Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/yk72d-BLLEOyc47wXAWIl2jtQ1o.roa
File: yk72d-BLLEOyc47wXAWIl2jtQ1o.roa (raw, json)
Hash identifier: +CeODs/pJgJBoPQemcCkz46MqobmvDzAOBQFCBnrWvw=
Subject key identifier: CA:4E:F6:77:E0:4B:2C:43:B2:73:8E:F0:5C:05:88:97:68:ED:43:5A
Certificate issuer: /CN=f5bba55e1f0bf8613ea9bbbe297a281b3c838180
Certificate serial: 14C5F7C1
Authority key identifier: F5:BB:A5:5E:1F:0B:F8:61:3E:A9:BB:BE:29:7A:28:1B:3C:83:81:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9bulXh8L-GE-qbu-KXooGzyDgYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/yk72d-BLLEOyc47wXAWIl2jtQ1o.roa
Signing time: Sat 01 Jan 2022 05:03:33 +0000
ROA not before: Sat 01 Jan 2022 05:03:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12593
IP address blocks: 185.151.104.0/22 maxlen: 22
94.176.196.0/22 maxlen: 22
94.125.120.0/21 maxlen: 21
212.90.160.0/19 maxlen: 19
2a04:42c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 348518337 (0x14c5f7c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5bba55e1f0bf8613ea9bbbe297a281b3c838180
Validity
Not Before: Jan 1 05:03:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ca4ef677e04b2c43b2738ef05c05889768ed435a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b6:84:fd:bc:5d:b2:f2:11:4d:22:fa:ad:fa:
5c:a3:d7:9f:82:44:44:6e:52:94:82:d9:82:d5:c3:
db:31:61:18:b6:cc:2d:b9:d2:e4:c8:c5:97:e4:a8:
ee:ab:da:f6:ae:9a:f2:0a:89:e3:d2:dc:da:50:20:
bf:8f:f9:a4:67:33:93:a4:a0:d6:c1:59:16:ca:e2:
eb:fb:3f:cb:10:00:01:08:a4:10:37:53:d3:17:c7:
c5:6c:21:eb:dd:7f:ec:6f:5f:e7:e8:6c:4e:87:c2:
eb:c0:21:92:a9:45:17:d2:42:e3:17:85:72:2a:cb:
cd:84:97:6c:8a:d3:6e:1a:67:09:4f:26:4e:d1:ef:
29:e6:7f:a0:33:9a:ad:14:4a:8e:b2:81:4c:fa:97:
5c:95:dd:33:6e:13:90:17:48:de:aa:a5:64:28:1f:
ce:48:bd:48:13:87:df:17:d4:c3:6d:bd:08:da:85:
74:75:9b:cf:e8:b4:6d:af:27:cc:06:d0:8e:57:27:
45:69:c7:47:99:76:f4:c9:c6:31:e1:dc:3b:1e:c2:
31:df:14:43:3f:fc:10:4d:4f:25:e0:a2:b7:da:2f:
d7:18:8e:8f:ab:06:01:e7:82:5e:14:26:5d:c5:5a:
ba:52:83:5a:69:09:17:cf:d2:e2:3c:e3:89:af:54:
3e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:4E:F6:77:E0:4B:2C:43:B2:73:8E:F0:5C:05:88:97:68:ED:43:5A
X509v3 Authority Key Identifier:
keyid:F5:BB:A5:5E:1F:0B:F8:61:3E:A9:BB:BE:29:7A:28:1B:3C:83:81:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9bulXh8L-GE-qbu-KXooGzyDgYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/yk72d-BLLEOyc47wXAWIl2jtQ1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.125.120.0/21
94.176.196.0/22
185.151.104.0/22
212.90.160.0/19
IPv6:
2a04:42c0::/29
Signature Algorithm: sha256WithRSAEncryption
9d:21:61:3a:34:cc:40:6f:0a:0a:60:c0:87:1f:6d:19:93:e0:
c5:37:e3:d4:be:74:d9:25:b8:de:e9:01:4b:12:f5:06:e5:56:
5c:dc:a6:79:24:c8:0d:c3:50:f4:8c:52:c1:15:18:e4:b1:46:
e1:75:ae:1a:da:30:5e:30:2e:f4:44:27:70:8d:0f:2a:b1:83:
ef:6a:c9:05:d7:35:f6:2f:ce:e5:6e:ed:0d:d8:d5:da:52:b0:
3b:a5:c8:46:44:c0:57:20:3e:25:95:e6:87:8a:3c:37:6e:04:
55:19:8e:cc:15:88:8e:6e:24:dd:48:37:a6:ef:71:32:90:64:
76:0e:e8:1d:38:a9:68:55:fc:06:ad:32:a9:e8:a7:d5:d1:39:
b2:39:04:51:29:43:12:fb:06:de:a5:98:2c:a9:17:b2:ba:9f:
2d:fa:32:3e:b0:44:fe:f0:9d:78:81:b2:9b:67:1c:84:3e:fa:
22:e0:7f:d4:59:63:49:ae:99:0f:64:27:e7:30:92:8b:46:67:
fd:aa:f2:33:64:24:d2:35:8e:5d:e8:f9:36:59:27:5a:00:2b:
ee:13:66:9d:78:2d:a6:e8:1c:ba:e1:6a:27:32:92:4f:a5:c1:
aa:1d:1f:35:63:a9:b2:71:98:44:53:d0:9a:73:39:1f:8e:25:
44:8f:e3:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:59 2024 by rpki-client on console-fra.rpki-client.org