Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/yzvJBQoEL84walzgQJw9MnXD7dE.roa
File: yzvJBQoEL84walzgQJw9MnXD7dE.roa (raw, json)
Hash identifier: od1SPQDNiCenLANMy6rcnZH53DonwOGo9JZCCyzoumA=
Subject key identifier: CB:3B:C9:05:0A:04:2F:CE:30:6A:5C:E0:40:9C:3D:32:75:C3:ED:D1
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 0184AFB9A86E5187BDA2C35602CCCC217062
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/yzvJBQoEL84walzgQJw9MnXD7dE.roa
Signing time: Fri 25 Nov 2022 16:58:10 +0000
ROA not before: Fri 25 Nov 2022 16:58:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 85.209.120.0/23 maxlen: 24
77.83.38.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:af:b9:a8:6e:51:87:bd:a2:c3:56:02:cc:cc:21:70:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Nov 25 16:58:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cb3bc9050a042fce306a5ce0409c3d3275c3edd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0c:b1:a2:f2:e5:61:b5:e0:c9:52:24:14:56:
e1:06:75:76:e5:b1:ac:24:64:2b:da:b6:91:e7:c4:
b7:de:50:9b:21:a8:01:a5:ef:99:ef:84:0e:be:69:
a2:68:b0:e0:2e:57:28:70:3b:66:78:c8:1d:61:71:
34:c6:a8:b6:2c:f7:ac:e6:bd:16:03:5a:d2:42:54:
03:e3:74:f4:0d:73:5b:3c:79:2c:07:03:df:8c:12:
bb:a0:d9:8c:e3:f6:46:e3:8e:c5:2f:d6:81:46:e0:
61:a7:d2:4c:f4:50:cd:12:d8:a5:70:ee:c1:aa:6c:
cf:13:ff:9d:ad:18:a6:66:2b:3e:3e:66:60:39:7a:
9c:d4:51:70:63:24:e6:07:59:04:de:84:39:a8:33:
84:32:e0:85:aa:42:fb:86:8a:1f:0c:1f:41:7b:0f:
f5:90:94:43:a5:6e:34:ff:7b:5a:59:8d:7d:ad:77:
18:c6:15:a4:67:99:8d:d6:a1:25:15:aa:b6:ad:24:
2b:ef:c7:71:f5:4c:0f:f3:ab:19:4c:2d:84:ed:1a:
bc:3d:05:87:a1:3c:11:8d:75:45:bc:72:ff:9a:62:
c3:74:55:b1:b1:54:72:53:10:14:cb:d9:7a:e7:bd:
7c:1c:ff:a1:35:99:57:14:d3:3c:1c:b1:ec:a4:e4:
bc:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:3B:C9:05:0A:04:2F:CE:30:6A:5C:E0:40:9C:3D:32:75:C3:ED:D1
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/yzvJBQoEL84walzgQJw9MnXD7dE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.38.0/24
85.209.120.0/23
Signature Algorithm: sha256WithRSAEncryption
68:de:22:00:08:d5:e4:90:0d:ae:61:6f:60:30:5b:89:a7:2e:
2f:42:e9:bb:b7:00:a9:5e:cb:3e:0b:20:a0:5e:d9:0e:41:8c:
0d:31:d0:5c:a3:04:98:06:93:ea:71:fe:8a:d1:f5:08:92:16:
2a:c0:07:ad:2e:8f:f3:1f:0d:b8:e1:65:3f:cc:e6:2e:82:99:
e2:ff:39:44:81:34:9b:56:4d:59:7b:53:dd:99:d0:66:e0:ea:
28:94:bd:d7:ce:a4:50:a5:7e:6d:da:3f:08:5d:9a:9e:39:e2:
76:1a:8d:e7:30:56:06:88:3f:10:2b:cb:df:a2:3c:18:69:53:
fe:17:ef:d6:0f:2a:00:f5:bc:33:0e:9a:d5:64:0d:6f:3a:0e:
93:ae:37:f7:f2:8c:eb:fa:20:11:76:4c:23:be:37:fe:71:88:
d3:b9:66:32:85:95:a6:28:c6:69:36:4c:f1:38:45:66:14:db:
ce:c1:1d:04:95:d4:42:d1:e6:c0:2a:43:4e:16:9a:aa:e5:6e:
d4:0d:7a:83:46:b3:e2:80:67:59:e3:62:40:49:1a:be:f8:4e:
02:b5:60:0b:d0:b5:74:70:6d:14:20:17:e2:34:39:66:b1:b9:
bb:27:5b:b1:61:22:4e:7f:2e:e5:e8:88:7e:a5:94:50:dc:4d:
74:f9:66:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:21 2023 by rpki-client on console-ams.rpki-client.org