Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/yY0JYDQ3SLrgxaU4o6OtPdidUD0.roa
File: yY0JYDQ3SLrgxaU4o6OtPdidUD0.roa (raw, json)
Hash identifier: YDQ4GSAD3eVwqYCbGcp0vkgqfd54Y9sqbgC0Q+nkbxk=
Subject key identifier: C9:8D:09:60:34:37:48:BA:E0:C5:A5:38:A3:A3:AD:3D:D8:9D:50:3D
Certificate issuer: /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2
Certificate serial: ADF5C3
Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/yY0JYDQ3SLrgxaU4o6OtPdidUD0.roa
Signing time: Sat 01 Jan 2022 07:53:50 +0000
ROA not before: Sat 01 Jan 2022 07:53:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57782
IP address blocks: 185.202.104.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11400643 (0xadf5c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2
Validity
Not Before: Jan 1 07:53:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c98d0960343748bae0c5a538a3a3ad3dd89d503d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ca:36:06:47:07:28:69:3f:2b:4f:fe:5c:95:
ba:e3:f9:94:60:36:25:e0:99:3a:be:b8:a5:43:43:
0a:a7:0c:62:dd:ce:88:be:c3:50:f3:6d:cf:af:1c:
e2:91:28:8d:07:1c:2b:ca:32:d8:93:64:6e:fe:c6:
36:90:7d:4c:54:d6:e4:8b:86:fa:db:48:99:b7:42:
c0:e6:ea:7f:86:89:84:67:59:34:22:6a:b4:f9:84:
0a:cb:77:ff:3f:c8:d3:66:50:54:4f:71:83:75:25:
5b:60:00:f5:ef:43:c6:eb:24:35:2f:d3:24:1f:a8:
35:7f:70:31:a1:25:ab:72:c0:3c:ee:ce:4c:cc:41:
ce:d5:c0:4b:be:b4:47:61:9a:9f:a2:89:7c:9b:6d:
55:3e:54:5a:da:48:0e:55:8e:c6:36:b1:08:5b:87:
d4:c4:f5:ca:fa:39:7c:05:ee:b1:0c:1f:2f:75:f8:
6b:36:33:b5:63:94:d1:d3:96:7f:97:73:f0:3a:d8:
48:3a:4f:c8:1e:db:fd:c7:22:ff:5a:1f:63:b9:61:
a8:3e:dc:c8:0d:1a:cc:a9:6b:c5:51:20:55:5f:45:
8e:6e:c9:0d:25:38:01:66:ee:f1:cb:d8:fb:e7:3c:
39:71:fe:f8:e9:98:76:66:dd:3d:5e:99:db:d3:d9:
40:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:8D:09:60:34:37:48:BA:E0:C5:A5:38:A3:A3:AD:3D:D8:9D:50:3D
X509v3 Authority Key Identifier:
keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/yY0JYDQ3SLrgxaU4o6OtPdidUD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.104.0/24
Signature Algorithm: sha256WithRSAEncryption
64:77:ac:e4:c1:4b:e4:b7:6e:b8:69:29:d0:ae:84:58:61:c3:
2e:66:d6:13:ca:80:dd:6f:5c:72:c3:73:6c:49:8f:a0:46:b9:
ff:39:f6:61:bd:1a:19:ec:2d:f2:10:48:cb:e2:e4:75:f1:01:
b3:3c:35:3e:9e:9b:7c:b0:1a:c6:ee:a8:cd:21:7b:d7:e1:72:
89:74:8b:04:18:74:22:3a:69:44:6c:58:66:a8:e0:ef:22:5d:
b9:c3:d6:b8:f3:3e:0d:0e:fc:98:42:c8:fb:ac:3b:19:b8:61:
86:3d:30:2f:d7:6b:40:5f:97:bc:65:8e:0b:f6:71:7b:c0:d1:
cc:21:4c:2e:5a:00:f0:e6:25:ac:bf:93:26:d6:6c:1c:36:0e:
5a:ff:7e:0f:49:65:d8:38:20:c7:05:8a:7a:26:24:73:6c:be:
49:4c:35:56:34:09:d6:f4:24:19:ad:86:4b:62:a4:9b:e4:d8:
bd:78:76:c4:40:30:33:ef:c0:59:41:72:1b:30:96:43:fd:41:
12:3a:ba:3c:2a:e5:34:f0:97:b0:f5:e5:9b:b7:ad:a0:f0:9a:
b8:b9:a7:49:0f:ba:a3:98:51:d0:04:71:9a:22:29:17:5e:d1:
73:a5:ed:6b:e4:5b:ba:9f:e6:b1:16:09:40:ac:4f:4e:9e:c3:
ce:48:5b:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:40 2023 by rpki-client on console-fra.rpki-client.org