Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/ygcA7W4ESVWiEVQH26I3d9hyriw.roa
File: ygcA7W4ESVWiEVQH26I3d9hyriw.roa (raw, json)
Hash identifier: /eBRPzDnBt+j6LPRfiFjggLGUiJGzAeSmJXFpit/hG0=
Subject key identifier: CA:07:00:ED:6E:04:49:55:A2:11:54:07:DB:A2:37:77:D8:72:AE:2C
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 1403F03B
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/ygcA7W4ESVWiEVQH26I3d9hyriw.roa
Signing time: Mon 14 Feb 2022 07:38:02 +0000
ROA not before: Mon 14 Feb 2022 07:38:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209945
IP address blocks: 5.182.28.0/22 maxlen: 22
2.56.0.0/22 maxlen: 22
5.252.168.0/22 maxlen: 22
92.118.108.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 335802427 (0x1403f03b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Feb 14 07:38:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ca0700ed6e044955a2115407dba23777d872ae2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:93:0b:0a:38:3e:65:3c:a3:2a:5b:6b:18:60:
ca:21:1d:24:5a:0b:84:a8:6e:82:96:9b:31:f1:82:
b8:5b:bc:50:d8:69:c1:6b:36:95:d9:ec:72:86:ce:
45:8e:ef:8c:fb:62:e1:f8:21:51:b1:44:2b:e2:58:
d3:17:b1:95:c6:5e:97:75:78:a5:35:bc:fc:50:10:
f0:1d:c3:1c:50:96:3a:cf:9c:43:d6:43:5f:21:21:
04:86:11:43:79:e5:54:31:d5:0e:9b:37:91:87:1e:
3e:2b:3e:6a:b5:70:3b:d5:3d:1b:7d:21:6c:1b:64:
51:47:ef:55:37:4c:67:48:ff:7b:41:71:53:58:0c:
84:e4:78:7b:3b:6c:a6:42:02:aa:88:29:8e:20:38:
8a:a7:eb:4c:b5:88:ec:75:71:37:50:53:9a:f9:df:
cc:ea:bd:6c:41:63:da:eb:77:6e:b8:5b:f7:b9:54:
83:fb:ce:e2:bc:6d:cc:42:dc:88:19:fb:77:cf:ca:
fc:6b:29:ec:76:fa:a7:d6:cb:81:80:94:6a:b7:96:
a0:7d:70:38:ea:ce:19:db:4d:6b:69:7a:64:06:e0:
28:7a:d6:6c:61:55:02:12:a1:a4:ea:d7:c1:3a:8b:
8d:ce:3d:3e:88:cf:05:71:a2:67:0d:6e:c8:5a:df:
28:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:07:00:ED:6E:04:49:55:A2:11:54:07:DB:A2:37:77:D8:72:AE:2C
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/ygcA7W4ESVWiEVQH26I3d9hyriw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.0.0/22
5.182.28.0/22
5.252.168.0/22
92.118.108.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:5e:ca:f5:f5:d4:fa:16:72:6c:cf:90:38:91:8a:e2:3f:1e:
0b:c4:f6:34:4a:fd:6b:ea:5b:12:8e:38:48:fe:33:d1:8a:73:
74:47:0e:93:96:34:52:52:ca:ad:3c:5f:75:7f:eb:1a:06:37:
80:c6:22:aa:da:82:8f:ec:ad:11:a9:03:61:bc:d1:ec:38:99:
f4:94:03:3a:24:02:2e:46:b2:9b:c4:52:f9:64:f1:22:0c:8b:
b2:f8:9b:8e:ed:24:ee:91:c2:0d:00:99:1c:81:0e:f2:02:7a:
28:14:60:7b:bb:60:d2:1a:c6:73:85:0d:b7:04:77:b9:70:94:
1b:2c:a6:15:7f:e3:d7:61:df:b8:97:ba:d2:26:e5:f8:5f:00:
62:74:0e:e1:a1:58:c3:a5:01:01:a9:e9:25:58:4d:f1:b1:71:
5c:0e:a9:f6:1e:6c:2c:02:1b:bf:c0:ad:81:fa:a5:f8:64:7e:
5e:ae:68:c6:8e:9b:51:87:63:fd:89:90:d9:a5:88:5b:16:40:
8f:24:5f:51:da:4d:3b:fe:1a:33:10:5a:96:b2:5d:c7:68:f9:
4b:92:55:4b:45:4d:b4:26:76:ba:d5:a3:ca:1f:15:77:d1:ab:
23:b6:64:13:54:13:06:03:43:c3:28:af:bb:2b:a8:a8:af:7c:
40:30:ca:72
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIEFAPwOzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
YmFiMzA2ODM4NTllYzdlMDIwNmZlOTI2NTM2M2U4ZTM5NzFhOWE4MB4XDTIyMDIx
NDA3MzgwMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoY2EwNzAwZWQ2ZTA0
NDk1NWEyMTE1NDA3ZGJhMjM3NzdkODcyYWUyYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKyTCwo4PmU8oypbaxhgyiEdJFoLhKhugpabMfGCuFu8UNhp
wWs2ldnscobORY7vjPti4fghUbFEK+JY0xexlcZel3V4pTW8/FAQ8B3DHFCWOs+c
Q9ZDXyEhBIYRQ3nlVDHVDps3kYcePis+arVwO9U9G30hbBtkUUfvVTdMZ0j/e0Fx
U1gMhOR4eztspkICqogpjiA4iqfrTLWI7HVxN1BTmvnfzOq9bEFj2ut3brhb97lU
g/vO4rxtzELciBn7d8/K/Gsp7Hb6p9bLgYCUareWoH1wOOrOGdtNa2l6ZAbgKHrW
bGFVAhKhpOrXwTqLjc49PojPBXGiZw1uyFrfKC8CAwEAAaOCAhswggIXMB0GA1Ud
DgQWBBTKBwDtbgRJVaIRVAfbojd32HKuLDAfBgNVHSMEGDAWgBSLqzBoOFnsfgIG
/pJlNj6OOXGpqDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2k2c3dhRGhaN0g0Q0J2NlNaVFktampseHFhZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMmIvODFmZDFhLTQ3YTctNDVkOC1iZTc0LTNhYzllNTZjMzA4OS8x
L3lnY0E3VzRFU1ZXaUVWUUgyNkkzZDloeXJpdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmIv
ODFmZDFhLTQ3YTctNDVkOC1iZTc0LTNhYzllNTZjMzA4OS8xL2k2c3dhRGhaN0g0
Q0J2NlNaVFktampseHFhZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAx
BggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAgI4AAMEAgW2HAMEAgX8qAMEAFx2
bDANBgkqhkiG9w0BAQsFAAOCAQEAfF7K9fXU+hZybM+QOJGK4j8eC8T2NEr9a+pb
Eo44SP4z0YpzdEcOk5Y0UlLKrTxfdX/rGgY3gMYiqtqCj+ytEakDYbzR7DiZ9JQD
OiQCLkaym8RS+WTxIgyLsvibju0k7pHCDQCZHIEO8gJ6KBRge7tg0hrGc4UNtwR3
uXCUGyymFX/j12HfuJe60ibl+F8AYnQO4aFYw6UBAanpJVhN8bFxXA6p9h5sLAIb
v8Ctgfql+GR+Xq5oxo6bUYdj/YmQ2aWIWxZAjyRfUdpNO/4aMxBalrJdx2j5S5JV
S0VNtCZ2utWjyh8Vd9GrI7ZkE1QTBgNDwyivuyuoqK98QDDKcg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:36 2023 by rpki-client on console-ams.rpki-client.org