Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/0e0821-aee9-4b96-8776-590fb949d104/1/YieTvrn_ExRBvgQcIgjZyQcu1Bo.roa
File: YieTvrn_ExRBvgQcIgjZyQcu1Bo.roa (raw, json)
Hash identifier: zJmRZ2gJfujJP2yEzKhbvraUC3jcAWpG6uzslBAeVQ0=
Subject key identifier: 62:27:93:BE:B9:FF:13:14:41:BE:04:1C:22:08:D9:C9:07:2E:D4:1A
Certificate issuer: /CN=16a04ee04b12823e853ff243d36551e4ce683a73
Certificate serial: 0E49C4C3
Authority key identifier: 16:A0:4E:E0:4B:12:82:3E:85:3F:F2:43:D3:65:51:E4:CE:68:3A:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FqBO4EsSgj6FP_JD02VR5M5oOnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/0e0821-aee9-4b96-8776-590fb949d104/1/YieTvrn_ExRBvgQcIgjZyQcu1Bo.roa
Signing time: Sat 01 Jan 2022 01:59:27 +0000
ROA not before: Sat 01 Jan 2022 01:59:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21459
IP address blocks: 185.203.60.0/22 maxlen: 24
217.68.64.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 239715523 (0xe49c4c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16a04ee04b12823e853ff243d36551e4ce683a73
Validity
Not Before: Jan 1 01:59:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=622793beb9ff131441be041c2208d9c9072ed41a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a0:0d:26:cf:f5:c0:1b:5c:93:d2:bb:ac:e3:
62:28:27:86:cd:c1:8e:c5:a6:05:c1:d8:b9:0f:22:
11:79:6c:d3:e5:91:71:60:f6:fb:0b:2c:50:e9:75:
e3:e7:96:f8:92:cd:62:76:1a:fa:f2:3e:05:ad:5d:
bf:63:9a:3b:89:15:2b:dd:d8:68:9f:a0:8a:c5:0b:
09:58:23:cf:35:dd:c2:e9:b8:1d:61:9c:3d:42:91:
58:5b:ce:4f:fe:af:e0:78:cc:c4:d0:3a:30:08:90:
1a:f2:41:d1:ea:32:6f:10:56:1f:2e:0e:76:20:ee:
b4:89:a2:b7:97:69:20:05:79:e9:fa:9a:ad:1a:1c:
03:d4:d0:60:45:3e:55:43:5d:96:f3:48:bd:e6:02:
6a:dd:f2:67:f0:f7:68:04:74:a5:fd:e7:15:4f:85:
50:75:2f:08:61:60:d0:99:1d:5b:fd:c5:0b:ad:ce:
25:0f:b8:7c:c8:7c:56:4a:bf:5b:df:e2:aa:56:57:
a6:21:3f:ed:52:0b:be:0b:ce:93:cd:10:6d:6f:2d:
bf:bd:39:de:fa:c3:d6:1e:a6:41:47:5e:ba:f4:ea:
bb:df:55:76:af:4f:21:9c:9d:22:e1:49:40:50:51:
f8:97:74:ee:37:aa:bf:2d:95:24:49:af:af:db:c2:
71:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:27:93:BE:B9:FF:13:14:41:BE:04:1C:22:08:D9:C9:07:2E:D4:1A
X509v3 Authority Key Identifier:
keyid:16:A0:4E:E0:4B:12:82:3E:85:3F:F2:43:D3:65:51:E4:CE:68:3A:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FqBO4EsSgj6FP_JD02VR5M5oOnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0e0821-aee9-4b96-8776-590fb949d104/1/YieTvrn_ExRBvgQcIgjZyQcu1Bo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0e0821-aee9-4b96-8776-590fb949d104/1/FqBO4EsSgj6FP_JD02VR5M5oOnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.203.60.0/22
217.68.64.0/20
Signature Algorithm: sha256WithRSAEncryption
9a:e6:ec:c9:4d:c8:c3:63:10:95:da:2c:a3:8e:58:45:3b:7a:
c9:57:a1:06:85:ab:99:5f:18:57:0d:ad:a6:f4:d4:7c:2c:98:
4c:39:7d:4a:16:cd:62:cc:0b:d9:e3:f2:6d:36:cb:bf:8d:82:
bf:3b:4e:27:dd:86:13:83:7d:be:45:e5:ec:9c:eb:bb:d4:b5:
49:8c:f4:f5:d2:c5:68:32:49:43:32:fa:6e:59:b2:a8:56:9c:
f7:64:69:3a:6d:02:34:85:a5:21:d8:fd:01:ed:af:d0:46:8f:
89:e1:81:d4:1a:55:e2:a2:49:6b:f1:22:5f:bc:cd:3d:6d:27:
bc:ff:dd:0e:e4:87:90:ff:bd:d5:fb:69:da:51:aa:91:d7:b5:
c6:15:4d:10:c4:e7:ac:16:f7:d5:40:d2:8f:e9:ba:e8:b6:0e:
e2:8e:71:23:42:a8:5e:e8:4c:0a:a7:44:62:db:82:2a:5d:be:
e7:76:ca:5d:1c:a0:66:08:3f:e3:a4:eb:99:24:00:56:09:1e:
3a:46:4d:a8:71:1e:61:2f:ef:b0:36:a1:03:5a:bf:e2:e6:62:
68:42:94:67:dd:55:72:15:ff:3f:80:06:7c:cc:4a:5b:ce:f9:
e0:85:b4:11:d0:3a:db:cb:66:f0:69:69:8f:54:d5:78:3c:7f:
e3:c4:4e:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:43 2023 by rpki-client on console-ams.rpki-client.org