Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/YxJ7Fd6FPNz_VQi28AIod9ODsiM.roa
File: YxJ7Fd6FPNz_VQi28AIod9ODsiM.roa (raw, json)
Hash identifier: sB/LZ4jNEmn5stdynvBlNdrvxtJ38D9FyjlsvSOZ+PY=
Subject key identifier: 63:12:7B:15:DE:85:3C:DC:FF:55:08:B6:F0:02:28:77:D3:83:B2:23
Certificate issuer: /CN=0d4ee193b301665b56f6780f225fd44d144093af
Certificate serial: 405338F4
Authority key identifier: 0D:4E:E1:93:B3:01:66:5B:56:F6:78:0F:22:5F:D4:4D:14:40:93:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/YxJ7Fd6FPNz_VQi28AIod9ODsiM.roa
Signing time: Sat 01 Jan 2022 03:56:04 +0000
ROA not before: Sat 01 Jan 2022 03:56:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43887
IP address blocks: 193.236.152.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1079195892 (0x405338f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d4ee193b301665b56f6780f225fd44d144093af
Validity
Not Before: Jan 1 03:56:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=63127b15de853cdcff5508b6f0022877d383b223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a2:41:35:77:4c:f4:9a:fc:b0:5a:15:a8:90:
b1:b4:43:ce:c5:e8:2e:31:20:88:db:09:fc:e4:e5:
ab:39:9a:05:03:dd:e4:31:66:8d:b4:38:28:16:21:
71:b3:25:ff:68:58:e8:37:50:95:1a:4e:f5:3d:7b:
91:0b:a2:47:2b:d7:6c:91:dd:65:26:c6:f4:7e:b6:
4f:c4:f1:1b:03:79:99:95:6e:fb:8c:2e:55:3f:01:
4c:76:82:1d:04:70:46:d5:55:49:f9:50:a0:1a:52:
6b:1c:86:d8:a1:c4:1a:c1:ce:7c:68:2a:2f:e1:d9:
3a:eb:b1:ba:e2:66:9d:35:39:3b:e2:67:b6:fd:24:
68:13:6a:7a:6a:ae:b6:90:86:77:bd:80:0b:e4:6f:
3b:14:e9:63:7b:f2:b4:b1:8f:3c:c3:76:3c:01:aa:
a3:aa:61:c4:43:b4:13:e2:26:99:b4:e4:83:db:cc:
17:ee:6b:c7:99:ba:2f:75:95:11:51:26:60:88:74:
98:dd:4d:6c:ab:e2:2b:8c:8b:9e:13:02:73:d6:9e:
31:1b:17:dc:2a:61:82:3c:3f:81:70:a0:c9:5a:38:
db:9c:cb:01:7a:c5:c9:a5:43:cd:8b:e0:c0:76:98:
bb:cc:82:43:9f:28:af:2b:0d:e3:5b:e1:da:1d:e7:
e2:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:12:7B:15:DE:85:3C:DC:FF:55:08:B6:F0:02:28:77:D3:83:B2:23
X509v3 Authority Key Identifier:
keyid:0D:4E:E1:93:B3:01:66:5B:56:F6:78:0F:22:5F:D4:4D:14:40:93:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/YxJ7Fd6FPNz_VQi28AIod9ODsiM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.236.152.0/24
Signature Algorithm: sha256WithRSAEncryption
43:f6:ed:bd:1c:89:65:22:95:c7:97:fe:93:28:7c:a0:ce:95:
41:28:78:8d:74:7a:3c:65:f3:0a:10:81:be:44:ce:28:af:df:
94:c7:80:f9:55:8e:21:9b:83:22:38:4a:47:ff:6e:cd:eb:78:
38:57:b3:47:67:26:c2:53:6d:b8:24:49:ec:b9:a6:a0:2a:ff:
4f:a7:9a:c5:74:d6:55:32:0c:46:49:83:bb:71:13:ff:75:17:
4c:4a:2b:57:36:3c:7f:0e:ff:56:72:9b:0f:96:bb:6a:48:d5:
81:f8:12:95:97:66:f9:50:08:ff:70:0f:49:c1:da:3f:3a:40:
0b:53:43:3c:86:b8:70:8c:93:2a:30:ed:bb:26:86:bf:a5:2a:
0f:ee:43:0d:89:be:06:73:c0:de:ec:10:83:dd:b8:b2:a7:c7:
3a:5f:d6:93:a6:35:73:34:f1:c3:de:4f:7a:37:e3:26:a6:25:
2c:b3:df:40:44:e0:53:0f:0f:bd:3a:c9:4a:b6:dc:26:5f:91:
39:a0:50:8d:aa:5b:1b:3a:80:4a:b6:a9:9b:1e:7e:64:c5:93:
49:58:77:c7:c5:34:c5:fc:17:a8:d5:69:09:55:4e:d0:be:bd:
b5:c8:ac:70:cd:80:81:63:22:bc:43:99:c7:58:ad:6e:6d:78:
63:07:ae:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:21 2023 by rpki-client on console-ams.rpki-client.org