Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/YFHuNses4UC4hEIDIoHi6FuBIec.roa
File: YFHuNses4UC4hEIDIoHi6FuBIec.roa (raw, json)
Hash identifier: l9eVoMm3n8vhgAdS2uugW5/G6phPwAe35tMrb3kliv4=
Subject key identifier: 60:51:EE:36:C7:AC:E1:40:B8:84:42:03:22:81:E2:E8:5B:81:21:E7
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 0182ED9513F549DC3246B8F1215980C5D1A8
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/YFHuNses4UC4hEIDIoHi6FuBIec.roa
Signing time: Tue 30 Aug 2022 07:09:06 +0000
ROA not before: Tue 30 Aug 2022 07:09:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39521
IP address blocks: 80.96.10.0/24 maxlen: 24
85.120.144.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ed:95:13:f5:49:dc:32:46:b8:f1:21:59:80:c5:d1:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Aug 30 07:09:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6051ee36c7ace140b88442032281e2e85b8121e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ef:d9:55:90:d4:a1:2a:3d:87:0a:5a:48:1d:
d3:2c:d3:8a:f9:2b:dc:30:07:d8:d7:85:8d:6a:d2:
56:96:5d:b3:86:96:49:8b:73:56:b3:33:7a:7d:96:
2b:67:99:5d:f9:df:62:d5:04:9f:50:bd:57:29:c6:
b4:72:8b:ca:92:7f:5d:89:53:89:33:ac:70:4f:fb:
20:20:12:8d:36:0a:05:d0:e7:f6:52:f7:76:10:3c:
bf:2b:93:a0:5b:6e:8c:71:36:54:db:8b:1a:fd:ee:
f1:7a:f0:39:85:99:dc:ed:cc:d6:23:2e:70:6f:4e:
b0:ae:00:e7:ff:3e:82:dd:69:1b:9e:34:a3:75:01:
0a:26:49:56:39:82:c5:50:47:a4:72:44:22:f0:02:
69:f0:ad:72:8b:60:10:eb:20:fd:3f:5c:b0:07:37:
6a:72:2c:db:9e:9d:92:7b:c5:fe:ca:1d:37:d9:46:
8f:c4:84:d7:8e:24:52:61:07:69:d7:25:44:31:02:
ac:62:3e:4b:ed:f1:f7:97:41:ac:2e:2c:c3:ab:47:
6f:fa:0b:a3:b7:14:d8:77:1d:77:8c:17:6c:39:3d:
ca:b0:a7:4e:33:d1:22:0f:cc:35:cd:79:f2:0d:10:
29:23:1e:9c:ca:8c:a6:15:65:cc:3b:c6:44:31:8d:
20:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:51:EE:36:C7:AC:E1:40:B8:84:42:03:22:81:E2:E8:5B:81:21:E7
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/YFHuNses4UC4hEIDIoHi6FuBIec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.10.0/24
85.120.144.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:25:25:62:d6:2d:62:33:13:02:58:7f:c7:b5:e5:75:62:2d:
17:77:ff:b5:11:dd:98:6f:ec:25:f4:00:5f:f4:3a:52:06:82:
53:83:29:21:aa:25:de:d8:ec:39:7d:89:b3:d7:c9:d0:ff:e3:
16:02:40:6b:2b:19:5f:23:d0:98:9c:99:e2:90:97:b4:37:47:
81:4a:ae:83:b5:c8:e2:93:a9:a4:67:63:9b:8d:16:00:43:34:
d6:32:a3:30:ef:43:08:00:cb:e1:f5:c5:d3:9a:91:61:45:1c:
d0:6e:72:0f:6e:1d:35:3e:70:18:cc:65:6b:56:b0:68:4e:22:
b0:a8:a5:5c:23:5b:cf:2f:7a:67:6c:c8:4f:a6:61:65:41:8c:
31:51:16:55:15:3f:d6:91:19:65:fe:1f:e2:b9:f7:3a:cb:b9:
63:fc:74:15:23:8b:43:b6:f6:6d:7b:68:aa:79:5b:b2:d5:07:
2e:21:5f:3f:5b:24:a2:6a:28:6c:5b:c5:db:8a:c2:ed:e2:37:
7c:8e:da:5e:dd:e1:25:d7:9a:7f:2d:e9:a2:3e:df:84:de:50:
e5:3b:b4:3a:4f:a4:77:f0:7e:bd:cf:2d:78:56:e9:ad:51:e9:
ae:b7:71:75:39:f5:b5:81:94:19:ef:12:7c:2e:79:ce:fc:7b:
04:03:3f:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:22 2024 by rpki-client on console-fra.rpki-client.org