Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/5ad73b-db17-4322-ade5-b9a9d8ae9421/1/YtkunteuKzJZHTFD9I2xIaj7xBg.roa
File: YtkunteuKzJZHTFD9I2xIaj7xBg.roa (raw, json)
Hash identifier: c1n2ZnbwJV4WyoXAnHH5yHWm7vYnL+rMPQfGhjBUAZs=
Subject key identifier: 62:D9:2E:9E:D7:AE:2B:32:59:1D:31:43:F4:8D:B1:21:A8:FB:C4:18
Certificate issuer: /CN=9b759ec9ff54de03a7ff3a65edbb2e0758e6878c
Certificate serial: 044EEC94
Authority key identifier: 9B:75:9E:C9:FF:54:DE:03:A7:FF:3A:65:ED:BB:2E:07:58:E6:87:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m3Weyf9U3gOn_zpl7bsuB1jmh4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/5ad73b-db17-4322-ade5-b9a9d8ae9421/1/YtkunteuKzJZHTFD9I2xIaj7xBg.roa
Signing time: Sat 01 Jan 2022 14:57:24 +0000
ROA not before: Sat 01 Jan 2022 14:57:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 164.153.132.0/24 maxlen: 24
164.153.133.0/24 maxlen: 24
164.153.134.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72281236 (0x44eec94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b759ec9ff54de03a7ff3a65edbb2e0758e6878c
Validity
Not Before: Jan 1 14:57:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62d92e9ed7ae2b32591d3143f48db121a8fbc418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:48:e2:de:3d:81:9f:f1:df:f0:de:8a:dc:30:
f0:48:a0:61:af:5d:55:1b:2d:1d:d6:41:ef:35:34:
c6:28:46:33:70:42:e5:a7:97:c5:10:df:bb:1a:bf:
78:66:b4:5f:ce:ea:f4:a5:68:7b:da:6f:60:c4:35:
63:70:b1:4b:20:08:7c:a0:92:e9:d3:d8:5d:da:2a:
10:ea:ae:56:d7:a9:d4:cd:ec:16:d7:cc:11:52:95:
77:5e:5a:4e:9b:eb:53:13:86:4b:3e:de:eb:d1:83:
8d:4e:9b:69:a1:c7:c1:4d:1c:a0:44:d5:20:55:c5:
89:64:f1:c6:2a:27:2a:5c:85:cf:8c:f6:93:9f:9a:
1d:c2:97:f4:b7:07:21:b6:3f:da:1b:7f:03:9e:e1:
c3:63:60:e4:cd:dd:17:8f:fb:a3:e5:cf:58:df:47:
cd:3e:ad:67:78:63:40:03:2d:d3:9f:bc:b4:ea:a4:
99:55:43:f9:74:03:5c:a9:21:0e:19:03:33:e5:76:
b5:d6:05:70:37:3a:42:be:cc:10:31:45:57:d0:b9:
d8:1e:10:09:7f:93:86:f5:7e:ee:0c:6e:b6:c8:19:
53:de:a5:a2:0c:06:63:52:ab:f9:d2:30:62:c4:48:
ae:62:5e:3c:c2:cc:33:d2:5f:43:fe:15:0e:60:5d:
a7:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:D9:2E:9E:D7:AE:2B:32:59:1D:31:43:F4:8D:B1:21:A8:FB:C4:18
X509v3 Authority Key Identifier:
keyid:9B:75:9E:C9:FF:54:DE:03:A7:FF:3A:65:ED:BB:2E:07:58:E6:87:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m3Weyf9U3gOn_zpl7bsuB1jmh4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/5ad73b-db17-4322-ade5-b9a9d8ae9421/1/YtkunteuKzJZHTFD9I2xIaj7xBg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/5ad73b-db17-4322-ade5-b9a9d8ae9421/1/m3Weyf9U3gOn_zpl7bsuB1jmh4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.153.132.0-164.153.134.255
Signature Algorithm: sha256WithRSAEncryption
9f:70:84:3c:93:7a:14:31:a6:40:33:d6:8f:03:03:9d:21:02:
58:8f:0b:80:69:56:71:db:fe:4d:06:ff:2e:aa:cf:54:4b:15:
48:a2:f7:48:90:81:a7:b6:d8:55:c4:2c:21:09:b2:4e:c7:d8:
ac:7d:ae:38:96:a4:c3:81:90:c5:b4:5c:a7:1b:08:03:26:8f:
62:29:93:d7:ff:ee:23:9b:40:13:66:51:8c:c3:de:46:2b:c8:
0d:7e:05:8a:8e:81:9a:6a:da:b5:5c:99:d5:a1:b2:92:66:73:
66:6f:84:2f:bc:c6:f1:d9:b0:4a:51:5c:85:5f:4d:e7:2d:f1:
07:0d:ec:06:6c:02:2b:7f:b6:b2:5a:c5:e3:82:3d:3f:6b:6b:
69:03:ea:42:c9:2b:7f:8f:4b:1f:10:17:5d:6d:61:e4:45:a8:
a3:d7:42:99:fc:fe:c8:36:18:16:79:0f:b8:59:08:63:ad:5a:
7f:65:d5:33:40:5d:b6:73:a4:5b:9b:fb:3f:71:7f:89:6c:6b:
a4:6b:2b:02:b5:6b:b9:36:03:17:39:95:d2:df:e9:d5:8a:dc:
fc:87:4f:04:04:a3:87:13:4d:58:42:ed:a8:f4:28:80:89:65:
ef:76:a9:b0:33:be:ff:da:19:52:0e:7e:c4:13:17:9e:10:41:
70:c6:56:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:32 2023 by rpki-client on console-fra.rpki-client.org