Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/Yc_A3L2-NYHn1hJY33W5Ch3R9LY.roa
File: Yc_A3L2-NYHn1hJY33W5Ch3R9LY.roa (raw, json)
Hash identifier: CkLXTXxo32PQKfSUgxWHTL8xFkfCD9GRvM46lDjLTCI=
Subject key identifier: 61:CF:C0:DC:BD:BE:35:81:E7:D6:12:58:DF:75:B9:0A:1D:D1:F4:B6
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 485FA380
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/Yc_A3L2-NYHn1hJY33W5Ch3R9LY.roa
Signing time: Sat 01 Jan 2022 03:00:25 +0000
ROA not before: Sat 01 Jan 2022 03:00:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41112
IP address blocks: 146.185.232.0/24 maxlen: 24
37.9.51.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1214227328 (0x485fa380)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 1 03:00:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=61cfc0dcbdbe3581e7d61258df75b90a1dd1f4b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c5:27:ea:c9:49:20:fa:f2:92:a7:3b:25:93:
e8:0e:f7:ac:29:e9:fb:53:d6:2d:ab:56:c1:94:27:
fc:f0:37:ea:7f:d5:0c:10:0d:7a:2e:a8:dd:b8:8d:
c4:54:61:77:b1:66:ec:76:c5:5c:08:7c:4f:15:99:
83:e5:e6:82:e6:c5:f1:23:d2:e8:6b:9c:ca:ff:aa:
7f:a9:e8:5f:77:db:5c:d2:39:29:0d:de:0b:66:5a:
1d:51:db:b9:c4:d7:c8:c1:aa:82:18:f2:e3:70:40:
98:71:15:b2:10:73:0c:5f:fd:60:74:ce:e5:02:76:
17:6b:0d:36:d1:be:65:d6:c2:1f:2e:1c:5f:4c:52:
27:98:aa:60:3d:4f:bb:9e:5a:23:bf:07:ad:e1:49:
53:c5:41:2b:0a:c6:7c:88:9c:a1:ee:b4:ea:55:69:
ba:47:38:eb:79:5f:49:d4:40:b7:de:ec:0f:6a:8a:
d7:86:96:36:3e:20:90:c5:fe:8f:ff:65:1d:8a:42:
7f:8c:f8:16:9a:e9:96:02:f7:22:3d:0d:e7:05:12:
10:f6:da:be:25:5e:07:a3:90:3d:cd:71:61:13:1b:
37:c2:3a:13:6d:8e:e7:23:76:a4:6c:bd:bf:67:50:
b8:0a:f3:33:04:f0:99:b2:d9:49:a1:07:e5:9e:88:
7a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:CF:C0:DC:BD:BE:35:81:E7:D6:12:58:DF:75:B9:0A:1D:D1:F4:B6
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/Yc_A3L2-NYHn1hJY33W5Ch3R9LY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.9.51.0/24
146.185.232.0/24
Signature Algorithm: sha256WithRSAEncryption
65:25:d0:6d:ad:bb:a8:57:33:34:92:aa:b2:03:a0:3c:ae:ef:
05:19:bc:fc:ac:2a:29:26:e8:13:ff:fa:e6:21:b6:f5:df:0e:
1c:51:08:12:6a:d6:cc:b8:04:22:52:a7:f2:70:5e:2f:73:99:
99:c2:29:e9:eb:53:b1:31:de:ec:97:e7:b7:80:18:3d:a6:b1:
bd:58:e1:b1:c1:0e:68:8a:82:d9:50:f2:97:17:c6:02:f5:2f:
4e:07:d5:34:14:b3:0b:1f:e1:0d:83:0f:ce:d2:0b:ce:d2:64:
55:d9:a1:29:5a:01:8c:be:e2:a7:08:32:ba:b8:97:5f:58:19:
79:e8:af:e5:10:10:9f:b0:76:bd:d0:20:3d:e5:45:43:c0:eb:
c9:0f:ad:3a:e9:51:86:34:3a:68:76:fb:24:78:9e:f5:fe:ca:
3f:c7:7a:73:54:b3:e6:74:c1:98:fb:25:7d:70:1e:9a:29:7a:
94:b5:b8:09:23:67:9e:45:7a:70:9a:88:d6:f3:d2:ad:5b:6c:
20:bc:fd:0b:a8:6d:60:d6:58:29:44:c5:4b:3d:e4:c9:f8:97:
73:59:1d:e0:71:e6:0f:b0:0d:14:6d:43:0d:dc:c8:61:68:b2:
d1:cd:47:24:8d:88:e9:22:8f:95:a9:f3:b8:50:c5:8e:5e:eb:
15:ce:c2:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:29 2024 by rpki-client on console-fra.rpki-client.org