Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/YmWN7U_7BYT52IWSS8JzFhkZh34.roa
File: YmWN7U_7BYT52IWSS8JzFhkZh34.roa (raw, json)
Hash identifier: +DdaNSghh3nMVcAs2GeBlOl4wGspa64A6qf3m/oWNNo=
Subject key identifier: 62:65:8D:ED:4F:FB:05:84:F9:D8:85:92:4B:C2:73:16:19:19:87:7E
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 093FBEBD
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/YmWN7U_7BYT52IWSS8JzFhkZh34.roa
Signing time: Mon 16 May 2022 08:02:29 +0000
ROA not before: Mon 16 May 2022 08:02:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 188.255.212.0/24 maxlen: 24
109.121.37.0/24 maxlen: 24
109.121.39.0/24 maxlen: 24
109.121.47.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155172541 (0x93fbebd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: May 16 08:02:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62658ded4ffb0584f9d885924bc273161919877e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4c:c8:09:5d:fc:34:0f:9f:9c:6e:ab:c8:ab:
19:29:18:05:d7:94:e0:90:f0:c2:8c:34:b3:7a:1f:
5e:72:00:6c:b7:45:86:82:1b:be:bc:71:2c:96:9c:
4d:6e:07:37:9d:f0:8b:f2:5d:3e:37:3b:57:29:61:
d7:7d:56:e0:46:03:2a:7e:0c:31:fd:e9:d9:cc:35:
48:88:7b:90:a7:2a:b2:45:cd:74:d0:d0:f2:0a:85:
77:e1:5c:4b:94:36:7d:48:4a:6d:21:28:5d:ad:8a:
8b:20:07:d2:80:7d:9d:2d:00:e7:91:78:e0:dc:ec:
1a:98:13:c1:26:5b:65:90:68:a2:0d:ee:2e:4b:bb:
be:22:53:e0:f5:7f:b4:fc:67:5d:73:a8:7a:4b:6b:
46:be:ad:ed:e2:12:30:07:5c:f3:2f:11:b9:48:cb:
61:29:16:e4:fa:e6:8c:69:67:81:1e:48:59:61:96:
cb:85:74:03:0e:de:67:37:dd:c3:e2:fd:12:7d:96:
27:45:c6:63:fc:d3:66:d4:c0:8b:55:dc:3f:ed:f4:
ee:c5:1f:b4:bf:45:2a:d3:f2:f0:5f:3c:8a:c5:69:
01:8a:09:b4:37:41:b1:c2:08:cc:3c:3b:16:5a:64:
3a:67:aa:64:9b:13:ef:9d:61:af:ab:3c:56:34:b6:
9d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:65:8D:ED:4F:FB:05:84:F9:D8:85:92:4B:C2:73:16:19:19:87:7E
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/YmWN7U_7BYT52IWSS8JzFhkZh34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.37.0/24
109.121.39.0/24
109.121.47.0/24
188.255.212.0/24
Signature Algorithm: sha256WithRSAEncryption
82:8a:63:e5:b6:66:64:98:26:5c:07:08:0a:e0:29:db:86:62:
a4:7c:6f:8c:ec:98:bb:ae:2d:d3:19:01:1f:fe:ac:7d:b8:9d:
4c:79:61:70:67:fb:2e:2b:df:32:61:c2:ba:f7:d0:2d:d0:30:
c3:26:1a:07:19:2f:d3:88:66:c3:29:4b:17:a1:9f:f0:88:36:
ce:0e:27:c8:ed:ae:a7:7f:46:65:a6:5d:56:e1:c1:8a:c5:92:
49:70:73:24:42:01:94:fa:d6:f5:6a:74:ee:0c:98:67:cc:57:
13:3f:67:24:9b:2f:d6:eb:ae:36:a9:b0:55:38:09:f3:38:79:
4b:b5:8e:3e:76:8e:a7:9f:a5:e2:4f:b6:f6:35:f4:58:a7:a4:
85:6c:b8:f7:aa:65:a8:76:2f:05:50:e8:e0:55:f3:68:7a:c5:
d5:95:f4:87:36:46:31:0b:1b:27:3d:9c:89:47:a2:bd:10:8c:
d1:74:df:64:dd:6e:b4:b3:1b:7d:20:5c:8f:d2:6b:95:2d:48:
04:c7:27:3e:d4:05:10:52:04:4d:1d:ab:06:b9:60:49:32:61:
20:8d:98:f5:d9:d4:16:bf:f8:45:10:f3:31:8f:a6:5c:99:b4:
5e:bc:87:2f:40:4d:07:e3:5d:b5:ab:bf:2d:02:49:9a:42:77:
37:50:68:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:04 2024 by rpki-client on console-ams.rpki-client.org