Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b7f1da-467a-4362-8b2e-1970de84a1f0/1/yciSf8qsowy-3-UdpDYMiOT_syo.roa
File: yciSf8qsowy-3-UdpDYMiOT_syo.roa (raw, json)
Hash identifier: gcbAPOpkqi1LhogpGLdkZ/MORzZZIZ4J/ntlF1xyO94=
Subject key identifier: C9:C8:92:7F:CA:AC:A3:0C:BE:DF:E5:1D:A4:36:0C:88:E4:FF:B3:2A
Certificate issuer: /CN=c0142e5d5cfaa452166bc7b55a65558f524d6751
Certificate serial: 3A1BF2F6
Authority key identifier: C0:14:2E:5D:5C:FA:A4:52:16:6B:C7:B5:5A:65:55:8F:52:4D:67:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b7f1da-467a-4362-8b2e-1970de84a1f0/1/yciSf8qsowy-3-UdpDYMiOT_syo.roa
Signing time: Sat 01 Jan 2022 09:53:53 +0000
ROA not before: Sat 01 Jan 2022 09:53:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198454
IP address blocks: 128.0.52.0/24 maxlen: 24
5.154.187.0/24 maxlen: 24
185.33.132.0/22 maxlen: 24
31.211.184.0/21 maxlen: 24
188.208.100.0/24 maxlen: 24
94.24.38.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 974910198 (0x3a1bf2f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0142e5d5cfaa452166bc7b55a65558f524d6751
Validity
Not Before: Jan 1 09:53:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c9c8927fcaaca30cbedfe51da4360c88e4ffb32a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:64:9f:9d:c1:e0:d8:e6:36:4b:36:a4:95:fe:
9d:b2:0d:bb:4b:61:72:3e:40:33:4b:ff:8b:3c:ca:
b7:f8:71:53:1d:af:33:af:b5:52:5d:98:b1:f4:2b:
2c:d9:15:80:9b:f2:66:5a:6e:a1:48:07:6e:ed:9b:
7f:59:5f:f3:58:03:a3:b0:7f:01:35:d0:d2:e6:d9:
d8:57:7f:3f:b3:a7:f5:8f:8f:ca:55:54:d2:c5:78:
b4:e7:18:2e:b1:2e:7d:3f:74:0c:19:6f:b2:32:c2:
01:4c:80:ad:a7:32:aa:8e:01:38:52:09:db:d7:f7:
91:fe:f1:92:f5:26:7f:0d:6f:d9:9f:69:19:9e:7d:
20:f0:ce:ce:9d:41:8e:38:49:95:c2:dc:e5:af:be:
dd:18:aa:05:25:c0:bc:19:c5:22:ef:0e:bd:38:4b:
3f:0c:57:3b:e7:03:d2:6f:bc:56:36:2a:72:e2:81:
03:4d:7c:c1:f1:98:7d:d9:10:c3:24:af:6b:76:31:
e8:27:7d:02:6a:b6:10:e4:50:2d:e5:39:8d:d6:76:
85:1a:00:f1:16:03:dc:b6:90:9b:a2:f1:b3:5f:d6:
b9:3c:a5:56:08:d6:e6:bb:4b:3d:7d:04:96:44:19:
62:50:97:b3:c8:08:b2:a5:e0:a9:ca:cc:fb:8a:fb:
13:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:C8:92:7F:CA:AC:A3:0C:BE:DF:E5:1D:A4:36:0C:88:E4:FF:B3:2A
X509v3 Authority Key Identifier:
keyid:C0:14:2E:5D:5C:FA:A4:52:16:6B:C7:B5:5A:65:55:8F:52:4D:67:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b7f1da-467a-4362-8b2e-1970de84a1f0/1/yciSf8qsowy-3-UdpDYMiOT_syo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b7f1da-467a-4362-8b2e-1970de84a1f0/1/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.187.0/24
31.211.184.0/21
94.24.38.0/23
128.0.52.0/24
185.33.132.0/22
188.208.100.0/24
