Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/b55c02-347b-42a8-96ae-d179053d8434/1/YakJsXJq62UBeSyKqz5vX39lJYU.roa
File: YakJsXJq62UBeSyKqz5vX39lJYU.roa (raw, json)
Hash identifier: iwXGk5ghQmw7QfJibUpn0AGpCfJLMloTQzq/8Pi9O58=
Subject key identifier: 61:A9:09:B1:72:6A:EB:65:01:79:2C:8A:AB:3E:6F:5F:7F:65:25:85
Certificate issuer: /CN=6f0d7a0eb5ca549590a406bc693df1e8d2cbae04
Certificate serial: 01C7D101
Authority key identifier: 6F:0D:7A:0E:B5:CA:54:95:90:A4:06:BC:69:3D:F1:E8:D2:CB:AE:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bw16DrXKVJWQpAa8aT3x6NLLrgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/b55c02-347b-42a8-96ae-d179053d8434/1/YakJsXJq62UBeSyKqz5vX39lJYU.roa
Signing time: Sat 01 Jan 2022 02:58:47 +0000
ROA not before: Sat 01 Jan 2022 02:58:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 185.99.20.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29872385 (0x1c7d101)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f0d7a0eb5ca549590a406bc693df1e8d2cbae04
Validity
Not Before: Jan 1 02:58:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=61a909b1726aeb6501792c8aab3e6f5f7f652585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:dd:f3:12:28:e0:12:04:d1:6d:35:e0:5c:dd:
31:3c:64:66:e0:5a:8d:68:a4:6c:18:00:da:e4:36:
d6:eb:c3:8e:de:9f:72:03:8d:14:8c:cd:09:14:3c:
11:74:e6:94:a1:ab:c4:66:f2:15:5c:bb:99:63:e8:
f8:5e:4d:7a:df:d5:2f:76:d7:82:61:b7:a7:3e:71:
58:1f:f6:c8:7c:9d:8c:a7:73:ba:74:6b:4b:b1:01:
ee:54:7e:0e:37:a5:f5:d9:b9:07:7f:8e:0d:0c:3d:
29:c0:2d:97:98:38:72:c8:62:0f:b5:6f:ca:b7:fa:
d8:d4:2f:94:fd:11:44:32:2e:2d:e8:fb:64:0f:b9:
d7:42:47:c0:19:98:e7:f1:8c:50:f0:da:76:df:4f:
d8:0a:c1:8c:3a:48:07:e2:bf:3e:23:d2:b0:b6:ee:
c2:73:3e:64:6e:c3:3d:61:08:9e:44:05:95:72:42:
7c:27:67:87:69:d2:26:ac:e5:69:e1:7d:6b:28:54:
06:96:9b:4f:5a:51:64:64:bf:9e:e9:7f:94:30:ff:
c4:a4:0a:29:b7:c9:35:54:cf:f6:f2:00:32:3e:44:
8e:40:43:b1:ee:58:13:58:86:bd:7d:f9:68:63:d2:
2c:7b:f7:54:98:04:3c:d7:a2:f9:b9:1d:9e:9a:9a:
80:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:A9:09:B1:72:6A:EB:65:01:79:2C:8A:AB:3E:6F:5F:7F:65:25:85
X509v3 Authority Key Identifier:
keyid:6F:0D:7A:0E:B5:CA:54:95:90:A4:06:BC:69:3D:F1:E8:D2:CB:AE:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bw16DrXKVJWQpAa8aT3x6NLLrgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b55c02-347b-42a8-96ae-d179053d8434/1/YakJsXJq62UBeSyKqz5vX39lJYU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b55c02-347b-42a8-96ae-d179053d8434/1/bw16DrXKVJWQpAa8aT3x6NLLrgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.99.20.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:a1:bf:5a:49:e9:2b:3a:ab:a6:76:cb:e6:d5:92:a3:c0:f1:
a8:b0:5f:a2:7f:b4:a0:3e:6c:5a:b2:07:eb:c3:25:93:88:aa:
de:ee:5e:bf:0b:7f:9d:d4:98:91:82:dd:cb:f0:c3:96:1b:fe:
ea:1e:a1:33:72:a5:c2:fe:22:ea:88:3e:24:ef:95:fb:b1:18:
6f:1f:f5:fa:ad:d7:12:00:92:b1:24:64:ed:12:ab:1d:95:ed:
9e:7b:1c:cc:ca:4d:03:70:6a:c3:d7:fe:81:6e:09:34:2c:cf:
22:da:66:92:dc:d7:81:da:77:6d:52:65:19:a9:14:86:8c:e7:
3c:de:89:af:76:24:ff:db:75:cf:d0:b3:23:a2:d9:51:05:c0:
fe:6b:87:ed:1a:dd:04:64:26:a2:19:ff:33:b1:14:2c:8d:cd:
70:16:da:95:36:09:97:71:d2:f4:dc:e5:eb:37:34:c1:e8:09:
fd:9b:2b:29:b4:b9:a7:6e:3f:66:77:17:86:9d:f8:f1:e3:e8:
0b:2d:b9:14:b7:2c:8b:1a:f0:e7:f5:9f:86:ff:66:ef:9e:2e:
3b:48:df:80:a3:0d:a0:e3:10:be:c4:eb:db:e9:27:a7:ce:b0:
31:42:9e:fd:fa:aa:e1:d5:12:06:36:25:3e:c8:c5:ca:fe:e3:
82:d3:3f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:12 2023 by rpki-client on console-fra.rpki-client.org