Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/YzEp0Nexzy2wR2qkBKQ6Y_z-yC8.roa
File: YzEp0Nexzy2wR2qkBKQ6Y_z-yC8.roa (raw, json)
Hash identifier: mtZFoGiHLOtDRt4dmWlxysrozG+k2Omb1xbBRlZnUjM=
Subject key identifier: 63:31:29:D0:D7:B1:CF:2D:B0:47:6A:A4:04:A4:3A:63:FC:FE:C8:2F
Certificate issuer: /CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Certificate serial: 0183560D3DA26837019DA1AB33BAB15EDB43
Authority key identifier: 94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/YzEp0Nexzy2wR2qkBKQ6Y_z-yC8.roa
Signing time: Mon 19 Sep 2022 14:00:51 +0000
ROA not before: Mon 19 Sep 2022 14:00:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61138
IP address blocks: 194.107.162.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:56:0d:3d:a2:68:37:01:9d:a1:ab:33:ba:b1:5e:db:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Validity
Not Before: Sep 19 14:00:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=633129d0d7b1cf2db0476aa404a43a63fcfec82f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:65:5b:1b:d9:78:ff:0a:cd:af:d9:a0:b7:7a:
72:70:0d:ef:3d:89:0d:3d:96:b8:a6:6d:12:34:d9:
dd:d1:6e:a2:ae:51:c1:48:97:92:7f:49:02:cf:43:
79:90:49:d9:3f:72:4f:5e:24:f1:4f:d4:18:6c:0f:
fc:cb:88:bc:af:fd:d8:13:88:b4:07:9c:af:59:8b:
2d:43:ef:e0:ea:b2:af:5c:c5:96:f9:d5:d2:86:56:
f1:75:eb:f8:1f:a1:70:5c:66:c2:90:6a:db:2d:b2:
c6:e5:1b:9a:75:32:28:e6:f9:6e:67:c8:8b:17:d0:
75:67:39:64:63:22:3d:d8:5b:cf:fe:c4:dd:f5:e1:
42:7e:f5:11:3d:3b:38:f1:1c:07:88:0c:79:61:a0:
84:d1:41:87:ca:ad:f3:55:fd:03:83:7e:6a:62:c5:
c5:08:00:39:f7:08:16:ad:d2:e4:09:48:55:73:75:
11:fb:92:2a:30:15:bd:8c:ca:d0:9f:46:aa:a1:d0:
f1:a7:d1:4c:a8:38:ae:6b:e8:a3:bf:9b:b4:d1:2e:
42:20:a4:11:65:1a:51:76:db:4d:d2:31:15:8e:65:
05:52:8c:90:dc:c5:7f:0b:6b:33:05:a6:02:ed:2b:
4d:12:20:75:90:4d:7f:0c:99:e8:16:42:41:ff:e9:
a5:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:31:29:D0:D7:B1:CF:2D:B0:47:6A:A4:04:A4:3A:63:FC:FE:C8:2F
X509v3 Authority Key Identifier:
keyid:94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/YzEp0Nexzy2wR2qkBKQ6Y_z-yC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.107.162.0/24
Signature Algorithm: sha256WithRSAEncryption
71:87:9b:a5:a1:5f:26:ac:48:b4:b2:b3:71:12:9e:57:f9:f1:
f1:86:ae:ba:1a:ca:08:d1:fa:16:e6:2f:6b:7d:8c:ca:3a:cf:
1a:0d:d8:8b:b0:d8:03:77:97:67:b4:53:35:10:24:fa:3c:39:
c1:bc:db:ad:13:db:4b:e6:ea:86:e8:6e:67:c2:8b:ab:0a:6e:
ab:09:6c:87:e2:86:73:43:cc:5a:93:b2:e6:54:93:06:17:6b:
ed:7b:ee:26:34:64:17:46:34:c3:85:f8:cd:ca:2c:21:62:96:
98:6f:b5:53:ed:f8:e3:5d:dc:45:9a:7f:fb:24:e6:99:11:54:
ab:13:86:3b:a0:6a:4a:74:88:f9:dd:56:38:ed:c6:83:cc:2d:
ea:34:9d:07:76:36:3e:fb:55:d6:7e:2b:9b:03:0e:b1:b8:59:
c3:2e:8a:63:90:3c:6f:c1:fe:88:e4:2f:e3:6f:97:b5:b0:07:
66:24:9b:5d:7a:b3:e5:99:28:ea:b0:50:ab:7c:7b:ff:38:f6:
e0:81:91:a1:b9:13:00:0a:ec:47:18:d8:8f:b9:1b:bd:22:4e:
8e:51:e0:f7:24:f4:f5:a7:bd:d0:17:9f:6c:b1:ed:14:84:9a:
80:1f:14:0d:bc:f0:98:43:19:64:95:0f:c6:1a:1e:6a:00:a6:
a8:0b:d4:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:39 2024 by rpki-client on console-ams.rpki-client.org