Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/eca327-d58f-491c-94c8-e3d045483412/1/Y84EIdumTKr5EgkFErnVndMfH5A.roa
File: Y84EIdumTKr5EgkFErnVndMfH5A.roa (raw, json)
Hash identifier: YuO8suae96VHHt8Z7n8HkDhKzLVrqcCu9En/MokggJ8=
Subject key identifier: 63:CE:04:21:DB:A6:4C:AA:F9:12:09:05:12:B9:D5:9D:D3:1F:1F:90
Certificate issuer: /CN=9e61403ac69e2874f5622d7ee568e8e49f064c2e
Certificate serial: 0185704BBC3DCF25C64A38DF9538E27F2824
Authority key identifier: 9E:61:40:3A:C6:9E:28:74:F5:62:2D:7E:E5:68:E8:E4:9F:06:4C:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/eca327-d58f-491c-94c8-e3d045483412/1/Y84EIdumTKr5EgkFErnVndMfH5A.roa
Signing time: Mon 02 Jan 2023 02:24:49 +0000
ROA not before: Mon 02 Jan 2023 02:24:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51038
IP address blocks: 195.254.160.0/23 maxlen: 24
2001:67c:200::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:4b:bc:3d:cf:25:c6:4a:38:df:95:38:e2:7f:28:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e61403ac69e2874f5622d7ee568e8e49f064c2e
Validity
Not Before: Jan 2 02:24:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=63ce0421dba64caaf912090512b9d59dd31f1f90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:91:e1:c6:e0:ad:52:7b:be:a9:5a:0c:bc:cb:
ba:42:30:45:60:1c:b1:fa:93:49:5b:e4:4a:fb:3d:
c8:d6:3e:c7:3f:74:60:ee:ae:ed:d6:53:97:c3:52:
61:15:eb:be:ec:77:86:e8:20:c5:e0:0d:b5:1c:4b:
19:71:d7:c4:b6:29:c1:06:13:f7:5e:e5:19:03:d2:
e6:32:e3:19:b7:ce:ef:de:5c:02:1a:aa:7e:c0:96:
d2:3f:c8:63:e2:d6:40:c7:96:c4:74:d9:e5:c4:eb:
cf:0e:15:56:b5:39:cf:2f:85:47:2e:f6:5b:b1:36:
d0:f0:ed:9c:27:e5:8c:fc:fd:ab:3f:60:2c:cd:31:
97:00:4d:4c:b7:7f:6b:77:3f:a0:e4:9b:85:b3:71:
57:03:13:30:e5:96:68:c5:8f:79:e7:50:82:24:af:
03:f9:63:d3:b1:2d:ae:16:20:9f:8e:c8:8d:61:dd:
f5:39:d4:54:56:9b:5d:1a:8d:b8:54:41:4b:f9:d8:
ab:a2:c6:4f:4a:3e:f8:96:1a:95:51:98:f2:fa:52:
15:8f:18:38:0a:d4:1d:5a:5b:12:52:ef:f6:bc:b7:
ca:c9:56:e6:4a:35:03:67:56:0e:c3:8c:92:53:66:
02:ab:82:eb:93:f3:a0:52:bc:31:de:dc:0f:c7:74:
c4:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:CE:04:21:DB:A6:4C:AA:F9:12:09:05:12:B9:D5:9D:D3:1F:1F:90
X509v3 Authority Key Identifier:
keyid:9E:61:40:3A:C6:9E:28:74:F5:62:2D:7E:E5:68:E8:E4:9F:06:4C:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/eca327-d58f-491c-94c8-e3d045483412/1/Y84EIdumTKr5EgkFErnVndMfH5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/eca327-d58f-491c-94c8-e3d045483412/1/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.254.160.0/23
IPv6:
2001:67c:200::/48
Signature Algorithm: sha256WithRSAEncryption
89:75:38:a8:a6:37:33:9e:82:bf:ac:57:74:32:b5:78:a2:30:
c5:23:d1:f8:5d:8a:28:54:c8:75:d6:eb:90:9b:36:1c:23:b8:
dc:d3:5b:90:a5:a6:9c:28:ee:e4:31:c7:88:1c:6a:dd:83:71:
50:25:a5:5b:a2:51:e7:8b:a8:16:29:e9:33:b6:0a:a9:a6:39:
b6:a4:51:6e:da:6b:5f:95:02:15:36:4b:48:58:e6:bb:6e:35:
a2:7e:0d:59:fe:02:9f:33:b0:24:2b:76:22:3f:ee:87:da:42:
be:dd:8f:be:e8:82:57:e5:d9:05:9c:fb:28:16:dc:01:8f:53:
39:06:94:71:db:a9:ee:81:9f:97:29:68:38:b5:d5:b0:fd:62:
ee:11:ce:b7:7c:f1:ef:67:e2:4f:98:47:dc:9a:3a:ac:20:13:
3b:49:6b:6a:ba:0e:29:ea:6d:a2:ca:dd:f8:7b:95:2d:26:0a:
2b:30:13:0c:67:92:b6:d4:21:48:ff:75:d5:02:1d:a9:de:07:
d7:a2:6b:f1:e5:07:66:09:73:6d:a1:03:c4:a9:f8:14:5c:a7:
24:7a:ae:a2:42:5c:d1:90:8a:2b:42:d8:e2:8c:86:7b:c2:69:
c7:53:64:b4:77:cf:3d:18:dc:82:db:4d:b9:37:bf:fd:43:9d:
6d:c4:9a:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:51:05 2025 by rpki-client