Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/265769-354e-4a8b-9542-94f97b3a2ce2/1/Y5pPpJSM-POX6o59YZrXgdhSBMc.roa
File: Y5pPpJSM-POX6o59YZrXgdhSBMc.roa (raw, json)
Hash identifier: mRQLnBlXjMHcnYEaaBWckd1+vRORXUy6WmgRlLeRxO0=
Subject key identifier: 63:9A:4F:A4:94:8C:F8:F3:97:EA:8E:7D:61:9A:D7:81:D8:52:04:C7
Certificate issuer: /CN=8aef1638d0911ba98864e979c8426ba4f41a272e
Certificate serial: 01854842488E7FB97D1740E365448C212161
Authority key identifier: 8A:EF:16:38:D0:91:1B:A9:88:64:E9:79:C8:42:6B:A4:F4:1A:27:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iu8WONCRG6mIZOl5yEJrpPQaJy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/265769-354e-4a8b-9542-94f97b3a2ce2/1/Y5pPpJSM-POX6o59YZrXgdhSBMc.roa
Signing time: Sun 25 Dec 2022 07:49:41 +0000
ROA not before: Sun 25 Dec 2022 07:49:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35729
IP address blocks: 87.252.126.0/23 maxlen: 24
87.252.96.0/21 maxlen: 24
87.252.104.0/23 maxlen: 24
2a01:4600::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:48:42:48:8e:7f:b9:7d:17:40:e3:65:44:8c:21:21:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8aef1638d0911ba98864e979c8426ba4f41a272e
Validity
Not Before: Dec 25 07:49:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=639a4fa4948cf8f397ea8e7d619ad781d85204c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:4d:79:c9:45:dd:c9:8d:c3:97:0f:02:b7:e9:
d1:00:6f:5b:2f:fe:0c:33:57:e1:23:68:3a:9a:dc:
51:cc:9b:57:3c:6d:52:b4:ab:32:77:8e:9e:ac:dd:
d2:4a:bd:e8:53:f9:fe:71:79:e9:cc:37:f7:de:05:
02:ac:c7:99:25:64:84:06:d9:ce:af:80:ff:3a:1b:
95:e4:ae:19:ba:a8:2b:13:69:a1:c1:0a:67:29:77:
7a:7b:92:21:2c:0f:38:67:1b:fa:15:92:b7:48:14:
90:21:7c:37:d1:00:48:6d:e6:e4:9d:4b:e9:7d:2c:
3e:1c:9a:26:11:48:08:31:90:57:12:1d:67:b9:df:
0d:4b:ec:30:41:58:5c:8b:2b:3f:2d:ae:e7:9a:ed:
f6:e5:a8:2e:cf:2c:11:b1:4b:30:89:84:d3:27:d0:
38:dd:48:ab:c9:8a:44:4b:e4:f2:29:6c:da:8d:0a:
43:32:26:17:9f:02:29:19:50:67:d5:91:6e:e3:37:
28:1a:61:57:b3:55:9e:12:6b:83:eb:3b:42:cd:99:
36:d1:d7:fd:db:9e:6a:bd:bc:d0:c4:c2:08:87:4b:
73:d5:83:fe:54:00:ec:74:77:e7:5c:43:75:07:08:
d2:39:05:c5:50:0c:25:0a:de:29:e7:fd:bb:b5:6d:
ca:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:9A:4F:A4:94:8C:F8:F3:97:EA:8E:7D:61:9A:D7:81:D8:52:04:C7
X509v3 Authority Key Identifier:
keyid:8A:EF:16:38:D0:91:1B:A9:88:64:E9:79:C8:42:6B:A4:F4:1A:27:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iu8WONCRG6mIZOl5yEJrpPQaJy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/265769-354e-4a8b-9542-94f97b3a2ce2/1/Y5pPpJSM-POX6o59YZrXgdhSBMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/265769-354e-4a8b-9542-94f97b3a2ce2/1/iu8WONCRG6mIZOl5yEJrpPQaJy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.252.96.0-87.252.105.255
87.252.126.0/23
IPv6:
2a01:4600::/32
Signature Algorithm: sha256WithRSAEncryption
07:50:98:f9:a5:03:4b:64:d9:8c:05:83:3f:4a:ea:a0:e9:ad:
16:30:34:87:0d:9f:ea:0c:03:cd:58:a6:d4:92:b0:1e:8d:e0:
71:02:e2:9a:5a:b8:8f:72:49:2f:0c:77:df:18:99:c4:76:31:
7e:41:1e:6a:ec:a5:e6:e8:57:58:fe:89:a1:3d:f9:5f:59:b6:
24:64:5f:4d:63:78:01:b1:b2:25:15:5a:0d:3a:7b:a5:d3:81:
e1:c6:56:a1:13:87:c7:09:1e:8c:fc:58:1a:0b:d5:9d:33:41:
b8:c3:cb:48:16:fb:09:21:72:b1:dc:40:28:9d:71:ad:6b:82:
eb:e8:31:17:1f:a2:e7:f3:87:e7:40:30:9c:1b:55:d1:d7:61:
f2:27:d3:41:14:4f:2d:23:b4:82:a7:ee:d6:34:d5:9b:60:ed:
28:c2:3b:12:12:fa:c4:4a:92:64:5e:a6:0b:ab:1e:1c:29:cd:
f7:7d:ea:3f:64:9e:77:aa:a3:4f:e0:a3:57:a5:f3:c3:52:34:
65:d6:d0:ee:76:75:01:29:2f:49:39:bb:27:ee:9d:4c:01:74:
3a:ab:d8:7c:7a:a4:1d:2c:61:79:1b:0d:61:de:f6:e4:c0:1c:
0a:4a:2b:67:a0:12:b9:80:d1:77:bc:59:ca:1f:ca:80:af:1e:
e0:58:5f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:27 2023 by rpki-client on console-fra.rpki-client.org