Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/YjisiLgNwddxL7THv6NZKnR1JqY.roa
File: YjisiLgNwddxL7THv6NZKnR1JqY.roa (raw, json)
Hash identifier: wfeX0cAxekwFGp5eeY3LyEmZF0JYPA8exfdi4Xlp7YY=
Subject key identifier: 62:38:AC:88:B8:0D:C1:D7:71:2F:B4:C7:BF:A3:59:2A:74:75:26:A6
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 2849D6A2
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/YjisiLgNwddxL7THv6NZKnR1JqY.roa
Signing time: Sat 01 Jan 2022 16:10:03 +0000
ROA not before: Sat 01 Jan 2022 16:10:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209067
IP address blocks: 92.253.200.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 675927714 (0x2849d6a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:10:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6238ac88b80dc1d7712fb4c7bfa3592a747526a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ab:e7:5b:53:2b:89:c7:5d:e6:09:b7:0e:15:
34:4f:dc:a2:ef:a7:02:a7:cb:a2:be:62:62:2e:44:
87:4c:5c:20:ef:e6:01:a5:2d:9e:ef:08:11:33:7c:
19:bd:46:74:d2:75:1a:69:1f:16:ef:81:3f:5a:41:
6c:51:1a:57:85:9c:cc:12:e3:83:a4:54:f6:f8:36:
5e:64:9a:34:9d:fd:fd:e4:07:72:3d:a0:21:c0:c9:
a5:a7:73:76:b5:66:ad:40:80:c9:e2:58:c8:91:74:
94:d1:cb:1d:b1:1f:4d:c3:3a:9d:06:ea:64:34:38:
ba:1d:ee:7b:29:c2:e8:5e:cf:5c:aa:c8:d8:37:f8:
97:2d:a1:c0:df:dd:6f:6c:b0:39:b1:f8:2c:43:a9:
5b:2f:4a:b1:52:20:4d:24:ed:8e:c3:7f:73:19:0c:
7c:0d:ef:c2:19:b4:f5:9a:cd:fb:b3:75:f3:f1:c4:
84:8b:56:aa:8f:31:42:43:5f:35:2c:e3:8b:eb:a4:
b5:a5:ae:6f:a9:17:a7:16:19:39:9d:27:61:1e:51:
d9:30:1b:48:a8:17:c4:74:1a:92:3c:a3:e0:2b:f6:
f1:8c:5a:90:dd:3a:8a:76:86:26:05:cc:9b:12:e7:
26:d3:7f:81:73:43:fd:f6:5a:5d:fb:31:2f:47:0c:
f2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:38:AC:88:B8:0D:C1:D7:71:2F:B4:C7:BF:A3:59:2A:74:75:26:A6
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/YjisiLgNwddxL7THv6NZKnR1JqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.253.200.0/24
Signature Algorithm: sha256WithRSAEncryption
66:3a:49:46:35:de:2d:69:29:4f:eb:92:b9:f5:25:5b:fb:db:
97:b9:2d:c5:2c:17:f2:48:1e:1c:0d:e9:13:64:2d:35:06:92:
12:09:32:54:ca:04:cc:e8:14:39:43:b3:06:b3:b0:16:43:3d:
14:d7:e3:69:ff:29:d7:b5:44:05:28:f9:eb:53:11:d7:f5:a0:
ac:b5:8a:fa:ee:92:49:2e:42:27:a4:1f:e9:91:65:99:53:c6:
16:bf:43:6a:42:c3:5a:ba:e0:74:aa:2a:2b:7f:2d:b3:9b:f7:
82:0a:22:88:cf:60:ee:e6:a3:a6:20:13:13:f1:2d:4a:57:70:
36:8c:fd:21:7e:1f:91:8e:54:f9:49:af:87:dd:1b:ee:46:a8:
0c:16:ed:e7:7b:9a:25:1e:dc:8c:8e:c4:78:23:c8:36:5a:1a:
ca:ab:ed:d1:11:50:ca:16:06:e2:28:7c:8d:ed:44:6e:eb:1d:
2c:74:c5:f8:fa:61:f7:e4:8c:ad:c2:bb:5b:39:92:78:a0:65:
43:6e:b4:f6:19:51:bd:da:dc:a5:97:d0:47:d2:9e:7b:c8:ac:
03:51:f4:23:0f:2c:18:88:5d:dd:e1:89:1b:5a:a9:b5:48:79:
d1:e4:a3:d6:29:28:8d:a3:69:49:97:c9:e2:d4:73:93:82:a1:
05:89:ce:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:37 2024 by rpki-client on console-fra.rpki-client.org