Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/yw20H3bOJCF0z5jNn1xt6csiJSo.roa
File: yw20H3bOJCF0z5jNn1xt6csiJSo.roa (raw, json)
Hash identifier: XBz/jnJtGwE079xW5BdB+MlW/KmPhgGKfEdjtaZMbTo=
Subject key identifier: CB:0D:B4:1F:76:CE:24:21:74:CF:98:CD:9F:5C:6D:E9:CB:22:25:2A
Certificate issuer: /CN=541fdc7a2f11a5766d3ad7bdf625ce5e119a8fdf
Certificate serial: 01837055ADA1D981843E5A9A476A7C3F74B8
Authority key identifier: 54:1F:DC:7A:2F:11:A5:76:6D:3A:D7:BD:F6:25:CE:5E:11:9A:8F:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VB_cei8RpXZtOte99iXOXhGaj98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/yw20H3bOJCF0z5jNn1xt6csiJSo.roa
Signing time: Sat 24 Sep 2022 16:30:06 +0000
ROA not before: Sat 24 Sep 2022 16:30:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 142430
IP address blocks: 185.104.35.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:70:55:ad:a1:d9:81:84:3e:5a:9a:47:6a:7c:3f:74:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=541fdc7a2f11a5766d3ad7bdf625ce5e119a8fdf
Validity
Not Before: Sep 24 16:30:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cb0db41f76ce242174cf98cd9f5c6de9cb22252a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:19:bd:50:0c:db:ff:a3:d5:d3:de:f3:41:c6:
61:6c:69:bc:c3:58:2c:b8:f5:e6:c9:d2:37:2c:a5:
d9:2d:6b:3b:cf:5a:d4:f4:5b:e0:8c:af:30:4b:41:
57:9b:33:07:a7:ef:84:f1:21:f5:c8:2f:64:a2:11:
b8:be:12:ba:7b:be:03:55:8c:70:53:af:44:5e:fd:
bd:06:be:9e:c1:1b:4e:ff:56:56:c7:9e:22:2c:0d:
65:4c:e4:48:31:4e:08:58:fb:28:65:cd:49:2e:84:
88:0b:48:76:13:c8:f2:43:0c:7a:8f:78:71:b5:4b:
59:84:5b:3f:57:c2:29:84:ff:73:b3:ee:41:70:d7:
06:17:fa:c2:b9:66:8a:7b:61:48:1e:2f:55:dc:81:
89:cf:ec:4f:f0:8d:5b:fa:25:2f:ad:87:80:87:2d:
0a:27:2b:26:78:66:b8:af:e1:48:73:00:a6:b7:5d:
02:38:02:f0:e6:70:f1:1a:c5:f9:35:8b:e9:78:f1:
49:e5:87:4e:c3:a3:51:a5:b5:72:f0:ab:de:0b:59:
dd:8a:f2:8f:9d:0e:c8:68:4f:7a:57:52:b4:66:5f:
be:4f:68:3f:76:a7:03:1a:4c:8e:76:23:af:77:bd:
0c:5e:ac:a3:a9:a1:bf:90:7c:39:01:93:2d:50:18:
82:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:0D:B4:1F:76:CE:24:21:74:CF:98:CD:9F:5C:6D:E9:CB:22:25:2A
X509v3 Authority Key Identifier:
keyid:54:1F:DC:7A:2F:11:A5:76:6D:3A:D7:BD:F6:25:CE:5E:11:9A:8F:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VB_cei8RpXZtOte99iXOXhGaj98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/yw20H3bOJCF0z5jNn1xt6csiJSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/VB_cei8RpXZtOte99iXOXhGaj98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.104.35.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:28:1a:ce:a5:4e:93:a2:10:18:69:26:14:10:e8:25:6f:9c:
04:de:9f:e3:cf:3a:27:16:55:8c:1c:b8:19:86:34:d8:49:28:
b2:e6:e6:ff:37:4e:bc:20:02:9f:b0:8a:7a:02:28:96:7d:56:
b4:5a:3a:68:37:5a:f3:5b:8d:b9:33:b8:7a:33:ff:5a:96:0b:
06:c6:e5:8a:67:84:f3:0b:09:b3:cf:ac:18:24:b3:10:40:01:
dd:53:62:02:2f:03:15:a7:d8:ad:77:84:fb:bf:b4:25:fe:d3:
2e:45:14:24:71:20:ce:58:07:ce:d7:a1:27:38:ac:c9:02:99:
d0:0a:63:ea:8e:d0:86:eb:82:46:76:f6:8a:91:8f:24:ac:12:
e9:97:6a:65:16:8a:5f:70:c4:70:ba:7c:e7:aa:2c:16:13:13:
75:72:52:fd:72:1a:f2:a1:48:e7:dc:f7:3a:48:ad:91:26:7b:
5a:8d:52:84:97:4d:3a:66:d5:e0:dc:fc:b3:c2:de:60:31:da:
f0:57:a5:58:e5:a9:00:c1:89:d9:0c:ab:85:6e:f1:66:7e:d1:
03:8f:8f:cb:af:be:3d:65:56:68:d2:94:87:e7:1b:9f:5c:20:
af:d1:1a:cb:f8:83:86:7b:c8:ce:87:af:32:c8:55:49:4d:da:
4f:fc:9f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:39 2023 by rpki-client on console-ams.rpki-client.org