Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/ye61CWfdnkxXJP1VkJF8ooJTf1I.roa
File: ye61CWfdnkxXJP1VkJF8ooJTf1I.roa (raw, json)
Hash identifier: hAhkI6EuBBgenKXkS6JJG1SZdi9torcUpVkfOBf3GKo=
Subject key identifier: C9:EE:B5:09:67:DD:9E:4C:57:24:FD:55:90:91:7C:A2:82:53:7F:52
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 097E0EB0
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/ye61CWfdnkxXJP1VkJF8ooJTf1I.roa
Signing time: Wed 08 Jun 2022 10:29:05 +0000
ROA not before: Wed 08 Jun 2022 10:29:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58061
IP address blocks: 188.255.200.0/24 maxlen: 24
212.69.18.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159256240 (0x97e0eb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jun 8 10:29:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c9eeb50967dd9e4c5724fd5590917ca282537f52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c0:bb:cb:c5:17:b7:0a:47:18:9b:0e:85:50:
48:50:e0:da:95:0e:f9:17:c1:01:c1:fb:8a:f7:d4:
4e:3d:57:b6:a7:aa:a2:5d:59:0a:a2:5e:fa:ec:88:
60:24:df:22:de:e7:13:22:cc:13:0b:69:cf:c9:81:
5b:ac:f0:8d:b9:14:bf:a9:cc:25:32:4d:0b:a7:b2:
e9:4d:81:c5:54:c3:7f:ac:6f:80:4d:eb:e8:36:25:
bf:57:5f:72:95:de:d2:92:d3:70:be:5e:60:15:bc:
71:ef:c0:c6:e3:fd:76:9d:89:ab:ca:a1:f4:fe:20:
73:20:28:e8:97:a5:f1:77:3d:ee:b8:b1:54:76:fe:
4a:71:26:07:c0:eb:4d:7b:40:65:69:0a:3d:88:2b:
36:9e:b6:48:1e:c2:ba:a5:13:40:a2:7b:37:de:12:
84:9f:b7:c5:a8:1b:8e:6a:bb:c0:63:bc:e2:85:48:
0d:96:1c:48:cc:bf:7a:3f:2f:c0:39:04:ef:78:17:
24:72:43:30:5c:f5:ad:e2:37:43:cd:e9:75:cc:58:
54:13:81:6e:d6:3b:7f:89:ba:d1:37:ba:f8:49:91:
64:b0:05:2c:27:f1:77:aa:44:e9:e4:14:7a:b3:8e:
15:1d:63:49:70:17:c5:f3:56:22:f4:3b:f6:f7:cc:
fb:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:EE:B5:09:67:DD:9E:4C:57:24:FD:55:90:91:7C:A2:82:53:7F:52
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/ye61CWfdnkxXJP1VkJF8ooJTf1I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.255.200.0/24
212.69.18.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:8c:77:30:b4:0b:0e:c5:fa:b4:e1:55:9e:db:61:74:b3:90:
0b:42:75:08:ac:7b:c1:78:3e:5f:04:3d:41:20:33:68:62:d8:
2a:47:9b:5a:22:b4:07:f6:91:4f:ff:39:b1:fa:a0:c9:a5:b4:
12:d2:93:ba:73:0b:93:05:20:bb:55:aa:b0:4d:7a:a0:8b:2d:
6b:17:00:3c:99:ed:39:c6:83:81:83:8c:1b:f4:e9:19:22:8a:
3c:de:1c:ad:bf:c2:24:ce:47:52:d6:13:ab:3d:5a:a8:3b:d5:
17:a4:c6:40:a7:90:14:2c:30:1b:34:5c:89:f2:84:55:de:1b:
71:4d:7c:3b:be:2a:5e:ab:a1:42:63:cb:7b:5c:02:8b:62:8c:
da:34:e2:72:9f:9e:12:24:43:1c:57:ff:f5:cf:4e:1b:58:c9:
54:c1:c4:dc:17:be:b3:3d:a1:48:02:ce:fa:8a:54:b5:9d:36:
b9:8c:09:68:70:09:2d:6a:1c:8e:0d:c4:d5:45:14:a6:81:fc:
ad:f3:b3:5d:ca:3b:c6:ee:a2:1d:7f:ae:e8:f6:d6:2a:01:13:
b2:0c:43:98:33:35:f4:9a:af:72:cf:02:99:64:69:45:6e:a1:
ab:78:97:53:f1:9e:b0:cc:57:38:15:39:57:67:2b:d9:84:f3:
39:25:a2:e4
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIECX4OsDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
Zjg0ZTQ3MzhhNzBlYTM5YzA4Y2VmMjEwNDMyYWUzOTllYzdlOTE1MB4XDTIyMDYw
ODEwMjkwNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzllZWI1MDk2N2Rk
OWU0YzU3MjRmZDU1OTA5MTdjYTI4MjUzN2Y1MjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKDAu8vFF7cKRxibDoVQSFDg2pUO+RfBAcH7ivfUTj1Xtqeq
ol1ZCqJe+uyIYCTfIt7nEyLMEwtpz8mBW6zwjbkUv6nMJTJNC6ey6U2BxVTDf6xv
gE3r6DYlv1dfcpXe0pLTcL5eYBW8ce/AxuP9dp2Jq8qh9P4gcyAo6Jel8Xc97rix
VHb+SnEmB8DrTXtAZWkKPYgrNp62SB7CuqUTQKJ7N94ShJ+3xagbjmq7wGO84oVI
DZYcSMy/ej8vwDkE73gXJHJDMFz1reI3Q83pdcxYVBOBbtY7f4m60Te6+EmRZLAF
LCfxd6pE6eQUerOOFR1jSXAXxfNWIvQ79vfM+5MCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBTJ7rUJZ92eTFck/VWQkXyiglN/UjAfBgNVHSMEGDAWgBRvhORzinDqOcCM
7yEEMq45nsfpFTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2I0VGtjNHB3NmpuQWpPOGhCREt1T1o3SDZSVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzYvZGRmOGIzLTFjMDgtNDk1Yy04ZGRmLWZhZTVkYmVkM2IxYi8x
L3llNjFDV2Zkbmt4WEpQMVZrSkY4b29KVGYxSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzYv
ZGRmOGIzLTFjMDgtNDk1Yy04ZGRmLWZhZTVkYmVkM2IxYi8xL2I0VGtjNHB3Nmpu
QWpPOGhCREt1T1o3SDZSVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEALz/yAMEANRFEjANBgkqhkiG9w0B
AQsFAAOCAQEApIx3MLQLDsX6tOFVntthdLOQC0J1CKx7wXg+XwQ9QSAzaGLYKkeb
WiK0B/aRT/85sfqgyaW0EtKTunMLkwUgu1WqsE16oIstaxcAPJntOcaDgYOMG/Tp
GSKKPN4crb/CJM5HUtYTqz1aqDvVF6TGQKeQFCwwGzRcifKEVd4bcU18O74qXquh
QmPLe1wCi2KM2jTicp+eEiRDHFf/9c9OG1jJVMHE3Be+sz2hSALO+opUtZ02uYwJ
aHAJLWocjg3E1UUUpoH8rfOzXco7xu6iHX+u6PbWKgETsgxDmDM19Jqvcs8CmWRp
RW6hq3iXU/GesMxXOBU5V2cr2YTzOSWi5A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:05 2024 by rpki-client on console-ams.rpki-client.org