Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/cd820e-a988-48e3-b944-9fe327dabe64/1/YZmcijRaLMopEaB5onQ3VKsRM5w.roa
File: YZmcijRaLMopEaB5onQ3VKsRM5w.roa (raw, json)
Hash identifier: F97VrRa5t2kVGve5ALINLxuzQxCEL49RfEnKMXB29SM=
Subject key identifier: 61:99:9C:8A:34:5A:2C:CA:29:11:A0:79:A2:74:37:54:AB:11:33:9C
Certificate issuer: /CN=17802133d98b655a9f5411b700ec79347e1eb490
Certificate serial: 9ACE
Authority key identifier: 17:80:21:33:D9:8B:65:5A:9F:54:11:B7:00:EC:79:34:7E:1E:B4:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F4AhM9mLZVqfVBG3AOx5NH4etJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/cd820e-a988-48e3-b944-9fe327dabe64/1/YZmcijRaLMopEaB5onQ3VKsRM5w.roa
Signing time: Sat 04 Jun 2022 20:41:28 +0000
ROA not before: Sat 04 Jun 2022 20:41:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207967
IP address blocks: 176.97.194.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39630 (0x9ace)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17802133d98b655a9f5411b700ec79347e1eb490
Validity
Not Before: Jun 4 20:41:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=61999c8a345a2cca2911a079a2743754ab11339c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b8:30:6f:35:f9:cb:75:c7:ba:34:5f:e5:4b:
f3:45:d0:38:db:0d:17:03:46:1c:28:d5:d8:b1:80:
c8:cc:41:1c:f7:fd:c1:3b:e8:d6:80:e7:cb:a0:1d:
ed:eb:01:d7:be:9b:8e:ff:2c:e5:47:a0:17:a3:95:
2d:6e:93:a2:14:3f:29:fc:c9:11:73:e9:ac:bb:7d:
d9:cb:fe:73:6d:74:ca:d5:a1:c7:e4:36:08:ff:3a:
4b:6a:b3:31:bf:98:9c:03:be:b4:a0:7d:4f:e6:45:
e9:55:d2:16:b4:16:01:63:3a:06:56:25:54:83:81:
b0:45:9b:f2:df:f2:f4:f9:0b:53:47:e3:14:d1:89:
a4:c5:f9:86:a1:63:a0:f5:95:97:1f:21:53:73:8e:
40:98:84:ba:76:5c:28:ee:ec:75:6d:89:54:0c:f7:
07:00:24:40:31:3a:ac:7c:20:20:fb:06:07:c1:2c:
fe:09:11:28:e1:f7:68:12:8c:20:70:53:82:ab:ae:
f5:ca:f8:ee:26:35:f2:1e:81:e8:c7:f5:82:ca:5f:
1a:d7:64:b6:88:d8:8e:68:95:b6:25:37:91:a1:e6:
8f:64:d4:63:bd:5e:88:d1:cd:9d:b1:26:7e:65:91:
f5:04:c2:c9:b4:22:b3:6f:34:1c:44:10:e5:9d:df:
76:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:99:9C:8A:34:5A:2C:CA:29:11:A0:79:A2:74:37:54:AB:11:33:9C
X509v3 Authority Key Identifier:
keyid:17:80:21:33:D9:8B:65:5A:9F:54:11:B7:00:EC:79:34:7E:1E:B4:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F4AhM9mLZVqfVBG3AOx5NH4etJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/cd820e-a988-48e3-b944-9fe327dabe64/1/YZmcijRaLMopEaB5onQ3VKsRM5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/cd820e-a988-48e3-b944-9fe327dabe64/1/F4AhM9mLZVqfVBG3AOx5NH4etJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.97.194.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:15:0c:ef:eb:ff:03:b5:db:aa:f8:60:90:d3:26:24:ef:13:
e9:75:ab:f5:66:c9:03:51:f0:9b:50:45:b6:00:6e:90:c7:e5:
82:3f:40:c3:3b:41:12:bc:84:f4:e8:1a:a9:29:e0:3e:fe:2e:
3a:89:a0:a2:b1:f4:95:0f:12:9f:e4:b8:63:f9:dc:80:00:70:
65:7d:27:a4:0e:98:a5:77:0a:5f:7e:79:d6:64:02:4a:4b:2d:
b3:25:21:41:c1:4b:c0:9a:23:ad:6e:d0:71:b0:1f:65:59:78:
c6:35:ab:66:54:54:8c:67:8d:19:30:d1:1f:65:66:96:67:4f:
c2:90:fc:74:35:e5:18:5d:fd:79:39:86:1f:44:4a:86:12:90:
57:e0:3d:02:80:94:9e:ff:f9:c5:62:9f:ff:60:88:61:24:39:
00:ba:4d:df:59:5f:c3:27:b1:a6:89:8c:b3:a8:78:50:31:34:
87:17:a4:57:b4:3d:ca:fc:8b:06:14:75:b3:4a:f5:96:c8:37:
32:70:e8:44:71:1f:da:49:65:aa:55:41:d0:4d:89:fc:b0:17:
97:25:9b:9b:15:59:c7:30:3c:aa:cf:ae:4b:6e:95:44:8e:ae:
d1:48:62:56:04:b0:f1:bc:5d:4d:fa:10:f9:be:02:69:eb:d5:
fd:17:fe:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:08 2023 by rpki-client on console-fra.rpki-client.org