Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/Yhf5lWXP7YMW_P7g2Ys_BA3zKxI.roa
File: Yhf5lWXP7YMW_P7g2Ys_BA3zKxI.roa (raw, json)
Hash identifier: mEiKJoAVhDF+9zIendVBpNq0QXTIkb5zdx51w7wC76k=
Subject key identifier: 62:17:F9:95:65:CF:ED:83:16:FC:FE:E0:D9:8B:3F:04:0D:F3:2B:12
Certificate issuer: /CN=048b0c33776663cb4321a108f2f4d1635b5d2d8a
Certificate serial: 08AB449B
Authority key identifier: 04:8B:0C:33:77:66:63:CB:43:21:A1:08:F2:F4:D1:63:5B:5D:2D:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIsMM3dmY8tDIaEI8vTRY1tdLYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/Yhf5lWXP7YMW_P7g2Ys_BA3zKxI.roa
Signing time: Sat 01 Jan 2022 07:57:00 +0000
ROA not before: Sat 01 Jan 2022 07:57:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204310
IP address blocks: 185.253.175.0/24 maxlen: 24
185.253.172.0/22 maxlen: 22
2a0c:3ec0::/29 maxlen: 29
2a0c:3ec7::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145441947 (0x8ab449b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048b0c33776663cb4321a108f2f4d1635b5d2d8a
Validity
Not Before: Jan 1 07:57:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6217f99565cfed8316fcfee0d98b3f040df32b12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:69:b0:83:74:51:0a:37:6a:3a:66:a3:94:9b:
ed:53:bf:16:1e:82:70:1d:ba:aa:c3:af:c5:3f:39:
20:d6:dc:ba:6b:d0:6b:a6:29:c0:25:85:5f:28:54:
f7:59:16:63:4a:2c:16:85:bb:cb:81:fb:9a:12:96:
4a:64:ec:c1:b0:8c:da:cf:ce:03:90:0a:d6:37:68:
90:c8:f7:31:e3:1b:f7:3f:5d:cc:59:dd:e0:6b:c6:
9f:9c:1b:32:d7:80:54:17:a6:08:5a:b8:0c:76:c7:
e1:3e:4a:07:be:35:13:6c:cf:1d:9b:17:8d:14:b3:
9d:3a:a9:03:8e:1f:2f:06:cb:ec:fc:30:60:37:b1:
eb:7f:c8:f4:bc:70:91:cd:b7:ad:05:05:51:d7:4d:
ab:ce:5a:20:58:1c:42:dc:3c:42:75:8a:92:b2:a1:
d9:ef:71:b1:b7:a5:db:11:b8:a5:10:da:fd:12:eb:
f4:21:dd:fa:71:07:19:99:f6:b7:48:48:f0:81:a9:
9a:5c:e3:f8:8e:3a:e2:ca:89:b3:31:e4:70:94:fe:
79:5c:4a:89:f4:fd:2c:33:35:d3:8c:fd:2a:16:0e:
10:9f:55:a1:a2:f1:fb:3d:0d:1d:b2:81:99:8c:f6:
48:8b:26:82:a4:4f:46:dc:a2:94:f8:d2:88:04:c0:
68:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:17:F9:95:65:CF:ED:83:16:FC:FE:E0:D9:8B:3F:04:0D:F3:2B:12
X509v3 Authority Key Identifier:
keyid:04:8B:0C:33:77:66:63:CB:43:21:A1:08:F2:F4:D1:63:5B:5D:2D:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIsMM3dmY8tDIaEI8vTRY1tdLYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/Yhf5lWXP7YMW_P7g2Ys_BA3zKxI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.172.0/22
IPv6:
2a0c:3ec0::/29
Signature Algorithm: sha256WithRSAEncryption
c1:c7:95:21:a7:5b:93:ab:b1:51:06:11:f1:c1:9e:45:29:cd:
6a:8a:38:4f:92:0f:69:b5:78:aa:0a:de:a7:13:54:86:54:83:
59:d4:f6:36:77:a1:c1:32:5e:b8:a4:28:3b:3b:23:b0:ae:b5:
f2:a8:fd:2f:4c:e1:58:a6:37:cc:c8:f6:88:6c:a9:56:d6:0e:
d3:9f:59:e4:f9:3d:aa:c7:89:29:49:8d:0a:62:f5:67:95:f2:
bf:58:bf:3f:20:05:d0:30:09:1d:d8:d7:12:77:f6:7c:e6:65:
30:90:c7:c7:1e:54:bd:b5:1f:94:7a:90:22:45:04:1f:9f:bf:
2e:2a:c5:1b:a6:a5:ea:9f:52:3a:49:1b:eb:30:84:1e:ef:53:
c5:05:9f:43:28:94:96:9b:7a:6a:7c:87:9e:a8:e5:8b:bb:a3:
a2:55:ca:b5:f4:af:81:23:95:49:4d:a3:5d:e4:3e:46:0a:c5:
60:34:0e:b3:65:5e:69:4b:a8:01:e8:e7:b3:3c:5e:76:2b:63:
dd:21:03:e9:41:54:ac:54:77:63:0e:82:f3:fe:6b:48:9b:d4:
8a:6e:20:b8:0b:15:5e:c8:b6:19:f3:93:e4:b4:da:5f:b0:c4:
42:95:17:2a:f2:52:7b:60:2d:0f:70:e3:6a:a1:2c:0c:05:2d:
ff:20:9d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:21 2024 by rpki-client on console-ams.rpki-client.org