Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/YyvXft_Ugo4gujd6xy7ILVSXGN0.roa
File: YyvXft_Ugo4gujd6xy7ILVSXGN0.roa (raw, json)
Hash identifier: H5LmIURmyC/kyW23PTi9ibDM/iokOzUhBZy0XGP6tts=
Subject key identifier: 63:2B:D7:7E:DF:D4:82:8E:20:BA:37:7A:C7:2E:C8:2D:54:97:18:DD
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 1386056C
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/YyvXft_Ugo4gujd6xy7ILVSXGN0.roa
Signing time: Sat 01 Jan 2022 05:56:17 +0000
ROA not before: Sat 01 Jan 2022 05:56:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62071
IP address blocks: 185.212.8.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 327550316 (0x1386056c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 1 05:56:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=632bd77edfd4828e20ba377ac72ec82d549718dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8d:15:32:c7:53:ee:3b:1a:15:04:e7:da:29:
6a:71:e8:c8:64:a7:ca:e6:ef:56:d1:7b:ca:d8:45:
a1:63:f7:0d:3d:2c:ac:90:d6:99:2b:0d:72:c2:61:
9b:c6:19:18:ac:cf:12:dd:d6:d0:50:69:47:0e:c4:
f5:95:9d:82:a1:36:9a:76:9c:5c:cd:ed:5b:ba:3c:
7a:55:ea:a0:86:9a:72:5f:98:50:28:40:e7:a6:fe:
27:32:70:b8:bb:82:3a:83:c0:5a:86:f9:ed:44:24:
f9:d4:50:af:ae:6f:fb:0f:8d:aa:4f:b6:bd:ce:33:
c7:f0:72:09:82:e8:d2:82:47:86:44:e8:3e:8f:27:
fa:d4:76:12:89:bf:f5:73:41:a7:08:1a:6d:ef:a0:
66:d7:ee:5c:7b:8e:88:9e:26:ee:bf:a5:74:60:6b:
dd:b2:e7:60:a2:f9:b8:ed:01:b2:11:10:73:d9:ad:
38:1f:62:4c:0d:18:7a:f5:93:fb:7d:8d:21:92:9f:
b3:18:1a:1d:ae:c8:4e:f1:e2:86:d7:e2:1e:7f:48:
fc:13:5f:dc:58:f0:59:23:1f:63:a7:c7:5e:2a:30:
9b:1c:4f:52:ec:62:5d:19:a8:02:14:26:66:7b:ca:
d1:6d:02:5e:a0:c9:5a:3d:38:ef:be:d8:84:07:e9:
0a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:2B:D7:7E:DF:D4:82:8E:20:BA:37:7A:C7:2E:C8:2D:54:97:18:DD
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/YyvXft_Ugo4gujd6xy7ILVSXGN0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.8.0/24
Signature Algorithm: sha256WithRSAEncryption
13:5d:e6:ca:d7:a2:3b:ce:9f:9f:c3:e4:00:e4:3b:c6:78:e9:
b5:2d:11:0e:3b:d7:1d:04:b3:b1:a3:18:94:6e:57:0e:3a:af:
b6:78:ba:2b:40:81:2d:10:f1:db:40:1d:70:90:bb:15:2e:2c:
a4:a7:0f:04:54:80:f1:d3:b7:41:0b:b0:71:2e:cd:61:1d:64:
7d:6c:e2:e0:91:c6:b1:66:ad:d4:28:bd:5f:81:65:28:9c:5a:
27:d8:a7:83:06:2d:51:cc:63:c4:c5:45:e6:44:07:e0:61:ac:
4b:4d:84:1e:8a:92:1f:81:80:b5:19:61:bb:7b:e0:e7:a2:78:
b2:f6:d7:c9:10:36:b2:d9:56:77:46:7b:ca:f1:af:34:67:be:
17:82:6d:21:d0:d6:a7:95:03:29:d7:3e:9e:a4:6a:46:50:cb:
d9:81:f1:c5:18:3c:ee:06:c7:7a:c1:12:d4:59:01:14:b4:54:
87:26:ed:fa:d0:51:5e:22:f0:56:99:2c:c8:98:54:33:cf:e7:
ab:ed:59:39:62:c2:9e:71:1f:75:b7:a9:d8:85:6f:63:44:bc:
54:18:63:c5:b6:f4:69:3d:72:56:e5:9a:ad:8b:1d:32:41:5c:
d5:82:0f:51:79:61:73:0f:9a:c6:ef:10:fd:a2:ae:63:ca:b4:
a1:33:2f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:50 2023 by rpki-client on console-fra.rpki-client.org