:
9a:67:f0:94:14:86:5c:07:ed:24:e4:94:e2:a9:88:
45:d3:55:08:04:1c:f1:75:88:ab:cd:94:5a:f0:35:
2f:bc:7a:64:2a:6a:a2:2e:7a:8b:26:41:46:bd:2d:
d2:ee:5c:10:66:32:fa:6b:f9:b8:91:46:8f:c8:f0:
91:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:1B:31:5B:2E:72:91:6E:3C:AD:53:AC:62:28:87:27:2E:83:73:2C
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/YRsxWy5ykW48rVOsYiiHJy6Dcyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.100.0/22
Signature Algorithm: sha256WithRSAEncryption
43:2d:3d:d7:6a:97:6f:d2:f3:81:10:a7:e4:0d:bf:9c:40:dc:
ba:03:87:83:05:29:74:05:f4:f6:98:3c:36:2a:2d:f1:61:d7:
98:0c:70:d8:27:e5:d3:12:44:f9:4f:e9:fe:db:47:d2:56:73:
9a:ab:58:ad:c8:01:5d:92:43:13:c5:4c:ec:05:2b:5f:ac:51:
f2:fc:fc:3a:60:c2:2c:be:39:6c:8e:17:34:47:7f:2c:97:2c:
d6:50:f8:97:8b:cc:80:92:a8:a8:0c:dd:37:4a:14:82:7e:17:
a9:19:95:6b:07:d5:1d:7d:87:5f:98:55:9b:c1:ee:0e:8f:37:
c4:cb:3b:5c:6d:e9:01:43:2a:87:23:07:a3:1c:15:6e:c0:d0:
ad:bb:8f:33:4c:e0:80:7d:8e:dc:db:8f:99:fc:5e:a8:1a:63:
a4:fa:1e:ef:9f:e1:3d:7b:af:7c:96:cf:75:a4:71:41:5e:ba:
88:49:bb:86:e1:3f:65:3d:b0:f1:cc:04:7f:e5:9b:1a:42:98:
87:22:d3:fe:44:1e:81:49:48:28:39:17:51:0c:17:45:59:6a:
63:2e:9a:0b:a7:34:9f:93:78:84:f9:5f:77:03:49:cc:c4:84:
ee:11:1b:d4:bc:53:2f:51:81:da:8d:63:0e:87:fd:97:bf:0a:
42:84:68:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:39 2024 by rpki-client on console-fra.rpki-client.org