Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/YlApj31EwkIV0teu2Ur-zKUjOLc.roa
File: YlApj31EwkIV0teu2Ur-zKUjOLc.roa (raw, json)
Hash identifier: /OFoeqJR0dGtehiZ/IsqVUHaFcEgOg4ruGUP2sFMQDA=
Subject key identifier: 62:50:29:8F:7D:44:C2:42:15:D2:D7:AE:D9:4A:FE:CC:A5:23:38:B7
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 09341966
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/YlApj31EwkIV0teu2Ur-zKUjOLc.roa
Signing time: Fri 21 Jan 2022 12:45:53 +0000
ROA not before: Fri 21 Jan 2022 12:45:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3257
IP address blocks: 213.200.64.0/18 maxlen: 18
141.136.96.0/20 maxlen: 20
46.33.64.0/19 maxlen: 24
213.254.192.0/18 maxlen: 24
89.149.128.0/18 maxlen: 24
213.251.0.0/18 maxlen: 24
77.67.0.0/17 maxlen: 24
185.160.40.0/22 maxlen: 22
2001:668::/29 maxlen: 29
2001:668::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154409318 (0x9341966)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jan 21 12:45:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6250298f7d44c24215d2d7aed94afecca52338b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:54:a8:8d:cc:5a:82:c0:5a:92:0f:67:f2:f4:
49:00:b3:91:af:97:f6:d0:2b:5b:38:35:1e:ec:50:
c6:71:60:51:82:39:86:2b:f3:e6:43:6f:0d:49:a1:
fe:2a:d9:0d:3e:74:e3:9b:82:2d:4c:8d:31:d4:e1:
b3:20:57:e8:69:78:b4:84:3b:a1:d5:d2:a9:9a:c9:
95:2a:c7:d7:8d:50:52:c9:fb:0e:79:4d:9e:02:ed:
db:ec:c6:2c:52:9e:92:84:5a:93:c9:a8:4c:cc:7f:
ff:db:f0:48:aa:c2:2a:1e:b2:ef:0c:cd:7b:fc:65:
46:60:69:45:3f:d3:c5:2a:15:b3:c0:57:7f:e2:14:
06:e7:9f:d1:45:21:4b:bc:e7:33:f8:98:ed:be:7e:
76:76:b8:ed:79:7a:9e:47:b6:4c:b7:6f:42:d8:ff:
66:51:ba:d3:79:d8:76:02:d4:08:fd:73:47:16:9d:
58:37:da:31:3a:1c:19:73:65:f6:a1:c4:b6:3d:fc:
03:e5:a8:48:b4:44:e9:e7:4d:d1:ba:f2:0b:4d:25:
04:ed:9b:cb:53:87:5c:af:da:ad:f5:77:9f:41:29:
65:64:69:a5:9a:d1:a7:1d:7d:06:38:68:43:87:eb:
9c:3e:86:23:ef:82:59:dd:55:90:f2:81:af:72:8b:
f3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:50:29:8F:7D:44:C2:42:15:D2:D7:AE:D9:4A:FE:CC:A5:23:38:B7
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/YlApj31EwkIV0teu2Ur-zKUjOLc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.33.64.0/19
77.67.0.0/17
89.149.128.0/18
141.136.96.0/20
185.160.40.0/22
213.200.64.0/18
213.251.0.0/18
213.254.192.0/18
IPv6:
2001:668::/29
Signature Algorithm: sha256WithRSAEncryption
16:c4:8e:c9:2b:25:f2:73:29:f1:85:3d:8a:3e:1c:e9:da:e3:
b7:20:0b:04:5a:94:02:e3:9b:4c:3e:17:1d:b4:3d:79:7d:f0:
66:77:47:a8:5d:8f:56:c6:0a:aa:92:28:50:4c:a6:58:ba:8d:
c2:8d:6b:27:cc:20:80:9b:28:b2:44:62:a1:b3:14:91:f6:68:
9b:80:3a:93:66:06:32:e8:c1:e5:00:5f:4c:02:72:6e:b7:7d:
4d:22:63:3e:fc:c9:29:5b:52:cc:79:df:f9:60:67:07:a6:5a:
93:a9:4c:ec:50:d6:b0:63:f5:86:f9:c4:88:bc:66:68:9a:8e:
b8:17:d5:06:03:3a:ae:43:24:f8:82:ad:f6:73:8a:5b:22:ac:
38:c7:01:e5:8e:e3:42:6c:62:f3:0d:4f:d7:ee:6d:e4:63:ae:
6c:f3:51:57:94:91:74:47:6a:53:11:7b:b9:21:95:24:67:36:
4d:c6:cd:43:4e:6b:bf:a2:e0:5a:1a:cd:ba:75:2b:4b:2a:34:
a8:cf:63:ae:6b:06:69:42:22:25:0a:64:88:4e:6e:4d:8e:4f:
fa:0a:3e:3d:96:13:25:3b:c7:01:25:3d:8d:f5:34:43:84:9c:
1f:d4:ec:4b:5b:fb:b9:67:7d:ec:5f:39:37:db:91:f2:96:72:
da:2d:f6:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:26 2023 by rpki-client on console-fra.rpki-client.org