Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Yx218C3_bGF7D_aTJeLyGp7PQns.roa
File: Yx218C3_bGF7D_aTJeLyGp7PQns.roa (raw, json)
Hash identifier: piZlU7blCSprOb5MmgED3tDT2HGiegC3XLjzZMOsniY=
Subject key identifier: 63:1D:B5:F0:2D:FF:6C:61:7B:0F:F6:93:25:E2:F2:1A:9E:CF:42:7B
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 0184F153EE471822E33730CE7039D273FA23
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Yx218C3_bGF7D_aTJeLyGp7PQns.roa
Signing time: Thu 08 Dec 2022 10:42:00 +0000
ROA not before: Thu 08 Dec 2022 10:42:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56681
IP address blocks: 188.255.224.0/24 maxlen: 24
188.255.221.0/24 maxlen: 24
188.255.146.0/24 maxlen: 24
188.255.169.0/24 maxlen: 24
188.255.173.0/24 maxlen: 24
188.255.184.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f1:53:ee:47:18:22:e3:37:30:ce:70:39:d2:73:fa:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Dec 8 10:42:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=631db5f02dff6c617b0ff69325e2f21a9ecf427b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:46:52:d7:2a:00:aa:0b:14:e7:de:5f:6d:ba:
16:02:c5:ae:60:d2:ab:83:44:0a:78:01:7d:98:2a:
2e:4b:9c:19:21:d4:37:42:e8:22:24:aa:8a:a5:56:
fc:39:92:a2:db:d2:45:6f:fe:b4:ff:bd:2e:10:8c:
11:d4:2b:9a:6c:98:c4:1d:3b:e5:b1:1e:3b:fe:a1:
54:40:64:7a:5a:42:a2:40:5a:a4:32:da:62:dd:e9:
1e:08:78:f6:e4:59:ec:a6:0a:63:12:c5:fb:f6:28:
0d:f7:d5:b1:01:df:63:00:e5:9e:ee:52:b9:35:5e:
1a:f2:e1:25:4d:02:17:72:28:df:69:48:bc:78:9b:
e0:42:29:63:4f:0e:e7:03:fd:71:94:a0:2e:b3:1e:
de:a0:c9:f2:67:7b:54:15:01:a7:5b:0b:58:db:7b:
06:94:f2:92:fe:90:2b:02:ab:1d:66:36:c0:9c:1e:
84:71:9a:3e:3d:e3:83:7d:c9:62:43:06:3e:06:6f:
57:65:44:11:e7:be:fe:7a:07:94:66:61:a0:65:df:
5f:c0:5b:a2:7e:82:65:01:99:3b:8f:10:7e:24:e8:
39:a7:ef:71:b9:99:2f:ca:d2:f1:fc:e8:0d:df:a7:
e4:4f:6a:3e:55:65:5c:7d:5f:c3:be:c0:b3:21:05:
b6:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:1D:B5:F0:2D:FF:6C:61:7B:0F:F6:93:25:E2:F2:1A:9E:CF:42:7B
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Yx218C3_bGF7D_aTJeLyGp7PQns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.255.146.0/24
188.255.169.0/24
188.255.173.0/24
188.255.184.0/24
188.255.221.0/24
188.255.224.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:44:03:14:a5:8c:d6:c5:4b:24:ba:52:d3:df:d5:4d:1e:55:
09:61:59:57:c0:8a:60:77:5e:a4:4b:c2:0d:ba:33:37:a0:f9:
a7:4d:09:6e:ac:74:a2:cf:f0:26:ed:7e:c1:c9:b8:16:4f:b6:
17:88:6c:9c:4c:94:a8:69:93:23:e7:9f:7c:ce:28:bd:cc:4c:
83:15:97:7f:b5:fd:6c:e0:7d:2c:e9:62:99:3f:23:dd:1e:1c:
97:9f:4b:17:69:f2:c9:2e:c7:b2:10:5d:6c:72:41:41:fa:f4:
bb:6c:bc:bb:81:09:5a:e8:f0:6f:7d:47:da:11:ed:21:bc:e7:
fe:76:cb:af:a8:da:80:86:ea:c7:95:56:51:8e:d3:7a:ba:ed:
20:a8:76:a5:d2:77:78:82:33:5d:db:e4:e1:75:71:6e:2c:12:
58:1d:14:46:43:63:a2:92:71:5d:91:dc:ed:7c:7d:c7:5a:23:
97:4e:c4:a3:28:21:19:cd:19:d4:c6:02:39:74:47:21:2f:2e:
f6:34:c6:18:07:12:f3:0a:a7:f0:1f:9c:cb:e5:1d:dc:79:02:
26:fa:f7:a2:02:41:91:d2:19:28:b8:42:08:ac:06:8e:eb:19:
ac:af:5b:99:70:06:d6:c4:b5:ef:e0:07:db:15:21:44:3e:9a:
10:c7:92:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:35 2023 by rpki-client on console-fra.rpki-client.org