Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/YVmhIiX5shzxewAL3CO53jt98gU.roa
File: YVmhIiX5shzxewAL3CO53jt98gU.roa (raw, json)
Hash identifier: RxGcbKnHkjrH0EUg9e/xAAMH/YUSZJMucb6Iw8YhjrI=
Subject key identifier: 61:59:A1:22:25:F9:B2:1C:F1:7B:00:0B:DC:23:B9:DE:3B:7D:F2:05
Certificate issuer: /CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Certificate serial: 14228946
Authority key identifier: B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/YVmhIiX5shzxewAL3CO53jt98gU.roa
Signing time: Sat 01 Jan 2022 14:01:12 +0000
ROA not before: Sat 01 Jan 2022 14:01:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199775
IP address blocks: 185.95.108.0/22 maxlen: 22
185.6.152.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 337807686 (0x14228946)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Validity
Not Before: Jan 1 14:01:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6159a12225f9b21cf17b000bdc23b9de3b7df205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ae:0f:a8:ee:b1:ed:cc:85:50:f6:d5:b1:c6:
e5:43:7a:1f:ea:52:26:ab:f2:2a:a6:df:ea:2e:4e:
1d:bd:39:47:b8:a0:76:c3:e9:20:74:af:6e:c2:ba:
26:34:09:c5:2c:28:33:e5:c2:17:7d:87:e3:62:75:
04:96:d1:19:07:7d:fa:50:5c:4a:e3:b3:74:5d:68:
29:5d:00:e9:0d:85:3b:dd:0a:9e:29:8e:27:b4:52:
3a:8e:30:94:00:b2:91:b6:0e:26:74:a4:31:9a:52:
e7:cb:6e:ab:81:24:a5:56:04:17:23:f5:67:6e:72:
74:ae:71:d8:3f:90:68:3a:81:71:f1:32:99:14:d1:
e2:f8:99:c6:9f:2f:11:cc:6e:a4:6a:84:86:32:47:
ee:7a:00:5f:5d:fe:7f:40:a2:25:6c:f4:fb:fc:2b:
f1:55:d2:c0:ff:67:21:ed:74:93:d5:29:a7:60:3c:
a5:8f:17:71:ed:af:1e:fc:4c:82:68:84:8a:7f:7c:
a0:b0:26:42:be:f5:15:6d:02:b2:4a:25:0a:9b:88:
6c:8b:9e:2b:92:cb:5a:c9:ba:64:86:35:40:ff:b9:
1f:2c:b2:75:fc:a5:2f:b1:a1:24:c8:e4:25:ac:0f:
77:66:61:89:c4:f7:af:b0:a3:0c:5b:15:75:b5:e3:
88:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:59:A1:22:25:F9:B2:1C:F1:7B:00:0B:DC:23:B9:DE:3B:7D:F2:05
X509v3 Authority Key Identifier:
keyid:B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/YVmhIiX5shzxewAL3CO53jt98gU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.6.152.0/22
185.95.108.0/22
Signature Algorithm: sha256WithRSAEncryption
37:78:4b:e2:89:e0:0c:f2:91:07:6e:58:f5:27:6b:d7:90:4c:
a0:3e:89:21:fd:6e:f9:ad:96:50:2a:29:cf:4f:d1:f9:9e:2a:
cc:61:82:41:cb:13:5c:0f:b5:c3:64:5c:d9:3f:5a:4b:bb:70:
fb:e2:65:2b:f3:e6:d3:97:a9:95:a6:c9:cf:e7:45:c6:51:6a:
25:d0:10:e2:8e:29:76:9a:ad:f0:b8:2e:7d:92:2b:bb:60:18:
e3:cb:74:e3:58:92:a4:25:2e:cd:a0:51:9e:31:90:e5:ea:bc:
cc:ff:dd:c9:b2:ba:58:6b:b7:70:7b:a8:2c:f3:8c:d2:2e:61:
38:a4:76:4f:62:75:ec:59:52:38:66:f6:fe:7f:f9:03:59:b4:
05:55:d1:a7:f0:b3:56:24:11:ac:79:ab:32:08:a0:4e:3c:91:
33:a0:93:88:9c:0d:df:58:c0:ca:d3:96:b1:2f:de:56:99:a0:
42:4b:99:c4:d0:20:0a:cb:64:70:51:fe:ff:94:6c:85:0c:9e:
16:8a:46:bb:02:09:f0:e6:81:a1:d4:72:ce:5a:f5:e2:23:fe:
8b:e5:80:18:f2:66:53:d1:9b:fa:bc:93:e0:f0:ea:ba:c5:13:
7b:aa:28:03:f6:8f:bd:e7:36:4f:84:d1:09:1b:d3:c0:ca:60:
49:ad:ac:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:51 2023 by rpki-client on console-ams.rpki-client.org