Signature Algorithm: sha256WithRSAEncryption
00:a9:6e:7c:02:ae:0b:78:33:ba:4a:ba:cd:46:ac:b8:a4:30:
c2:ad:05:9b:1a:5e:54:c0:8b:e4:2c:76:f1:b2:a7:a8:2d:61:
ba:52:6b:ca:48:8f:43:23:d0:9b:df:68:4e:7e:b2:0f:c7:2f:
94:11:8f:d7:88:c4:5a:e6:26:9b:b2:51:e2:69:d8:0f:f3:47:
91:e6:39:2c:99:82:0b:f8:95:78:eb:67:1e:69:c5:f0:2d:34:
ae:cf:cc:d6:0b:1b:92:c3:5f:b1:b3:b0:b3:56:9b:01:2a:98:
eb:69:21:16:f6:c4:08:cb:26:82:76:ae:42:c2:2d:7b:21:a8:
b7:73:59:81:35:76:96:d7:2a:d9:66:b0:06:d8:b2:ad:21:00:
f3:1d:61:a6:22:ac:1c:df:5e:54:c8:57:e5:d3:48:02:b1:25:
6d:23:4c:50:fe:d3:71:8a:36:c9:28:df:63:c1:87:bd:a0:3e:
21:67:5a:95:1b:bc:fb:fa:fa:90:af:8a:44:41:9f:af:61:66:
5c:ea:a3:4d:f2:bc:b1:66:44:a6:d1:43:bd:06:3d:cc:01:58:
bd:be:06:df:29:46:ad:c2:17:bd:0d:4c:bd:6d:3b:af:95:c4:
62:9e:b3:c1:24:a2:cf:e5:2d:22:b0:bb:80:8f:ce:17:17:13:
1f:d2:71:17
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIEOhvy9jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
MDE0MmU1ZDVjZmFhNDUyMTY2YmM3YjU1YTY1NTU4ZjUyNGQ2NzUxMB4XDTIyMDEw
MTA5NTM1M1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzljODkyN2ZjYWFj
YTMwY2JlZGZlNTFkYTQzNjBjODhlNGZmYjMyYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAPJkn53B4NjmNks2pJX+nbINu0thcj5AM0v/izzKt/hxUx2v
M6+1Ul2YsfQrLNkVgJvyZlpuoUgHbu2bf1lf81gDo7B/ATXQ0ubZ2Fd/P7On9Y+P
ylVU0sV4tOcYLrEufT90DBlvsjLCAUyAracyqo4BOFIJ29f3kf7xkvUmfw1v2Z9p
GZ59IPDOzp1BjjhJlcLc5a++3RiqBSXAvBnFIu8OvThLPwxXO+cD0m+8VjYqcuKB
A018wfGYfdkQwySva3Yx6Cd9Amq2EORQLeU5jdZ2hRoA8RYD3LaQm6Lxs1/WuTyl
VgjW5rtLPX0ElkQZYlCXs8gIsqXgqcrM+4r7E2UCAwEAAaOCAicwggIjMB0GA1Ud
DgQWBBTJyJJ/yqyjDL7f5R2kNgyI5P+zKjAfBgNVHSMEGDAWgBTAFC5dXPqkUhZr
x7VaZVWPUk1nUTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3dCUXVYVno2cEZJV2E4ZTFXbVZWajFKTloxRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjQvYjdmMWRhLTQ2N2EtNDM2Mi04YjJlLTE5NzBkZTg0YTFmMC8x
L3ljaVNmOHFzb3d5LTMtVWRwRFlNaU9UX3N5by5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjQv
YjdmMWRhLTQ2N2EtNDM2Mi04YjJlLTE5NzBkZTg0YTFmMC8xL3dCUXVYVno2cEZJ
V2E4ZTFXbVZWajFKTloxRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA9
BggrBgEFBQcBBwEB/wQuMCwwKgQCAAEwJAMEAAWauwMEAx/TuAMEAV4YJgMEAIAA
NAMEArkhhAMEALzQZDANBgkqhkiG9w0BAQsFAAOCAQEAAKlufAKuC3gzukq6zUas
uKQwwq0FmxpeVMCL5Cx28bKnqC1hulJrykiPQyPQm99oTn6yD8cvlBGP14jEWuYm
m7JR4mnYD/NHkeY5LJmCC/iVeOtnHmnF8C00rs/M1gsbksNfsbOws1abASqY62kh
FvbECMsmgnauQsIteyGot3NZgTV2ltcq2WawBtiyrSEA8x1hpiKsHN9eVMhX5dNI
ArElbSNMUP7TcYo2ySjfY8GHvaA+IWdalRu8+/r6kK+KREGfr2FmXOqjTfK8sWZE
ptFDvQY9zAFYvb4G3ylGrcIXvQ1MvW07r5XEYp6zwSSiz+UtIrC7gI/OFxcTH9Jx
Fw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:37 2024 by rpki-client on console-fra.rpki-client.org