Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/YbyPlzaUi6dDQz368Hpc5hJIo4s.roa
File: YbyPlzaUi6dDQz368Hpc5hJIo4s.roa (raw, json)
Hash identifier: UVPfkLozVWr9mm9HJnHLA5hsTWiuPyUfsqTmgFD0xx0=
Subject key identifier: 61:BC:8F:97:36:94:8B:A7:43:43:3D:FA:F0:7A:5C:E6:12:48:A3:8B
Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial: 018475ECCDC89C0C2ED948986A3D53856385
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/YbyPlzaUi6dDQz368Hpc5hJIo4s.roa
Signing time: Mon 14 Nov 2022 11:36:04 +0000
ROA not before: Mon 14 Nov 2022 11:36:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210388
IP address blocks: 213.238.191.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:75:ec:cd:c8:9c:0c:2e:d9:48:98:6a:3d:53:85:63:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Validity
Not Before: Nov 14 11:36:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=61bc8f9736948ba743433dfaf07a5ce61248a38b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:16:e7:a3:d0:38:8f:6b:c8:5e:94:ac:e5:e3:
6c:6b:0e:7a:5f:f8:26:63:39:8a:bb:32:d5:21:a3:
57:88:67:f7:da:51:16:a7:71:ca:f4:e8:84:70:04:
3b:ac:4b:76:42:1d:1f:74:5b:48:69:de:c5:0b:ff:
75:d4:b9:6c:29:66:8d:78:d8:fc:75:ac:f3:cc:51:
dc:e7:3b:d4:92:3f:19:0e:aa:d4:44:30:e4:9e:b5:
fe:2c:29:7f:8e:f9:0d:04:88:b1:e5:56:49:ae:82:
e6:6e:ab:97:3d:07:7f:3c:c4:5f:63:86:d4:eb:c0:
9b:3a:01:00:81:2b:dd:07:91:63:30:fd:0f:60:d1:
27:3c:44:9d:b6:77:16:25:98:ff:84:68:cb:7a:fc:
04:91:91:ba:86:0c:4a:01:14:2c:8b:0e:ef:b9:67:
fb:15:d3:26:9c:cc:dc:5d:b9:85:29:3a:af:b0:d4:
d8:30:61:c7:6e:9d:f6:73:0e:f8:13:63:00:07:72:
f7:68:29:7b:1e:bb:f2:57:aa:8e:7e:7b:4d:fd:73:
eb:de:9d:55:a9:8b:3e:2b:d8:0a:71:da:e6:da:bf:
cd:37:e6:a8:8d:88:5e:3b:ea:34:d0:7f:64:94:ce:
e2:71:3a:e8:2e:93:5b:f3:36:8f:6a:93:3a:41:19:
74:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:BC:8F:97:36:94:8B:A7:43:43:3D:FA:F0:7A:5C:E6:12:48:A3:8B
X509v3 Authority Key Identifier:
keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/YbyPlzaUi6dDQz368Hpc5hJIo4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.238.191.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:a0:ca:b0:cd:28:94:d1:9d:f0:8c:b3:bd:69:f6:fe:f8:3a:
49:60:5f:3c:33:15:f7:51:f0:96:ca:c3:05:6e:b6:53:1c:c1:
e1:ba:d4:1d:5f:52:2d:7d:8c:b6:f8:51:87:22:d8:5a:89:89:
c8:72:eb:a5:78:88:bd:ce:ac:d4:a9:60:36:31:2a:4e:fe:39:
97:a8:58:e8:b6:8f:6d:de:2b:25:29:71:d0:7b:80:55:24:fc:
3d:4a:cc:f1:e6:62:ba:46:c7:cd:c3:51:dd:96:55:52:3f:59:
f1:7b:ab:05:17:f7:7d:26:8a:09:44:44:99:3d:4d:56:76:83:
16:4e:10:5c:ea:d0:4c:47:30:b5:c8:47:10:ce:21:8e:85:c5:
1e:bc:14:8e:3c:ee:db:fa:7a:03:21:30:d1:75:7a:41:9f:ee:
6f:52:1a:0f:95:04:a8:0e:3b:bd:40:77:ee:5b:7b:0a:28:f7:
26:85:af:09:d9:52:ed:42:1e:1a:d4:24:c6:b9:ca:c8:8c:54:
0c:50:dd:a9:b9:d7:ed:c9:6a:36:73:a8:98:f4:75:12:bf:0f:
73:9a:40:13:ab:dc:75:97:09:fc:d2:fc:c8:45:e9:5a:66:a5:
2d:44:bc:90:1e:89:5f:ce:82:70:8a:61:bc:b6:0a:59:f3:4d:
11:9a:ee:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:36 2024 by rpki-client on console-ams.rpki-client.org