Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/Y6-W_1OuUoEP5VMcHhbSujn0Ics.roa
File: Y6-W_1OuUoEP5VMcHhbSujn0Ics.roa (raw, json)
Hash identifier: JBcd1fdbwq9Vv2ed8JC5iwdN269+M92DTGpYHmsDhws=
Subject key identifier: 63:AF:96:FF:53:AE:52:81:0F:E5:53:1C:1E:16:D2:BA:39:F4:21:CB
Certificate issuer: /CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Certificate serial: 0181CD9A94DEDC7711AEC373906E6CEC92CF
Authority key identifier: 28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/Y6-W_1OuUoEP5VMcHhbSujn0Ics.roa
Signing time: Tue 05 Jul 2022 09:04:28 +0000
ROA not before: Tue 05 Jul 2022 09:04:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 193.239.236.0/23 maxlen: 24
45.150.174.0/24 maxlen: 24
45.139.196.0/22 maxlen: 24
185.115.207.0/24 maxlen: 24
193.239.196.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:cd:9a:94:de:dc:77:11:ae:c3:73:90:6e:6c:ec:92:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Validity
Not Before: Jul 5 09:04:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=63af96ff53ae52810fe5531c1e16d2ba39f421cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:64:c3:7d:a3:42:3a:f2:66:91:f8:13:e0:e1:
da:ea:e0:62:a7:6a:f1:73:63:7e:5f:0a:3f:2d:a3:
67:d9:af:80:b7:7b:50:13:e7:96:c3:d9:91:b8:12:
76:a4:8f:e3:38:f7:b4:37:18:38:76:d4:cd:c8:db:
c9:8b:f6:65:24:70:24:34:07:b0:9e:84:c2:78:c8:
89:b9:75:b0:77:f8:de:b1:05:cd:a8:e1:1e:3d:c3:
ac:76:fb:54:0f:0a:b8:ae:27:68:ca:c9:c0:3d:a7:
7e:41:9b:34:1b:ee:8d:97:82:d0:13:47:d2:8f:d7:
48:b8:69:3c:ab:6c:d5:2a:27:ee:3a:f5:32:09:aa:
4e:40:e3:52:39:91:46:5b:1d:5f:e0:1c:b8:e1:16:
69:05:bb:c1:9b:0f:ed:d0:fc:2d:df:bb:b7:95:a6:
93:c6:8b:93:87:cf:7f:ff:29:a0:0d:c6:cf:70:05:
01:ab:79:81:da:bf:1c:0c:e2:9b:ac:a3:66:18:f5:
71:33:51:dd:eb:ca:e8:04:73:fd:c0:ca:26:6b:64:
17:a5:f7:22:de:c6:a5:4d:65:5e:6e:2a:8f:c5:24:
ce:1f:16:b5:62:4c:b8:db:62:8f:89:4f:99:f0:59:
10:95:34:6e:22:62:fa:2b:91:5f:f0:73:2d:af:a6:
b6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:AF:96:FF:53:AE:52:81:0F:E5:53:1C:1E:16:D2:BA:39:F4:21:CB
X509v3 Authority Key Identifier:
keyid:28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/Y6-W_1OuUoEP5VMcHhbSujn0Ics.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.196.0/22
45.150.174.0/24
185.115.207.0/24
193.239.196.0/23
193.239.236.0/23
Signature Algorithm: sha256WithRSAEncryption
56:41:5f:00:fe:ba:af:97:14:50:a7:12:de:d1:dc:ca:30:0e:
93:d4:de:34:11:46:80:56:fb:58:e1:01:00:aa:67:2e:b0:c6:
65:9d:82:ff:33:94:ea:77:13:03:02:64:99:be:8e:56:42:22:
35:bc:30:9a:1b:2d:d8:93:ff:15:19:c6:14:de:87:b9:82:11:
a7:76:ed:3b:bf:cb:90:de:80:82:53:fd:cb:ca:56:e1:9a:86:
fe:c3:71:60:5d:55:36:b4:01:42:2f:95:bb:b3:3f:6e:09:5d:
77:11:d5:72:f8:2b:f1:5c:2e:a4:db:86:bd:e3:8d:24:f3:25:
f1:17:3a:a7:98:e4:dd:d4:9a:ea:53:77:c5:91:cf:2d:74:53:
94:98:86:4a:e7:49:51:94:76:5a:5e:fb:a3:8e:a9:01:4a:55:
e8:f0:48:b2:9b:43:ad:1e:0b:0f:83:8b:7d:8c:64:cb:ca:e3:
3e:f8:9b:18:3d:24:bb:c8:d0:9c:87:d6:27:77:23:1e:31:35:
09:6c:77:4c:bc:68:b3:e5:dd:e3:b9:8b:91:24:b9:fc:ac:6a:
e5:b7:ef:d8:fa:f7:3c:b0:4d:04:db:9e:6e:8d:02:11:fe:f0:
a3:4a:05:e5:b9:64:1d:4d:b2:6c:3b:f2:7a:9b:bd:96:c3:d0:
cc:84:df:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:43 2024 by rpki-client on console-ams.rpki-client.org