Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/yEy4RODOiiGOedBUjkneiEAPYII.roa
File: yEy4RODOiiGOedBUjkneiEAPYII.roa (raw, json)
Hash identifier: 9ZUJzJ7YRLv+FZRHkhwpTluWzPn5mVxN7CTe0iqTpbM=
Subject key identifier: C8:4C:B8:44:E0:CE:8A:21:8E:79:D0:54:8E:49:DE:88:40:0F:60:82
Certificate issuer: /CN=4cf8ffc088591e4f243baafa21b4298bfb366026
Certificate serial: 0FA71A5C
Authority key identifier: 4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/yEy4RODOiiGOedBUjkneiEAPYII.roa
Signing time: Sat 01 Jan 2022 00:51:10 +0000
ROA not before: Sat 01 Jan 2022 00:51:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210221
IP address blocks: 193.118.165.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 262609500 (0xfa71a5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cf8ffc088591e4f243baafa21b4298bfb366026
Validity
Not Before: Jan 1 00:51:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c84cb844e0ce8a218e79d0548e49de88400f6082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:36:65:84:7a:25:24:e9:d2:48:43:e3:92:bf:
12:e2:0b:cf:75:ee:a9:bc:ae:bd:c2:14:e1:37:b4:
0d:fc:31:59:cf:f9:3e:9d:d4:c7:84:0e:e7:96:69:
79:cc:f9:fc:19:68:c1:7d:e0:b2:b6:21:2b:8d:10:
3c:e0:6e:a2:b3:44:73:03:4b:b2:f2:aa:24:a2:cb:
2d:16:13:ee:12:7d:b4:28:a0:33:33:f0:83:f0:b5:
25:cb:ae:9e:93:5f:28:01:0d:80:54:fd:e7:84:5f:
26:2a:e7:77:80:a9:fc:7e:5d:59:5a:0b:7c:77:eb:
d0:49:30:6d:4c:2c:14:af:85:cd:13:77:80:2d:e0:
1b:da:44:cc:de:91:15:73:55:b3:1c:bf:1b:08:cc:
4f:5a:f4:22:e4:0f:fb:9c:af:6c:7f:45:f0:02:d8:
fb:e8:fc:fc:5c:2e:cd:c8:f8:84:f6:8d:67:18:ba:
16:0b:c0:0a:e6:f4:5b:1e:a8:e8:a0:e6:f9:35:a4:
78:b8:99:be:ce:7e:b8:13:5c:39:b0:2b:1f:0b:54:
40:3d:4a:1a:2c:97:17:64:6e:8e:40:97:8c:ff:6d:
ee:4c:66:6f:9f:88:18:70:50:77:de:e2:2a:84:85:
f9:8e:9b:08:ae:fc:77:ff:c1:3c:e3:57:72:67:c3:
04:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:4C:B8:44:E0:CE:8A:21:8E:79:D0:54:8E:49:DE:88:40:0F:60:82
X509v3 Authority Key Identifier:
keyid:4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/yEy4RODOiiGOedBUjkneiEAPYII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.118.165.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:09:60:ea:20:ab:f7:e6:be:05:41:74:6e:ae:59:7f:6c:42:
38:d2:0a:02:ad:52:c6:dc:3b:d1:43:17:1c:c6:bd:1e:4b:1e:
6d:ad:80:cd:0d:af:1a:5c:b8:f2:b4:36:f9:97:d5:8a:d8:ed:
20:db:1e:de:e2:ec:51:c1:2c:40:a2:4c:e0:77:9a:21:95:00:
c5:4b:16:b8:a1:6a:ce:86:95:3c:73:55:2f:87:db:d6:c3:bb:
4b:0d:32:77:f6:04:51:8b:7a:3d:04:95:15:1f:ef:40:19:bb:
7c:f1:4b:41:bb:58:75:9f:17:35:75:2f:e5:17:4f:bf:56:d6:
67:9b:3b:be:fd:cf:7f:dd:28:4b:8f:80:2f:4a:0a:20:f8:c7:
4c:31:78:74:cc:93:db:23:0b:31:28:b2:f2:fd:54:f5:21:65:
aa:97:19:8c:ea:dc:84:2e:35:5c:15:6b:81:c2:cd:55:f1:63:
f8:4c:4c:61:9c:b8:2b:7a:c9:68:be:e3:21:db:d7:fd:fb:73:
3a:ab:1f:d7:6a:e3:57:94:e2:1d:08:a0:e0:89:e8:74:3b:5f:
3f:d2:51:53:27:65:f5:99:27:53:d2:5e:92:4c:62:e7:b7:c4:
3c:07:76:7e:b3:94:a6:4f:25:19:b5:03:9e:c3:9f:4c:4b:e3:
96:80:27:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:37 2023 by rpki-client on console-ams.rpki-client.org