Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/yXnyGbO_doxNcOBmTkr_LseoDtA.roa
File: yXnyGbO_doxNcOBmTkr_LseoDtA.roa (raw, json)
Hash identifier: u/ALLCPEq7lCs3rexhzRK0h2hLH25XgGole94lYQdPg=
Subject key identifier: C9:79:F2:19:B3:BF:76:8C:4D:70:E0:66:4E:4A:FF:2E:C7:A8:0E:D0
Certificate issuer: /CN=30056b0375d894b93cb0e26d9b4d64a08c58371e
Certificate serial: 018313239981421642EF05F3F6D729AD34BB
Authority key identifier: 30:05:6B:03:75:D8:94:B9:3C:B0:E2:6D:9B:4D:64:A0:8C:58:37:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MAVrA3XYlLk8sOJtm01koIxYNx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/yXnyGbO_doxNcOBmTkr_LseoDtA.roa
Signing time: Tue 06 Sep 2022 14:10:43 +0000
ROA not before: Tue 06 Sep 2022 14:10:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 185.146.155.0/24 maxlen: 24
185.146.154.0/24 maxlen: 24
2a07:4f80::/44 maxlen: 44
2a07:4f80:10::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:13:23:99:81:42:16:42:ef:05:f3:f6:d7:29:ad:34:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30056b0375d894b93cb0e26d9b4d64a08c58371e
Validity
Not Before: Sep 6 14:10:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c979f219b3bf768c4d70e0664e4aff2ec7a80ed0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:46:f6:13:56:67:f6:92:0e:64:ee:6a:14:11:
27:59:ee:50:a5:7d:dc:c0:61:68:d1:43:64:7e:5d:
d9:35:12:53:16:17:dc:84:23:60:12:a2:93:04:03:
c8:56:fd:2b:88:df:c2:fb:d4:b6:da:80:d7:22:bc:
61:9d:47:0d:48:42:4e:8c:f5:54:b4:95:17:a0:72:
4f:89:6b:5a:97:b7:bf:6d:fc:3d:c5:b2:23:29:71:
7e:a8:6d:44:b9:fd:a7:ed:8d:6a:b4:64:5f:df:6f:
7a:b7:73:24:11:59:c4:c6:6f:1b:cf:b1:d2:e6:b5:
e2:a1:f5:11:96:f8:93:a6:cc:88:bf:3d:55:7f:7f:
c3:66:4c:23:2c:d6:1b:a0:a4:ec:7a:e6:bc:bf:bf:
ec:dd:11:31:cd:47:b2:28:31:ed:78:b3:ca:62:f6:
b4:f8:8c:b9:41:16:0c:2f:4d:b7:8f:62:f0:82:96:
96:85:8b:cd:10:0f:a3:23:48:70:2d:38:f0:03:6d:
80:05:02:ac:12:70:26:b5:14:cc:e4:42:9a:b1:d2:
a2:49:df:f4:fa:09:6a:f6:ff:2d:6b:64:f3:17:39:
53:ef:d0:9e:ba:8e:16:79:43:3c:31:8d:35:18:4d:
ba:08:bd:19:96:32:45:93:ba:08:90:0b:36:24:7e:
c7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:79:F2:19:B3:BF:76:8C:4D:70:E0:66:4E:4A:FF:2E:C7:A8:0E:D0
X509v3 Authority Key Identifier:
keyid:30:05:6B:03:75:D8:94:B9:3C:B0:E2:6D:9B:4D:64:A0:8C:58:37:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MAVrA3XYlLk8sOJtm01koIxYNx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/yXnyGbO_doxNcOBmTkr_LseoDtA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.146.154.0/23
IPv6:
2a07:4f80::/43
Signature Algorithm: sha256WithRSAEncryption
77:10:c1:81:eb:6e:be:5d:18:69:6f:f1:c8:63:9d:ee:5c:09:
58:67:c6:f6:dd:4d:20:c5:58:19:a6:e4:0d:62:37:14:88:5f:
40:dd:29:5c:7b:53:a7:48:80:78:54:f3:5b:42:65:ec:e3:40:
3a:b9:74:76:96:83:cc:14:3c:3f:00:6e:bb:81:ad:22:bf:5c:
50:65:d8:84:5e:a8:92:c7:df:9a:e8:57:7d:05:59:a0:f1:1e:
b3:ec:a9:1e:41:f1:70:62:06:1f:d2:03:50:db:18:60:e4:74:
bb:b4:40:29:47:89:9f:2e:10:aa:52:d8:8e:d9:2d:19:72:ea:
e2:19:1c:5e:d5:11:df:7f:04:8c:23:02:8b:0c:79:68:f4:34:
1b:44:d1:df:9d:1b:ef:43:6a:f3:7a:62:d4:89:16:7e:0d:b2:
ec:db:09:b7:b8:69:2a:09:63:ed:5d:e6:08:7d:93:ab:5c:44:
52:9f:5c:01:b6:03:9b:75:ab:d7:57:c4:46:da:1f:6b:17:fc:
ec:c3:c0:fe:0f:f6:2c:25:df:af:58:1f:85:4d:97:ec:bd:05:
24:0d:81:cd:a6:91:e5:06:ae:09:39:9f:5b:34:46:c7:85:5c:
da:1f:01:cd:31:00:bd:06:73:83:6a:e3:fd:f3:9a:47:6c:3f:
22:c8:2f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:09 2024 by rpki-client on console-fra.rpki-client.org