Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/YqAq-R21JZflyIgjqSSKQ_47VCU.roa
File: YqAq-R21JZflyIgjqSSKQ_47VCU.roa (raw, json)
Hash identifier: CFS0J8Qgv7o8rbj1eg/HewQCjtVk50ApXpO4ERogkjE=
Subject key identifier: 62:A0:2A:F9:1D:B5:25:97:E5:C8:88:23:A9:24:8A:43:FE:3B:54:25
Certificate issuer: /CN=15d1ff6bec9fbcb89e950a3a01ef2d686f0e7a31
Certificate serial: 0BA6B5BE
Authority key identifier: 15:D1:FF:6B:EC:9F:BC:B8:9E:95:0A:3A:01:EF:2D:68:6F:0E:7A:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FdH_a-yfvLielQo6Ae8taG8OejE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/YqAq-R21JZflyIgjqSSKQ_47VCU.roa
Signing time: Wed 16 Feb 2022 08:43:51 +0000
ROA not before: Wed 16 Feb 2022 08:43:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3225
IP address blocks: 185.150.219.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 195474878 (0xba6b5be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15d1ff6bec9fbcb89e950a3a01ef2d686f0e7a31
Validity
Not Before: Feb 16 08:43:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62a02af91db52597e5c88823a9248a43fe3b5425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8c:3c:81:87:fa:04:66:dc:b5:1d:80:ea:43:
5a:fe:98:f7:fb:82:bc:d5:44:a7:4f:27:59:27:a9:
76:20:98:1d:06:5b:4e:5d:a2:e2:20:7c:46:06:9a:
7c:61:f0:e6:f2:72:79:71:6c:05:66:ae:3b:94:11:
a3:98:7b:cd:11:3b:f2:1b:8a:98:6c:39:40:14:0e:
17:ae:c2:f0:22:a5:f6:63:43:41:20:a8:1e:d2:f8:
3a:26:c8:a7:36:a3:d4:11:a5:e8:bf:de:13:51:68:
0c:65:5a:eb:7d:68:60:63:6c:b1:1e:c2:ed:1f:83:
bf:fc:db:63:a6:fa:c4:5d:58:61:97:de:26:93:43:
91:6a:2b:90:a9:54:20:81:1c:ad:30:32:bc:fd:0c:
fc:86:1c:43:67:4c:2c:79:0c:9d:85:e3:15:f6:d6:
58:26:e5:d9:ca:09:60:14:3e:ed:0e:92:5e:74:f7:
ab:cd:50:5f:66:d3:83:1c:e0:8d:37:d3:93:39:ce:
65:f6:0f:d1:d8:bd:03:95:aa:c4:65:bb:2a:02:d1:
e7:28:d7:3c:70:0d:b1:0f:8a:64:0f:0c:9c:5a:d2:
02:30:0f:0b:88:cf:be:38:ba:cb:ac:b9:55:21:54:
78:64:c0:c1:88:9a:69:ba:b5:4c:32:cb:1a:c3:ca:
86:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:A0:2A:F9:1D:B5:25:97:E5:C8:88:23:A9:24:8A:43:FE:3B:54:25
X509v3 Authority Key Identifier:
keyid:15:D1:FF:6B:EC:9F:BC:B8:9E:95:0A:3A:01:EF:2D:68:6F:0E:7A:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FdH_a-yfvLielQo6Ae8taG8OejE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/YqAq-R21JZflyIgjqSSKQ_47VCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/FdH_a-yfvLielQo6Ae8taG8OejE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.150.219.0/24
Signature Algorithm: sha256WithRSAEncryption
63:84:29:ce:14:02:c0:03:22:63:7c:4b:34:de:fc:7b:fc:18:
3f:63:3c:9c:f0:5d:78:ec:2f:0d:69:8b:b9:34:01:61:c8:2b:
c3:c3:1e:bb:de:2d:3b:91:5b:f6:00:c2:ac:8f:67:d5:f1:e8:
76:be:24:45:8a:12:a7:b0:0b:88:2b:37:75:22:5d:f9:28:60:
15:05:3d:ff:b5:16:5a:d9:be:e5:3f:0f:fe:d0:e8:a3:a6:b8:
9c:5b:0b:36:b2:88:56:15:37:e5:d2:32:1d:12:e2:84:f7:09:
a6:44:c7:93:f1:b5:1d:19:81:f4:97:ef:3f:ee:d2:fd:21:36:
4f:36:94:4f:5e:a0:4a:7a:96:7d:68:3b:5b:da:d6:73:b4:7e:
c9:93:8e:c3:7d:bd:11:b7:63:2b:f6:10:fb:2b:9a:16:89:d4:
63:a8:02:eb:75:c6:bb:50:05:6c:fd:2f:cf:ea:9f:c8:f5:fa:
2b:f9:5f:18:77:d6:d1:37:07:d1:5e:aa:c9:ff:6c:79:29:61:
01:ff:dd:35:e5:3d:17:77:ea:59:e5:31:35:01:3d:b7:da:b0:
98:79:f6:21:c2:ae:ad:b9:bc:02:4c:5f:24:85:6d:ed:a5:1b:
9c:ac:d9:14:f9:c4:5f:27:4b:c1:20:df:8f:7d:5c:50:99:69:
06:aa:1e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:56:48 2023 by rpki-client on console-fra.rpki-client.org