Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/ygJ7DoFCVOe1dsYnV-pvWvEFoUk.roa
File: ygJ7DoFCVOe1dsYnV-pvWvEFoUk.roa (raw, json)
Hash identifier: FYUMg50IkD9Cwu+jpI2cLAEh6+NUlogZmVAb3hZ88to=
Subject key identifier: CA:02:7B:0E:81:42:54:E7:B5:76:C6:27:57:EA:6F:5A:F1:05:A1:49
Certificate issuer: /CN=0c202663de852c7060fdea0298b490d5edcc0f24
Certificate serial: 0182F8FFAFDE8E3967C1801A45BE868F1560
Authority key identifier: 0C:20:26:63:DE:85:2C:70:60:FD:EA:02:98:B4:90:D5:ED:CC:0F:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/ygJ7DoFCVOe1dsYnV-pvWvEFoUk.roa
Signing time: Thu 01 Sep 2022 12:21:22 +0000
ROA not before: Thu 01 Sep 2022 12:21:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48504
IP address blocks: 194.32.168.0/22 maxlen: 24
176.125.224.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:f8:ff:af:de:8e:39:67:c1:80:1a:45:be:86:8f:15:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c202663de852c7060fdea0298b490d5edcc0f24
Validity
Not Before: Sep 1 12:21:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ca027b0e814254e7b576c62757ea6f5af105a149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e1:f8:fb:92:1a:e4:46:4a:fa:37:cd:c8:5a:
90:be:ec:3d:eb:5f:07:5e:9e:d4:06:e2:eb:e5:30:
12:b1:2d:b2:58:6e:0c:1e:d5:4a:17:c9:50:b6:db:
7a:d3:98:37:6e:72:69:35:2b:64:29:89:22:63:7a:
45:89:c1:1b:f5:d1:48:65:7a:fe:17:99:4a:f8:e7:
2a:96:21:50:01:91:2f:20:5f:95:f8:3d:56:c6:96:
76:81:e0:96:f9:11:04:70:e6:50:3a:84:8e:7a:2a:
56:57:8f:7c:b0:bb:7c:f7:1f:88:d4:43:48:1a:b4:
b7:8d:b8:56:6a:0c:be:cb:98:d3:88:15:d8:c2:95:
23:c6:d8:8c:a4:ce:5f:7b:c2:4a:99:89:ea:bf:3a:
f2:df:91:6e:23:36:d7:61:79:dc:de:40:64:7c:3b:
ec:52:1f:b8:14:da:7b:8f:1d:55:d8:86:1f:4b:76:
47:1f:57:6f:f4:77:c9:ca:43:38:a0:84:08:fc:fd:
62:26:11:62:63:56:ea:29:bf:5d:8e:49:74:34:b4:
8f:ad:13:ac:96:9b:b7:9b:8f:78:e3:41:f8:c8:c3:
aa:e9:c9:f8:87:97:8c:f5:bd:ca:ec:f3:44:49:06:
0a:04:be:df:ea:dc:d9:ca:32:0d:47:c9:44:bb:dc:
5c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:02:7B:0E:81:42:54:E7:B5:76:C6:27:57:EA:6F:5A:F1:05:A1:49
X509v3 Authority Key Identifier:
keyid:0C:20:26:63:DE:85:2C:70:60:FD:EA:02:98:B4:90:D5:ED:CC:0F:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/ygJ7DoFCVOe1dsYnV-pvWvEFoUk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.125.224.0/22
194.32.168.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:96:e3:ba:5f:75:67:6a:39:a0:8c:fc:23:6e:ff:1a:84:34:
16:8c:b3:bc:89:60:e9:31:ad:9d:c9:29:9f:2a:78:2d:f9:0a:
e8:47:7b:23:ce:eb:89:82:71:37:fa:4f:be:ca:34:e8:3a:42:
0f:95:f1:59:4c:28:99:d3:1e:0e:33:df:1e:b8:c6:a1:78:6f:
6c:70:5f:fe:65:fc:82:19:f4:50:86:2f:4a:25:9e:08:da:1e:
ee:c7:2a:fe:d8:f5:46:96:82:ba:a3:01:ab:fa:32:aa:cb:cf:
6e:fd:f8:e3:5f:b9:bc:52:47:6a:d3:2b:86:88:ff:df:75:46:
b2:e4:ba:75:a5:11:de:06:6f:b7:90:00:9a:82:e0:dc:c2:51:
df:2c:a9:aa:23:92:73:9d:82:cc:93:19:8c:9f:fc:8a:25:67:
68:3e:18:99:07:8c:50:7e:02:dd:c6:b3:dc:00:d5:36:90:6d:
f8:92:03:ca:18:24:25:21:3d:ac:68:32:b9:a6:c7:73:9f:9d:
4b:c5:8d:0c:54:e6:d5:15:fb:ba:da:64:61:11:ef:7b:43:bb:
0f:d5:82:a2:58:d7:5e:82:37:66:a8:10:e9:f8:81:ab:35:72:
c5:ca:c8:12:00:99:b3:fa:d2:fb:7b:50:12:d5:af:28:d6:4c:
9b:bc:32:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:37 2023 by rpki-client on console-ams.rpki-client.org