Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/YE8aRDUApHw6QRhpuGFjyIezZH0.roa
File: YE8aRDUApHw6QRhpuGFjyIezZH0.roa (raw, json)
Hash identifier: 2H05+HNq+b8QGC3SVlZHgCnXh5VxWnkcVGJ2FBEzDm4=
Subject key identifier: 60:4F:1A:44:35:00:A4:7C:3A:41:18:69:B8:61:63:C8:87:B3:64:7D
Certificate issuer: /CN=23b1943087ce69623e76b2145b3479ac204ba1c9
Certificate serial: 05E345C8
Authority key identifier: 23:B1:94:30:87:CE:69:62:3E:76:B2:14:5B:34:79:AC:20:4B:A1:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I7GUMIfOaWI-drIUWzR5rCBLock.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/YE8aRDUApHw6QRhpuGFjyIezZH0.roa
Signing time: Sat 19 Mar 2022 19:57:58 +0000
ROA not before: Sat 19 Mar 2022 19:57:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35405
IP address blocks: 87.236.64.0/24 maxlen: 24
87.236.70.0/24 maxlen: 24
87.236.65.0/24 maxlen: 24
87.236.71.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98780616 (0x5e345c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23b1943087ce69623e76b2145b3479ac204ba1c9
Validity
Not Before: Mar 19 19:57:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=604f1a443500a47c3a411869b86163c887b3647d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2b:85:12:b0:10:bd:de:e0:86:9d:1c:c4:60:
19:73:5e:15:7c:13:d9:e6:bc:2e:e1:3f:b4:2f:8a:
12:c1:d1:b3:44:5b:f7:8b:13:d1:27:51:8c:0b:a7:
18:ba:d6:ea:b4:de:15:51:2e:de:39:1c:7b:36:84:
b6:fc:d0:1f:ea:ea:2c:33:e0:18:f9:57:a8:c2:20:
a3:ad:5b:9e:18:5e:c1:23:79:ba:83:76:ce:7d:a0:
ee:89:66:86:47:be:79:d4:d4:b0:09:b1:84:86:44:
75:77:5e:c0:43:56:3a:98:d8:45:e4:e6:93:26:10:
75:a0:20:d2:bd:8c:a3:68:d1:07:9a:fa:57:42:0a:
41:28:83:a4:af:34:fc:98:20:a1:c5:49:3e:db:b8:
38:4e:e4:ca:cd:43:25:9d:df:0e:ba:2d:64:9b:37:
b5:12:be:0b:53:68:09:57:3a:73:57:ee:c5:c8:28:
d4:48:0d:9d:0b:a5:f8:d9:80:96:4f:09:5e:2b:cc:
d7:e1:1c:1e:4d:68:33:0a:a5:77:71:16:f1:6d:34:
1a:8b:16:c0:e5:3d:1a:a6:63:cc:04:21:d0:41:6f:
e9:16:7e:f5:1c:6c:fd:bb:90:17:17:c9:da:8b:19:
5f:b3:64:1d:f1:81:47:ad:00:6c:d1:71:41:e4:82:
e3:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:4F:1A:44:35:00:A4:7C:3A:41:18:69:B8:61:63:C8:87:B3:64:7D
X509v3 Authority Key Identifier:
keyid:23:B1:94:30:87:CE:69:62:3E:76:B2:14:5B:34:79:AC:20:4B:A1:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I7GUMIfOaWI-drIUWzR5rCBLock.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/YE8aRDUApHw6QRhpuGFjyIezZH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.236.64.0/23
87.236.70.0/23
Signature Algorithm: sha256WithRSAEncryption
c2:ac:fe:0a:03:64:48:98:46:47:68:4b:5c:fe:0d:56:e8:b6:
aa:6c:bf:4e:80:12:96:fd:e7:23:f3:f9:27:38:3c:56:f8:d3:
28:ba:33:a5:15:6d:70:e1:16:3b:b7:d2:94:78:c3:2a:30:e4:
68:92:9f:04:18:ea:c3:60:a5:b0:70:e5:c5:f0:61:13:78:b1:
5a:e6:ea:56:46:67:c4:5e:36:aa:d6:c6:49:7b:49:20:f8:16:
33:59:da:d4:c5:f0:24:3c:6b:9a:28:71:8b:91:b6:2f:f8:e5:
62:ca:b5:d5:7a:83:62:a0:1b:8b:a5:a1:91:d9:a4:0f:f9:fe:
52:d8:b3:61:46:b0:8b:68:63:3e:b3:f6:87:0c:fd:c1:87:75:
23:d1:e7:61:4c:c8:f7:f6:65:0e:ea:ea:ae:01:97:6b:d6:4b:
4f:6a:f6:0a:dc:82:45:22:4a:11:87:e2:e5:af:7e:2e:40:0a:
37:75:85:2a:b9:4b:79:91:61:76:37:ec:bd:79:17:28:ee:2f:
e1:06:9e:69:0e:12:98:21:65:8c:07:44:c0:6f:1e:06:bc:48:
c2:3f:1c:cb:f0:64:91:a8:7d:1d:2d:0d:6f:2c:1c:ad:94:7d:
93:6c:45:86:cc:61:a6:c4:3f:8f:76:64:83:fb:5f:f3:ee:4f:
df:09:ca:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:12:13 2024 by rpki-client on console-ams.rpki-client.org