Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/ylRnYNEIvCEWdvAGrvNOgJzvmhM.roa
File: ylRnYNEIvCEWdvAGrvNOgJzvmhM.roa (raw, json)
Hash identifier: sx45K3U6CEgXDc2l5hDuiHJAhU7Yz77Y2eOzpMHBBq8=
Subject key identifier: CA:54:67:60:D1:08:BC:21:16:76:F0:06:AE:F3:4E:80:9C:EF:9A:13
Certificate issuer: /CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Certificate serial: 01F726E5
Authority key identifier: 94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/ylRnYNEIvCEWdvAGrvNOgJzvmhM.roa
Signing time: Sat 01 Jan 2022 05:54:48 +0000
ROA not before: Sat 01 Jan 2022 05:54:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211271
IP address blocks: 193.228.139.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32974565 (0x1f726e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Validity
Not Before: Jan 1 05:54:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ca546760d108bc211676f006aef34e809cef9a13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bb:bb:2d:44:7a:68:76:fc:30:67:12:e0:2a:
ba:13:3f:bd:f1:62:14:21:fb:ce:36:de:08:13:42:
8b:0c:69:73:6a:4c:9c:5f:c3:d9:78:c7:be:28:94:
12:e8:78:69:90:f0:41:5c:ab:23:3e:96:66:b4:65:
1c:5c:b3:1b:df:da:01:79:99:13:1f:03:da:b2:94:
f7:7c:e8:38:5a:f5:78:5e:14:f9:7e:2c:26:7d:85:
8d:52:06:9e:9c:b8:3b:e1:81:17:1d:8a:51:d1:44:
6d:8e:d7:9f:65:2e:c7:f9:92:f3:ba:7d:80:37:a9:
87:a7:8a:11:16:f4:5a:91:b6:8f:b8:64:3d:91:c4:
82:5f:0b:b5:c4:9a:72:07:3c:0e:ec:02:8c:de:50:
9d:12:e2:4c:52:0b:88:17:af:01:8d:fa:ac:ea:34:
9b:4b:e2:be:42:f1:15:6e:3a:64:a5:ff:d7:bb:7d:
66:16:06:58:3c:64:d5:7a:9c:c6:a2:e8:e2:79:91:
d4:0c:ed:80:b0:7b:b3:8a:ea:ba:0b:e0:9c:85:36:
6d:de:1c:2d:ee:47:f6:78:da:37:a9:21:54:5b:45:
bd:61:15:f1:84:0b:44:c0:10:43:e0:9f:3a:be:20:
15:53:f5:59:a3:ed:c1:72:56:9f:f2:b5:2f:70:a6:
b2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:54:67:60:D1:08:BC:21:16:76:F0:06:AE:F3:4E:80:9C:EF:9A:13
X509v3 Authority Key Identifier:
keyid:94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/ylRnYNEIvCEWdvAGrvNOgJzvmhM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.228.139.0/24
Signature Algorithm: sha256WithRSAEncryption
18:e7:d9:54:58:11:b9:89:3b:e4:f7:e1:c5:99:02:0a:68:f9:
05:e6:75:3d:44:19:6b:d7:27:59:24:dc:4a:75:bb:4a:b6:87:
64:d5:84:23:d0:eb:90:bf:ad:f9:1b:c2:86:f2:3d:15:19:09:
52:0e:4d:8e:aa:7f:11:e8:f1:b5:f1:df:c7:82:d0:c4:8b:8b:
3e:fb:a7:eb:bd:b9:3e:bc:78:7b:e7:21:fd:45:95:e0:d8:24:
14:70:0a:b3:36:9a:60:16:11:29:f5:1e:31:bc:1b:5a:ca:43:
78:95:a6:e3:61:b2:19:6e:cd:9a:a7:b7:16:2e:e8:bf:d4:c9:
87:bd:b2:79:2f:5f:f8:5d:8b:31:d2:31:bb:11:b1:6d:fe:36:
54:13:fd:83:2e:6d:9b:e1:5b:36:6f:6e:b7:0a:26:6e:47:43:
b6:5f:38:e6:60:d1:45:30:f4:bb:0c:03:ea:69:e5:07:a4:21:
9f:c4:1f:08:ef:09:2a:07:ff:60:fc:8e:34:d2:a0:26:61:8d:
72:8a:42:cb:ad:89:8f:3e:67:a4:2e:d2:17:41:a0:e3:fe:40:
4d:f1:06:d1:7d:dd:66:03:8d:35:f7:a8:59:cf:28:bc:dd:95:
f8:9a:d3:98:a4:38:84:52:52:b0:49:7a:6d:62:22:ac:6c:ac:
d7:be:ed:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:39 2024 by rpki-client on console-ams.rpki-client.org