Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/ygUiRAsmioAqjNZkmD7WfM306a8.roa
File: ygUiRAsmioAqjNZkmD7WfM306a8.roa (raw, json)
Hash identifier: s/QdXrNooAQvxEsGSU5A7E3EcXENizRWoqqD11R1Vek=
Subject key identifier: CA:05:22:44:0B:26:8A:80:2A:8C:D6:64:98:3E:D6:7C:CD:F4:E9:AF
Certificate issuer: /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Certificate serial: 039000EB
Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/ygUiRAsmioAqjNZkmD7WfM306a8.roa
Signing time: Sat 01 Jan 2022 06:06:45 +0000
ROA not before: Sat 01 Jan 2022 06:06:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57707
IP address blocks: 92.119.184.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59769067 (0x39000eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Validity
Not Before: Jan 1 06:06:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ca0522440b268a802a8cd664983ed67ccdf4e9af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d4:e3:5b:bb:f1:23:11:c1:bb:a8:4e:73:10:
96:03:8e:75:2f:24:e5:80:84:29:42:06:66:f9:c6:
5c:02:dd:55:28:20:37:ac:04:5d:0b:54:4f:b7:83:
1a:aa:3b:bb:3c:5c:8e:2b:0c:16:76:3b:87:5b:20:
61:e1:9a:a3:0d:ec:ed:95:a5:ea:b9:a4:fc:41:02:
2d:52:d0:66:4b:d2:ed:1b:8a:e4:1f:63:1e:75:37:
8e:f9:b7:97:5d:26:5f:f7:e3:20:6d:0a:f0:c6:b9:
32:ba:54:fc:26:24:35:8b:75:2b:38:56:9d:a6:db:
cf:ca:3c:ff:1f:d8:d3:91:b7:34:41:50:ae:7c:76:
d5:8f:7e:ce:f0:56:35:7d:f1:98:42:d3:04:e1:de:
3f:25:15:3c:e9:5b:04:04:05:29:eb:3b:fe:3f:52:
7d:f1:9e:89:5f:62:5c:b2:96:8d:05:98:aa:fe:34:
d5:f2:2a:ff:e6:da:bb:ea:17:db:d8:9a:4b:d9:f4:
51:9a:4a:fe:96:97:22:45:c0:29:84:dd:62:35:b8:
0a:03:a6:57:ee:f5:f5:54:5a:1a:14:25:89:4b:67:
db:96:98:7a:ef:89:07:1c:e0:ef:1d:2a:ae:a7:62:
43:36:4e:66:9e:54:8a:31:a6:34:0f:63:e2:e8:f7:
cf:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:05:22:44:0B:26:8A:80:2A:8C:D6:64:98:3E:D6:7C:CD:F4:E9:AF
X509v3 Authority Key Identifier:
keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/ygUiRAsmioAqjNZkmD7WfM306a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.184.0/24
Signature Algorithm: sha256WithRSAEncryption
97:3a:6b:26:2d:94:92:f5:1a:58:7f:72:24:4a:4f:d0:0f:a9:
ed:29:1a:2b:3d:22:54:71:fb:2e:24:35:44:79:f6:d0:b9:9b:
cf:cc:10:99:49:5f:6e:17:d9:62:1f:5c:f6:98:e2:1c:a3:15:
f0:e9:19:f3:fa:9e:e7:f4:d1:63:a3:33:4e:4c:90:07:7f:0a:
74:29:85:18:a2:f0:3f:3e:77:25:12:8b:3d:c0:62:ab:53:89:
e6:39:61:e3:ce:15:1f:9c:35:42:30:8a:66:fc:79:2e:81:d5:
a7:82:46:1c:9a:7d:97:8f:cc:4f:f0:10:5f:21:dd:0c:50:02:
36:20:0c:51:08:59:ec:ab:f6:de:f0:5a:87:b0:9d:25:43:0b:
f5:ee:80:d5:b1:c9:0c:cb:d6:88:7b:c3:f5:b8:3e:2b:8a:41:
0a:90:89:95:24:7b:50:e7:12:3b:31:89:97:36:b3:6c:29:71:
0e:ee:14:fa:ae:29:79:24:dd:07:90:e1:82:c9:31:3d:b4:33:
3b:c2:ac:fb:6f:74:8d:bf:62:5e:0e:e9:d8:e8:ad:cb:b9:5d:
5e:3e:5d:1c:4f:86:ea:3c:46:fc:0d:0f:5c:52:33:f8:af:0e:
d4:d4:09:a7:da:99:a5:bb:de:a5:33:34:99:d2:25:9f:03:e1:
61:c5:62:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:09 2023 by rpki-client on console-ams.rpki-client.org