Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/YVONuP_ngHO4l4GTEgXN_e-LqTQ.roa
File: YVONuP_ngHO4l4GTEgXN_e-LqTQ.roa (raw, json)
Hash identifier: E0ZmQrNpCzLz7iOKXLA/LYPwQOVFsgrGrUZ8llzr1Pw=
Subject key identifier: 61:53:8D:B8:FF:E7:80:73:B8:97:81:93:12:05:CD:FD:EF:8B:A9:34
Certificate issuer: /CN=eccfdaee1e9eabd80237602961baa25abc69cd64
Certificate serial: 0EE7E079
Authority key identifier: EC:CF:DA:EE:1E:9E:AB:D8:02:37:60:29:61:BA:A2:5A:BC:69:CD:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/YVONuP_ngHO4l4GTEgXN_e-LqTQ.roa
Signing time: Sat 01 Jan 2022 02:57:42 +0000
ROA not before: Sat 01 Jan 2022 02:57:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50399
IP address blocks: 92.42.232.0/21 maxlen: 24
185.223.140.0/22 maxlen: 24
185.3.204.0/22 maxlen: 24
109.232.40.0/21 maxlen: 24
2a00:11e8::/32 maxlen: 64
2a03:3300::/32 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 250077305 (0xee7e079)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eccfdaee1e9eabd80237602961baa25abc69cd64
Validity
Not Before: Jan 1 02:57:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=61538db8ffe78073b89781931205cdfdef8ba934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:74:2e:30:66:31:fb:da:96:c1:87:f3:42:20:
99:75:3c:d9:ef:68:6c:8f:dc:fc:fe:01:9b:ec:f4:
b2:af:c8:2d:b5:40:2c:ae:94:1f:09:6e:a4:5c:06:
2b:6c:79:37:5b:17:fd:3f:cd:49:a9:c7:68:57:c6:
c1:15:ef:0f:48:64:32:1c:32:b2:70:c2:49:93:6f:
ac:1e:84:bf:e3:79:1f:1f:ad:0d:e3:fa:4c:b8:59:
c7:0e:d1:ac:54:55:a8:33:3a:7f:62:d0:2f:7e:df:
47:7f:4b:6a:bf:d2:0e:bf:30:3e:c9:0b:17:b7:7d:
c9:af:18:65:07:bb:2c:7d:ea:85:c4:9d:e0:50:c8:
b0:c9:30:ec:66:b6:da:dc:cd:6a:51:13:33:5c:5b:
5e:be:86:01:86:2e:18:82:9d:4b:63:0b:59:74:68:
9e:ab:84:e5:84:37:8c:d4:8d:4a:f2:6f:5b:2d:79:
36:eb:35:d3:d7:4b:57:c1:89:4b:59:06:89:ed:0a:
b6:18:e4:c2:45:e8:76:c4:2d:27:5a:a1:95:64:ad:
e5:99:c8:ab:2f:7a:e4:90:5b:19:a9:db:a3:6a:c2:
58:ac:48:d8:e8:b6:04:af:a1:7a:6a:2e:48:8b:70:
55:6c:a9:7c:ea:97:22:b8:5c:ec:8d:08:58:c2:14:
d2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:53:8D:B8:FF:E7:80:73:B8:97:81:93:12:05:CD:FD:EF:8B:A9:34
X509v3 Authority Key Identifier:
keyid:EC:CF:DA:EE:1E:9E:AB:D8:02:37:60:29:61:BA:A2:5A:BC:69:CD:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/YVONuP_ngHO4l4GTEgXN_e-LqTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.42.232.0/21
109.232.40.0/21
185.3.204.0/22
185.223.140.0/22
IPv6:
2a00:11e8::/32
2a03:3300::/32
Signature Algorithm: sha256WithRSAEncryption
43:35:2b:df:fc:b0:64:08:e9:4a:a6:6f:e1:17:68:7a:35:fc:
34:64:0c:c2:34:3c:7b:8a:2f:1a:31:5e:ec:e2:1c:94:1f:00:
b9:bd:f4:27:31:b1:ad:53:7b:e3:6e:8c:8e:1b:cc:65:11:07:
ec:12:62:45:fc:67:5f:2f:a0:ad:d5:69:1e:47:01:48:02:fe:
4f:12:97:0c:a6:b6:e7:f3:98:3e:70:49:64:46:09:58:29:ef:
fd:c7:95:17:2a:c9:e5:fc:f3:b3:ae:b8:57:e4:a2:03:0d:51:
0d:5d:f4:8d:12:ac:ff:3f:cc:97:fc:04:1c:de:91:7f:86:78:
10:5f:6b:f5:27:70:02:4a:a2:eb:62:c0:e8:46:19:fd:b8:22:
62:68:db:43:22:e9:9e:f2:bc:41:f6:88:33:92:b9:8f:58:e9:
e8:52:5e:90:88:bf:74:73:a1:e1:2e:cc:ca:c9:0d:39:c4:6d:
8a:23:ef:80:5a:49:c9:49:d1:33:68:a0:27:16:70:1b:16:fa:
0a:25:3a:e5:92:d4:46:e2:d4:e5:a5:62:de:c2:c3:33:88:17:
31:19:7c:56:70:5a:33:90:2a:ff:e9:07:7d:7e:92:16:1d:de:
a9:99:03:53:6b:2a:34:0f:cd:92:86:7f:3f:b1:25:2a:2c:ab:
7f:2e:49:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:23 2023 by rpki-client on console-ams.rpki-client.org