Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/YlsDPxQaAGNrT7f4F8U_fdBd5d0.roa
File: YlsDPxQaAGNrT7f4F8U_fdBd5d0.roa (raw, json)
Hash identifier: MDjd749L02zXp/cuS2apKer0FkIW6++M1ZE8k2P9zho=
Subject key identifier: 62:5B:03:3F:14:1A:00:63:6B:4F:B7:F8:17:C5:3F:7D:D0:5D:E5:DD
Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial: 0DCCABC6
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/YlsDPxQaAGNrT7f4F8U_fdBd5d0.roa
Signing time: Sat 01 Jan 2022 12:55:58 +0000
ROA not before: Sat 01 Jan 2022 12:55:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48430
IP address blocks: 185.231.204.0/22 maxlen: 22
185.139.212.0/22 maxlen: 22
2a07:1840::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 231517126 (0xdccabc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Validity
Not Before: Jan 1 12:55:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=625b033f141a00636b4fb7f817c53f7dd05de5dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d6:c1:10:ac:d0:92:da:cc:0d:ad:c5:41:1d:
dc:28:4a:8b:df:3c:9f:5c:d2:f1:29:3e:5a:cb:e5:
44:0e:fe:97:e6:70:ca:9b:b2:f5:1d:42:b8:c0:c6:
85:3f:d1:dd:a2:f3:79:13:d8:33:bb:3b:1b:82:8f:
23:6c:63:ee:1d:8f:c9:be:fd:12:78:b7:9f:f0:80:
80:08:88:25:3c:ba:91:0d:b2:30:e1:5d:80:06:f4:
2d:a9:02:29:71:4d:3a:8a:f7:85:16:27:2f:75:3b:
34:6f:65:5e:b5:e5:9a:77:a2:0a:51:00:45:b5:4d:
e6:3a:95:f0:08:aa:1d:49:14:d7:bd:d0:0b:4e:4d:
4d:31:9d:73:c8:07:85:3d:e6:01:f0:cf:2a:85:14:
da:8d:50:3d:40:bb:b7:2c:d7:45:9f:42:6b:ad:90:
cc:85:9b:e8:01:04:67:45:7b:df:2b:f9:1a:92:2d:
b1:de:85:a1:1a:f3:2c:99:ab:95:5d:03:6b:a5:b4:
e7:bf:eb:64:4f:5c:b3:97:6f:ab:82:97:8f:37:59:
34:40:7d:73:d4:8b:5c:b2:b9:10:0e:67:1c:99:63:
61:e0:82:72:e1:fa:36:72:8e:14:6c:5d:80:28:44:
27:4c:1b:c8:83:54:19:ca:bc:e8:c5:33:61:46:4c:
bb:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:5B:03:3F:14:1A:00:63:6B:4F:B7:F8:17:C5:3F:7D:D0:5D:E5:DD
X509v3 Authority Key Identifier:
keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/YlsDPxQaAGNrT7f4F8U_fdBd5d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.139.212.0/22
185.231.204.0/22
IPv6:
2a07:1840::/32
Signature Algorithm: sha256WithRSAEncryption
df:23:2a:aa:0f:5e:e4:6b:8a:71:45:f6:ca:cb:79:53:c5:01:
7d:21:3b:fa:a8:31:79:66:d7:7c:81:73:3b:fa:5c:6b:e3:75:
d4:4d:4e:19:21:24:93:83:30:52:32:10:b5:1d:b7:9a:76:f5:
b4:2c:1e:0a:5a:86:ca:51:d0:65:38:ed:98:9e:03:00:f0:70:
f1:b9:19:90:30:be:7b:c8:73:75:59:24:ec:49:36:3d:24:48:
de:cd:68:d7:cc:7c:fc:f5:2c:b5:79:ee:16:b1:c9:40:22:b3:
1d:38:a0:b2:9f:5a:b4:c4:72:50:d9:ae:44:82:7c:18:71:0a:
28:82:ac:ca:c5:d9:87:28:cf:82:89:01:f8:9a:9a:74:8b:ed:
9d:58:b7:48:35:89:17:b2:e8:6f:1f:4a:6b:43:ff:a0:dc:b4:
25:72:cc:b2:18:33:7a:6b:b5:14:51:8d:da:b8:1f:6c:52:db:
1c:6c:c0:82:3e:c5:2b:d2:1d:ea:bc:f1:48:3d:52:de:21:d6:
85:55:03:c5:04:05:8b:de:3a:d0:58:04:38:f4:4b:c0:7a:18:
45:80:4e:bc:b0:fa:86:63:23:ee:a5:50:47:e3:1a:44:90:db:
7c:91:4e:20:9d:d5:73:a9:06:13:98:0d:a9:63:0d:4e:8a:03:
5d:46:ad:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:42 2023 by rpki-client on console-fra.rpki-client.org