Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/b40f26-4af4-439d-a3d0-5c30734acb38/1/yfqhSnsCC6WwnfpHpDjsIzh_9xY.roa
File: yfqhSnsCC6WwnfpHpDjsIzh_9xY.roa (raw, json)
Hash identifier: nHmIcltuA+HqR+cBVD7Xa1/f0I8k60YMcWKy9Vyl81A=
Subject key identifier: C9:FA:A1:4A:7B:02:0B:A5:B0:9D:FA:47:A4:38:EC:23:38:7F:F7:16
Certificate issuer: /CN=67a14f24304875ff154fe2b2b2cb6eba0af94523
Certificate serial: 050E55B4
Authority key identifier: 67:A1:4F:24:30:48:75:FF:15:4F:E2:B2:B2:CB:6E:BA:0A:F9:45:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z6FPJDBIdf8VT-Kysstuugr5RSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/b40f26-4af4-439d-a3d0-5c30734acb38/1/yfqhSnsCC6WwnfpHpDjsIzh_9xY.roa
Signing time: Sat 01 Jan 2022 08:57:28 +0000
ROA not before: Sat 01 Jan 2022 08:57:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202105
IP address blocks: 185.11.121.0/24 maxlen: 24
185.11.122.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84825524 (0x50e55b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67a14f24304875ff154fe2b2b2cb6eba0af94523
Validity
Not Before: Jan 1 08:57:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c9faa14a7b020ba5b09dfa47a438ec23387ff716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:20:bd:ce:fc:50:24:84:57:4f:55:67:ab:db:
be:85:11:f7:20:7d:49:03:59:0f:6e:23:ab:af:96:
75:91:d4:3d:f9:d0:9b:63:8b:77:f4:64:85:24:ba:
8b:c2:bf:a4:7e:35:a7:7d:51:1d:64:34:be:b9:0a:
b9:8a:be:ea:4b:28:2f:09:97:be:06:db:bf:49:6e:
f4:0b:cc:f0:f8:7b:8b:a1:12:35:60:43:7a:1c:ab:
9d:c0:16:f8:d7:b6:b4:8d:db:c8:18:4f:1b:0d:c3:
f5:06:95:4d:25:67:97:a9:e3:cf:1c:b1:08:64:03:
54:65:ce:b7:3e:cd:12:8e:42:0b:a4:87:ad:c4:88:
7e:14:99:cb:27:8a:1e:a2:64:97:11:3f:c4:40:fa:
24:18:10:d4:f7:e0:39:54:97:e0:50:d4:5e:76:d2:
df:09:a4:f2:2b:93:41:f4:46:7c:27:57:17:cd:1f:
ef:5d:a8:7b:a2:a4:70:da:87:07:b8:9b:ef:3a:ec:
76:a6:55:17:cf:c2:96:b9:99:d8:58:ac:a1:66:c3:
9b:c5:34:3d:cb:dc:55:b8:ca:be:6e:19:96:bd:77:
58:94:c5:f8:3d:aa:ae:d7:be:91:55:3f:ad:18:0c:
ca:d3:5c:e7:27:81:64:f9:c7:ec:fe:f6:c7:e5:f5:
3b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:FA:A1:4A:7B:02:0B:A5:B0:9D:FA:47:A4:38:EC:23:38:7F:F7:16
X509v3 Authority Key Identifier:
keyid:67:A1:4F:24:30:48:75:FF:15:4F:E2:B2:B2:CB:6E:BA:0A:F9:45:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z6FPJDBIdf8VT-Kysstuugr5RSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/b40f26-4af4-439d-a3d0-5c30734acb38/1/yfqhSnsCC6WwnfpHpDjsIzh_9xY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/b40f26-4af4-439d-a3d0-5c30734acb38/1/Z6FPJDBIdf8VT-Kysstuugr5RSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.11.121.0-185.11.122.255
Signature Algorithm: sha256WithRSAEncryption
72:79:da:c4:53:14:b8:1a:64:8a:56:61:b2:99:56:1f:83:f7:
82:e4:56:e3:01:34:62:0b:98:f0:a1:19:08:84:d9:e5:34:28:
08:7f:3b:7b:2e:d6:b5:f1:d3:4f:70:23:68:f0:11:93:6a:5e:
2e:7a:2f:3b:0e:1f:24:d2:be:36:80:c6:36:39:e2:03:8f:91:
f8:65:d2:48:25:11:03:14:ee:87:47:bd:5e:ec:be:d7:53:9c:
db:1c:de:eb:f6:67:1b:29:07:10:e4:98:29:6f:8c:7b:27:3a:
c3:61:2b:fc:d3:9b:79:27:d5:69:18:55:ff:fb:41:d4:26:2a:
1e:3b:e0:8f:4b:31:6d:4d:68:ee:45:b1:a3:14:fd:f8:92:8f:
75:4b:e5:01:db:6b:09:e5:ba:ec:b2:8b:a3:5d:bb:c9:f1:39:
6b:ff:d7:d7:37:d8:d1:ec:24:97:a6:54:38:14:a3:cc:34:42:
9d:c9:bb:5e:b7:34:67:06:79:ff:5e:9c:a3:22:5d:a9:f5:38:
c5:6a:bc:cc:eb:c8:87:96:d7:84:15:dc:09:0b:c6:af:93:ab:
71:59:57:ca:19:b6:fc:2f:10:9f:42:58:f7:0f:87:3b:f6:ed:
06:b4:1a:76:32:11:65:93:54:2c:58:45:3c:a1:e4:1b:c7:d8:
96:38:64:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:51 2023 by rpki-client on console-fra.rpki-client.org