Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/ywy5R6A2sLvSguGqxLSejQFokvk.roa
File: ywy5R6A2sLvSguGqxLSejQFokvk.roa (raw, json)
Hash identifier: 5qvCrYpcRSya5dO/FfmcPVyFW3eBPywE9u04c16ovOI=
Subject key identifier: CB:0C:B9:47:A0:36:B0:BB:D2:82:E1:AA:C4:B4:9E:8D:01:68:92:F9
Certificate issuer: /CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea
Certificate serial: 0DECDC8E
Authority key identifier: 72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/ywy5R6A2sLvSguGqxLSejQFokvk.roa
Signing time: Sat 01 Jan 2022 08:00:52 +0000
ROA not before: Sat 01 Jan 2022 08:00:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204092
IP address blocks: 80.67.187.0/24 maxlen: 24
80.67.190.0/24 maxlen: 24
2001:913:6000::/36 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 233626766 (0xdecdc8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea
Validity
Not Before: Jan 1 08:00:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cb0cb947a036b0bbd282e1aac4b49e8d016892f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b6:a4:cc:49:89:95:e5:d0:cc:5f:0e:93:a3:
b0:69:42:6e:10:34:fe:fb:af:f8:cc:13:fd:19:3d:
3e:51:fe:c3:a6:51:05:9e:d3:54:26:51:6b:05:8f:
d3:db:f0:e9:00:bf:f3:3f:98:ae:15:77:fb:8d:39:
9c:6d:bc:bb:d6:83:c0:69:13:7c:43:04:f6:a3:c5:
3f:4d:cc:a1:2c:21:4b:cf:88:44:d7:92:09:98:15:
4d:0b:d7:93:44:02:e0:3c:00:5e:08:53:32:aa:f9:
7c:fe:a1:19:61:77:bc:da:b5:5e:c8:53:54:8d:8d:
2a:df:5b:39:c5:4c:e9:db:ee:57:b1:63:cb:49:e9:
7b:19:93:5f:b0:40:dd:cc:f8:e7:e3:ae:27:e2:b2:
98:89:bd:af:06:1b:dd:55:6a:fa:f0:47:99:54:23:
0e:82:64:05:cd:0c:5b:a9:8b:06:e8:ed:fe:78:fc:
20:90:17:20:a5:41:51:c3:eb:d9:6e:50:9a:be:5f:
0d:eb:b9:f8:73:94:85:05:9a:a6:27:a9:c1:0c:cb:
be:91:f8:f9:97:06:3e:47:c6:dd:02:04:16:aa:12:
70:8f:d8:8e:a6:79:88:75:3b:6b:03:ed:07:28:b1:
9b:79:aa:a2:1c:8f:c6:1a:97:70:f9:21:70:66:50:
8a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:0C:B9:47:A0:36:B0:BB:D2:82:E1:AA:C4:B4:9E:8D:01:68:92:F9
X509v3 Authority Key Identifier:
keyid:72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/ywy5R6A2sLvSguGqxLSejQFokvk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.67.187.0/24
80.67.190.0/24
IPv6:
2001:913:6000::/36
Signature Algorithm: sha256WithRSAEncryption
54:97:bf:84:50:74:b3:bc:03:67:a3:b9:ff:7c:b0:3f:77:27:
74:83:49:1b:db:cd:f6:3c:bb:5f:09:aa:de:99:55:25:ba:82:
ca:8b:f8:6c:84:6b:dc:4a:d8:a4:c1:2c:62:7b:1e:c5:ca:12:
8e:0f:8f:98:09:38:64:2c:89:6a:32:7b:34:27:f1:cf:93:ca:
e6:d6:6a:69:2f:61:7d:48:0a:06:ef:31:96:3a:84:37:88:6f:
4f:c6:cd:01:da:02:f7:11:19:b7:53:43:80:a0:f2:e6:55:97:
6b:33:ed:d2:82:64:52:a1:10:89:0a:dc:cb:a9:76:de:30:70:
91:7c:dc:12:1c:2e:9c:87:41:bf:8e:9e:dc:f3:ff:6e:2b:05:
8d:61:8e:6d:c3:a0:09:d6:d6:f0:92:ae:a9:e2:bb:b6:38:90:
e4:87:de:02:4a:a1:40:77:d4:22:24:4c:d8:65:1d:43:60:94:
a9:e0:e1:26:58:d8:02:68:e9:ba:a8:6f:aa:be:32:09:be:77:
85:94:12:80:36:0c:8f:3b:03:1b:78:bb:89:44:8f:cb:d7:de:
bb:2a:6f:db:52:20:14:09:56:d0:42:0f:04:b9:b4:29:c9:33:
4a:b6:14:14:9e:f7:b9:93:11:47:78:18:81:f3:3b:e0:3e:fc:
1c:ff:31:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:37 2023 by rpki-client on console-ams.rpki-client.org