Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/YGI_lI06GiHtqZ3mzDRSdGKFgZg.roa
File: YGI_lI06GiHtqZ3mzDRSdGKFgZg.roa (raw, json)
Hash identifier: dpih6VZFJ4b6HCJFHSXkUWat2H1P9ZrymMDH7LAQue0=
Subject key identifier: 60:62:3F:94:8D:3A:1A:21:ED:A9:9D:E6:CC:34:52:74:62:85:81:98
Certificate issuer: /CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Certificate serial: 20908243
Authority key identifier: 29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/YGI_lI06GiHtqZ3mzDRSdGKFgZg.roa
Signing time: Thu 14 Apr 2022 10:52:34 +0000
ROA not before: Thu 14 Apr 2022 10:52:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49581
IP address blocks: 37.114.32.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 546341443 (0x20908243)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Validity
Not Before: Apr 14 10:52:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=60623f948d3a1a21eda99de6cc34527462858198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:09:0e:2d:c3:40:53:05:ef:c2:34:c8:90:dd:
c3:7d:2a:1a:d9:c3:3c:dc:b0:86:8a:d5:60:32:8c:
38:72:63:ef:cb:1c:ae:51:91:d9:bd:1c:2e:89:e3:
0e:31:9f:22:e9:2d:c0:b3:44:b3:0a:36:da:25:56:
06:a6:ec:c0:04:98:89:e5:53:0b:95:b1:81:2b:be:
b2:ad:8d:1d:ef:39:45:17:4f:33:8d:61:66:e5:58:
51:7b:03:6e:76:b3:15:eb:81:96:84:7e:fe:5b:ee:
9e:bc:a1:10:87:cd:bd:c6:a5:c1:ce:21:32:59:22:
b1:03:88:31:09:f6:5a:38:62:67:88:d2:39:6c:d7:
dd:3f:91:f0:b0:22:e8:9b:de:62:36:27:36:c7:0a:
58:6b:fa:68:a3:10:d9:0b:f3:90:f9:14:b1:54:73:
fe:b1:7c:d0:65:29:7c:63:47:ca:95:6b:4b:2f:9b:
e4:96:97:c8:ca:54:10:62:44:ba:7b:39:8c:eb:11:
5c:74:40:67:c3:9b:ca:ef:5f:8d:75:41:4f:4a:fc:
a3:2d:5f:83:56:f8:f7:cf:ee:e1:cb:e9:c2:62:7b:
44:83:fe:21:e2:29:1a:ea:f4:c5:59:21:13:0a:be:
26:01:08:f7:41:99:e2:fd:78:3b:07:94:37:6f:64:
16:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:62:3F:94:8D:3A:1A:21:ED:A9:9D:E6:CC:34:52:74:62:85:81:98
X509v3 Authority Key Identifier:
keyid:29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/YGI_lI06GiHtqZ3mzDRSdGKFgZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.114.32.0/24
Signature Algorithm: sha256WithRSAEncryption
45:d4:41:53:7f:3f:ec:66:c9:fc:cc:bc:f8:d1:60:1b:84:7a:
52:ec:81:c4:99:5c:45:6b:73:40:1b:4b:1f:6d:23:77:d8:b6:
29:f0:16:6a:79:b2:bf:37:96:24:85:ef:89:13:8a:c2:18:78:
f3:3a:98:da:a8:a2:9d:b8:de:14:3a:85:42:e5:bb:ea:fa:84:
d9:22:27:c8:f0:b1:bb:46:63:b2:9d:0f:90:cf:9e:9e:4e:fc:
9b:03:e9:6b:91:b8:ef:c8:68:19:25:f0:2f:d7:ef:8a:85:fc:
63:e3:d4:b8:bb:96:9e:5a:48:3f:3d:04:da:ea:21:80:7d:96:
82:83:35:d1:50:af:a5:26:6b:21:08:20:e1:e7:09:e6:54:66:
02:f9:19:64:ab:2d:c6:44:92:1d:0d:c8:9b:21:14:71:ed:0e:
9a:f4:da:dd:55:8c:ed:a4:c8:2d:48:64:ba:e4:d0:4d:6b:c5:
6e:1e:e5:e5:ec:45:63:5e:77:5f:00:30:56:82:c8:fe:e5:4e:
5c:01:e8:dd:13:03:f0:5d:7c:5e:d8:3b:c1:46:2a:5a:5d:be:
21:1e:b7:81:5e:94:e4:e0:44:4f:de:e2:26:fb:0d:46:c6:f3:
c0:dc:fb:c6:6e:4b:50:30:f0:46:a4:39:7f:e4:20:17:de:17:
74:4e:d2:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:57 2024 by rpki-client on console-fra.rpki-client.org