Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/YG-JB2Hix-IxuWt5CKCUGm4DicU.roa
File: YG-JB2Hix-IxuWt5CKCUGm4DicU.roa (raw, json)
Hash identifier: Y9WptGMajLj503LmXh2EwTz2oRR0bEZYHdvhfeVZqbg=
Subject key identifier: 60:6F:89:07:61:E2:C7:E2:31:B9:6B:79:08:A0:94:1A:6E:03:89:C5
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 0184CE6A42B190326859524C75D392EB46A3
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/YG-JB2Hix-IxuWt5CKCUGm4DicU.roa
Signing time: Thu 01 Dec 2022 15:59:41 +0000
ROA not before: Thu 01 Dec 2022 15:59:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56681
IP address blocks: 188.255.224.0/24 maxlen: 24
188.255.146.0/24 maxlen: 24
188.255.173.0/24 maxlen: 24
188.255.184.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ce:6a:42:b1:90:32:68:59:52:4c:75:d3:92:eb:46:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Dec 1 15:59:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=606f890761e2c7e231b96b7908a0941a6e0389c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:39:78:4c:eb:32:c7:25:ec:7e:a7:56:92:26:
aa:a0:a7:02:25:8f:b9:7e:a5:26:68:0a:68:1d:46:
ed:10:2c:3d:db:dd:ba:a2:cb:cb:a4:b8:a5:f4:11:
97:5f:da:01:4d:51:93:1d:6f:09:2a:b5:b4:dc:01:
1b:06:57:3c:ff:42:6b:97:87:22:f7:da:e5:f3:2d:
e8:5c:7b:c4:bf:23:83:04:de:d6:01:8d:76:7d:97:
ce:ee:a1:e4:ea:d3:78:b6:0a:0b:fb:3f:30:e6:18:
29:9b:d9:2b:ce:87:9c:50:bd:93:ab:49:9f:9a:c0:
d3:54:27:ae:5e:f7:5a:a1:e9:f9:07:48:3c:a9:dc:
24:c9:91:4b:1a:cd:1b:0a:9c:6a:5a:d9:cd:e7:8a:
f6:15:e4:cf:b7:4a:e1:c5:01:e6:29:10:77:3a:4f:
4c:72:b8:cb:64:36:e5:97:2c:94:7e:7b:dd:0a:f3:
81:98:16:54:7d:81:1f:fd:ab:f1:da:4c:0b:04:52:
d1:21:7e:aa:40:77:80:83:bf:c0:97:bb:3b:fd:d9:
7a:10:d3:57:54:cc:fb:7a:62:7d:04:ad:a5:8d:a3:
d4:0e:01:ea:d2:5c:a4:b8:8e:ea:6a:a3:a2:2e:ff:
f6:a2:9e:05:18:6a:41:37:50:82:83:5a:62:d0:39:
c7:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:6F:89:07:61:E2:C7:E2:31:B9:6B:79:08:A0:94:1A:6E:03:89:C5
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/YG-JB2Hix-IxuWt5CKCUGm4DicU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.255.146.0/24
188.255.173.0/24
188.255.184.0/24
188.255.224.0/24
Signature Algorithm: sha256WithRSAEncryption
54:77:49:c5:42:ec:20:3e:b8:18:9a:c5:26:78:80:77:97:5f:
90:a3:0f:2f:96:34:1a:26:1d:8c:09:e3:19:57:e4:ce:91:bf:
80:60:91:30:3e:4c:53:99:81:6e:81:b4:8b:87:59:0a:ca:ff:
2f:2a:22:e1:ed:c4:3d:47:4d:f8:91:7c:3b:6d:f4:d4:eb:ea:
ce:2f:84:13:b2:82:35:f8:09:84:c8:0c:fb:89:9f:3b:24:50:
0f:20:a9:08:7f:e7:05:2f:da:73:3b:3b:34:0b:7f:88:77:8f:
8e:30:6c:dc:e4:f7:a0:75:92:ce:d0:4d:99:4f:bf:b2:7e:93:
3b:4f:74:06:4e:ea:90:67:02:9e:cb:ec:d8:0e:d0:19:63:c2:
dd:55:d4:23:43:af:d7:a7:e7:f8:cd:d0:be:5f:99:f9:2b:52:
84:14:91:1a:a7:11:c4:38:9c:d2:2c:e6:41:c5:93:98:db:73:
44:82:f3:78:cd:f7:7d:9d:29:10:40:b0:0a:55:ce:f4:58:65:
6c:fc:4c:ea:4a:24:46:f4:24:d7:24:08:a4:c9:24:e8:6f:dc:
0c:9f:5b:5e:e5:3a:ca:1b:cf:7a:20:8a:9b:2e:c1:cd:c2:9e:
2e:06:12:7b:e1:29:a8:27:5c:35:ba:9b:08:0c:c6:4a:dd:0c:
d8:ad:f7:c0
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYTOakKxkDJoWVJMddOS60ajMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj
N2U5MTUwHhcNMjIxMjAxMTU1OTQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MDZmODkwNzYxZTJjN2UyMzFiOTZiNzkwOGEwOTQxYTZlMDM4OWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTl4TOsyxyXsfqdWkiaqoKcCJY+5
fqUmaApoHUbtECw92926osvLpLil9BGXX9oBTVGTHW8JKrW03AEbBlc8/0Jrl4ci
99rl8y3oXHvEvyODBN7WAY12fZfO7qHk6tN4tgoL+z8w5hgpm9krzoecUL2Tq0mf
msDTVCeuXvdaoen5B0g8qdwkyZFLGs0bCpxqWtnN54r2FeTPt0rhxQHmKRB3Ok9M
crjLZDbllyyUfnvdCvOBmBZUfYEf/avx2kwLBFLRIX6qQHeAg7/Al7s7/dl6ENNX
VMz7emJ9BK2ljaPUDgHq0lykuI7qaqOiLv/2op4FGGpBN1CCg1pi0DnHTQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFGBviQdh4sfiMblreQiglBpuA4nFMB8GA1UdIwQY
MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt
ZmFlNWRiZWQzYjFiLzEvWUctSkIySGl4LUl4dVd0NUNLQ1VHbTREaWNVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi
LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAvP+SAwQA
vP+tAwQAvP+4AwQAvP/gMA0GCSqGSIb3DQEBCwUAA4IBAQBUd0nFQuwgPrgYmsUm
eIB3l1+Qow8vljQaJh2MCeMZV+TOkb+AYJEwPkxTmYFugbSLh1kKyv8vKiLh7cQ9
R034kXw7bfTU6+rOL4QTsoI1+AmEyAz7iZ87JFAPIKkIf+cFL9pzOzs0C3+Id4+O
MGzc5PegdZLO0E2ZT7+yfpM7T3QGTuqQZwKey+zYDtAZY8LdVdQjQ6/Xp+f4zdC+
X5n5K1KEFJEapxHEOJzSLOZBxZOY23NEgvN4zfd9nSkQQLAKVc70WGVs/EzqSiRG
9CTXJAikySTob9wMn1te5TrKG896IIqbLsHNwp4uBhJ74SmoJ1w1upsIDMZK3QzY
rffA
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:35 2023 by rpki-client on console-fra.rpki-client.org