Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/YWCKDTUdXARlOjY3D5E1TXKFzBI.roa
File: YWCKDTUdXARlOjY3D5E1TXKFzBI.roa (raw, json)
Hash identifier: DuUN8UFvcDi37DjYxphFXNuSgSPGi20py+/Z2taskz4=
Subject key identifier: 61:60:8A:0D:35:1D:5C:04:65:3A:36:37:0F:91:35:4D:72:85:CC:12
Certificate issuer: /CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Certificate serial: 08562E7E
Authority key identifier: F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/YWCKDTUdXARlOjY3D5E1TXKFzBI.roa
Signing time: Wed 16 Mar 2022 13:00:06 +0000
ROA not before: Wed 16 Mar 2022 13:00:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 174
IP address blocks: 193.202.84.0/23 maxlen: 23
193.202.86.0/23 maxlen: 23
193.202.8.0/23 maxlen: 23
193.202.10.0/23 maxlen: 23
193.202.14.0/23 maxlen: 23
193.202.12.0/23 maxlen: 23
193.187.94.0/23 maxlen: 23
193.187.92.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139865726 (0x8562e7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Validity
Not Before: Mar 16 13:00:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=61608a0d351d5c04653a36370f91354d7285cc12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:27:3e:e5:14:c7:5f:6f:8b:dc:a3:a2:b4:28:
ec:e0:e7:d2:67:12:45:9a:b1:d7:50:2f:96:63:ad:
8d:34:67:a5:de:06:4d:11:8c:d4:21:e8:d8:4f:61:
3f:41:65:31:94:7b:13:e4:97:08:5c:13:89:e5:82:
7a:5d:73:f3:c4:f8:bb:7d:a9:ef:5f:69:f2:4e:f3:
99:45:d9:ae:1a:54:91:60:26:f4:d8:00:89:39:17:
a4:ec:5f:ee:92:4a:6f:0c:f8:21:5a:b8:3f:ec:cb:
27:4b:67:da:65:a6:65:9a:bc:90:2c:39:c5:15:95:
ce:a9:4f:63:a3:40:22:0e:ee:59:4b:f6:c5:df:78:
53:4f:c3:91:10:b3:2b:b0:f7:27:4f:af:f5:d5:b1:
45:3b:10:a6:e8:57:cf:6e:25:49:53:d9:3e:85:a8:
93:7d:b2:b7:0a:1f:0a:b7:ea:57:81:96:d3:eb:35:
fd:99:f1:66:a2:19:4e:48:d8:fe:d8:9e:2e:e8:d0:
8b:72:24:6c:41:3d:d4:a6:89:05:5b:96:bc:0e:2d:
ac:e7:c0:0f:f4:49:d1:2e:f0:cc:7b:ae:f8:9e:90:
44:23:8e:aa:e7:03:fc:66:d5:2d:f2:5c:8d:31:b4:
2d:94:2a:79:2e:29:54:5a:ce:cb:85:9c:e5:f0:0a:
e5:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:60:8A:0D:35:1D:5C:04:65:3A:36:37:0F:91:35:4D:72:85:CC:12
X509v3 Authority Key Identifier:
keyid:F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/YWCKDTUdXARlOjY3D5E1TXKFzBI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.187.92.0/22
193.202.8.0/21
193.202.84.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:47:4a:fb:84:99:86:ae:37:9a:0c:af:e9:dd:bf:3b:48:62:
3b:d2:52:3a:43:4c:1d:56:bf:4d:a6:f9:36:ae:39:df:30:b3:
b8:b1:f2:e0:01:31:22:56:7e:de:ee:04:2c:9c:80:04:a2:c9:
46:04:e0:1e:36:e5:89:53:b9:37:22:c9:af:00:17:51:3b:aa:
bc:76:7a:de:f2:7e:ee:34:e3:ab:53:07:aa:78:71:28:95:72:
ea:32:9f:ae:58:34:a1:2c:9e:a8:b6:66:f7:2d:f8:2e:7c:91:
be:99:11:68:d8:39:4e:43:ef:d1:64:6e:c3:0d:0e:89:d4:8b:
b4:de:33:3f:79:1a:61:f3:d9:ea:ab:2f:ef:0f:81:2f:94:76:
f4:23:cc:7b:a4:3b:81:0c:55:c0:cd:70:54:d6:e8:c3:90:9b:
02:15:22:d5:3f:3e:fa:e4:77:bb:37:38:f7:c3:96:a0:2a:a9:
4a:70:ae:0b:94:71:6d:0d:10:39:7a:25:39:36:2e:6e:af:52:
05:bd:0e:f2:f5:76:1b:36:16:c6:6f:a9:59:e7:90:ff:a0:43:
b9:fe:17:83:f3:d7:09:59:13:8f:93:9f:c7:a9:ac:b2:c8:77:
7d:8f:66:ca:6d:4f:8e:c6:ad:8f:09:d1:be:55:88:9b:5e:c8:
2f:ba:43:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:59 2023 by rpki-client on console-fra.rpki-client.org