Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/d62daf-b254-4ea2-87a4-1f6b0b3a7644/1/YSYjViAh20R5axQ-88wq4b7yUjk.roa
File: YSYjViAh20R5axQ-88wq4b7yUjk.roa (raw, json)
Hash identifier: jsif6HjcK0jT21ixx9BN0DOKNtZ/0VPI/REyhb7pNrg=
Subject key identifier: 61:26:23:56:20:21:DB:44:79:6B:14:3E:F3:CC:2A:E1:BE:F2:52:39
Certificate issuer: /CN=0a5bac8fb2490901fa610480a05b66358b91246c
Certificate serial: 070964C1
Authority key identifier: 0A:5B:AC:8F:B2:49:09:01:FA:61:04:80:A0:5B:66:35:8B:91:24:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Clusj7JJCQH6YQSAoFtmNYuRJGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/d62daf-b254-4ea2-87a4-1f6b0b3a7644/1/YSYjViAh20R5axQ-88wq4b7yUjk.roa
Signing time: Sat 01 Jan 2022 14:58:14 +0000
ROA not before: Sat 01 Jan 2022 14:58:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25417
IP address blocks: 87.249.160.0/19 maxlen: 19
80.65.192.0/20 maxlen: 20
2001:1660::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118056129 (0x70964c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a5bac8fb2490901fa610480a05b66358b91246c
Validity
Not Before: Jan 1 14:58:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=612623562021db44796b143ef3cc2ae1bef25239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:bd:9d:09:40:43:dd:39:8b:67:b4:e5:63:06:
64:47:41:9a:59:76:a0:c1:64:15:3d:f8:ec:51:d9:
ef:a0:30:de:eb:d7:89:18:7b:c3:29:76:92:d3:d1:
8a:c5:ab:26:ba:d7:a3:f7:67:ba:cc:73:29:dc:b0:
57:19:0a:3f:e6:33:5d:3c:66:5d:22:d2:f0:42:4b:
0c:8c:99:1e:47:dd:31:9a:23:cd:56:db:1b:93:a8:
07:9e:43:ca:74:f1:40:60:8d:c0:9e:dc:02:b7:59:
fa:e0:68:38:87:6e:83:a9:be:f4:fb:7a:d5:88:77:
82:2b:05:41:28:03:45:48:85:c3:41:03:c7:c1:9f:
e8:a6:c4:b7:a0:6d:e0:2e:cc:35:9b:b0:7c:60:a7:
f6:66:55:3a:99:db:36:5e:09:40:c4:4a:65:07:16:
6f:ea:63:0a:cb:dc:db:1f:7b:64:ec:86:0d:17:d5:
e8:51:f5:9b:cc:0b:d0:9f:55:30:1b:f0:a8:f4:19:
2c:68:d2:48:db:0d:8d:a7:cb:5f:13:30:d9:d2:ac:
6f:e5:89:df:d6:ad:4c:54:9f:db:46:90:73:1e:ef:
3a:e7:ec:cc:54:c2:08:3e:31:89:6e:19:d6:da:23:
ad:9a:1e:26:90:04:b5:13:ba:db:58:fd:89:cc:9e:
a5:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:26:23:56:20:21:DB:44:79:6B:14:3E:F3:CC:2A:E1:BE:F2:52:39
X509v3 Authority Key Identifier:
keyid:0A:5B:AC:8F:B2:49:09:01:FA:61:04:80:A0:5B:66:35:8B:91:24:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Clusj7JJCQH6YQSAoFtmNYuRJGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d62daf-b254-4ea2-87a4-1f6b0b3a7644/1/YSYjViAh20R5axQ-88wq4b7yUjk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d62daf-b254-4ea2-87a4-1f6b0b3a7644/1/Clusj7JJCQH6YQSAoFtmNYuRJGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.65.192.0/20
87.249.160.0/19
IPv6:
2001:1660::/32
Signature Algorithm: sha256WithRSAEncryption
69:3f:aa:3f:d8:b2:20:31:ef:9b:23:58:d7:d2:11:80:b9:da:
eb:ca:ec:8c:83:17:6b:de:34:65:4c:04:03:ee:58:d3:80:9d:
d0:20:10:f8:32:6e:87:b8:6f:07:e4:b9:f1:8a:e5:0b:e6:af:
80:90:28:8b:33:16:74:d3:a1:24:f8:90:5f:89:0b:65:80:f1:
94:e1:ea:27:72:75:8b:22:6c:76:0b:e2:9c:4b:88:51:e1:31:
02:4f:af:08:86:32:b6:90:fb:68:2b:04:13:8a:a9:64:df:89:
7c:e9:75:60:c5:59:94:88:75:03:c6:e5:98:a8:3f:90:22:05:
36:82:54:76:22:7e:1c:01:e5:39:77:74:19:8e:ad:f1:fe:db:
32:23:4e:98:b1:d9:7e:28:33:a1:6b:94:7b:2a:83:a7:2d:67:
97:1a:a0:bb:1a:c8:7c:c3:57:42:7e:18:ce:d9:21:72:17:60:
09:10:31:5c:65:fd:ab:a7:26:9b:4e:86:a2:e7:10:a8:0b:69:
9e:35:5a:f1:37:46:b5:c1:61:ab:06:a0:5d:9b:6f:25:30:59:
05:b0:ef:c8:a7:6f:31:7f:d7:fb:23:90:6c:5a:a9:65:e0:81:
7f:07:f1:fe:b6:ab:a4:40:c9:63:15:4c:e2:c5:b8:9e:68:7f:
79:ad:91:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:16 2023 by rpki-client on console-fra.rpki-client.org