Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/yjdoQo01-pVju-SUQ8oppSguAPE.roa
File: yjdoQo01-pVju-SUQ8oppSguAPE.roa (raw, json)
Hash identifier: EmrBaGulnuog1gt+7gdnnE94r6oHkWVU2ko1+0Szn6Y=
Subject key identifier: CA:37:68:42:8D:35:FA:95:63:BB:E4:94:43:CA:29:A5:28:2E:00:F1
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 0C189AA0
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/yjdoQo01-pVju-SUQ8oppSguAPE.roa
Signing time: Thu 12 May 2022 14:09:46 +0000
ROA not before: Thu 12 May 2022 14:09:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212512
IP address blocks: 160.20.109.0/24 maxlen: 24
185.250.210.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 202939040 (0xc189aa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: May 12 14:09:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ca3768428d35fa9563bbe49443ca29a5282e00f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:25:35:7e:88:9c:29:f0:a4:7e:3a:9a:3a:e8:
16:99:01:41:69:b8:18:c3:a2:15:37:35:9c:6c:81:
45:f9:5c:f6:02:ce:2d:fb:72:ff:69:2f:fa:8c:6f:
e7:34:b0:f1:0c:ba:28:a3:fc:73:ca:33:f8:36:33:
5f:4b:85:a2:73:16:0b:74:f8:c8:21:9d:69:8e:1c:
59:d9:c4:c8:67:b9:4b:f9:8b:09:9d:18:e7:10:5d:
f7:01:0d:83:40:be:b8:8f:7e:7b:54:78:e3:f2:c0:
2f:0f:83:62:d8:43:d4:cb:82:8e:e7:8b:c3:f5:16:
ea:c9:88:16:5d:8f:04:45:eb:67:a1:66:76:89:cc:
99:bd:e4:30:10:80:4c:7b:41:64:cd:c7:3f:45:48:
21:8d:ce:65:02:23:f0:2c:b9:2a:73:bf:2d:7b:49:
e3:91:3e:c1:b4:6a:18:9a:7d:02:c1:2e:5e:a4:82:
f5:2f:41:63:71:0b:85:3b:b0:f0:c1:1f:f9:59:cb:
1a:ea:14:dd:97:62:ab:de:91:97:f5:dc:eb:fa:4d:
a4:96:8f:88:a8:e5:d3:3f:28:51:3d:23:9e:14:b1:
7d:0b:17:ba:a2:f6:66:d9:e4:dd:53:61:b1:30:67:
13:f6:78:f7:83:cb:db:3f:16:4e:f4:83:a8:56:ce:
dc:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:37:68:42:8D:35:FA:95:63:BB:E4:94:43:CA:29:A5:28:2E:00:F1
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/yjdoQo01-pVju-SUQ8oppSguAPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.20.109.0/24
185.250.210.0/24
Signature Algorithm: sha256WithRSAEncryption
71:ee:50:e0:ed:8f:ef:3a:b0:42:57:8f:56:b5:b9:dc:fa:27:
0e:cc:84:6a:3e:02:1f:63:c2:d6:77:cb:48:a8:22:5f:c5:24:
30:26:99:8a:3a:78:03:90:ee:65:71:0c:da:b3:e1:67:88:4a:
2e:07:b2:60:4e:f3:f9:c5:63:2d:bf:7b:c1:07:48:32:04:93:
c4:99:6e:db:ea:38:51:6e:b5:d6:90:9e:bd:44:6e:f6:3d:c9:
17:94:b9:3e:4a:62:24:0b:ed:8a:2b:cd:f6:06:4a:f3:c5:6f:
76:4b:fd:07:8e:41:f7:be:ab:1e:7f:ff:a8:ae:39:0c:04:47:
ca:ed:ae:57:b9:30:8c:f4:88:06:ad:f3:d2:85:29:d5:be:be:
4a:00:c8:bb:1a:d3:fa:4f:85:0e:32:0d:4c:0e:2f:e6:06:f8:
19:98:03:fc:31:ab:ac:11:93:66:64:93:ef:0b:d8:c8:fc:b5:
cb:37:82:9c:5f:b5:a0:cb:95:96:4c:c7:27:3e:ce:11:f0:a1:
f5:de:cd:08:df:e2:cd:e7:02:ae:b6:d6:6b:6e:16:a0:0a:45:
26:05:37:a8:fe:4f:ca:f0:0c:7d:67:37:2f:8d:aa:45:b8:bd:
92:e9:13:71:c7:2f:cf:bc:27:be:0a:84:f8:62:ae:55:09:1a:
06:76:bc:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:24 2024 by rpki-client on console-ams.rpki-client.org