Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/YYWLNyheZFleY-CBqHW8O3OpUz8.roa
File: YYWLNyheZFleY-CBqHW8O3OpUz8.roa (raw, json)
Hash identifier: 2lAcfDl26KK5bWYurNBESHGvWMt3zRlwIaX3jtwGoN0=
Subject key identifier: 61:85:8B:37:28:5E:64:59:5E:63:E0:81:A8:75:BC:3B:73:A9:53:3F
Certificate issuer: /CN=5c75114adc2cf8edea505957e79e89044266c24e
Certificate serial: 17F6A876
Authority key identifier: 5C:75:11:4A:DC:2C:F8:ED:EA:50:59:57:E7:9E:89:04:42:66:C2:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHURStws-O3qUFlX556JBEJmwk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/YYWLNyheZFleY-CBqHW8O3OpUz8.roa
Signing time: Sat 01 Jan 2022 11:59:36 +0000
ROA not before: Sat 01 Jan 2022 11:59:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197988
IP address blocks: 95.183.48.0/20 maxlen: 20
95.183.58.0/24 maxlen: 24
46.28.200.0/21 maxlen: 24
2a0c:2240::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 402040950 (0x17f6a876)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c75114adc2cf8edea505957e79e89044266c24e
Validity
Not Before: Jan 1 11:59:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=61858b37285e64595e63e081a875bc3b73a9533f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:91:9b:3f:d3:d4:28:cb:67:91:e5:f2:a7:3d:
2d:fc:f2:0d:be:b1:28:29:44:c4:3a:15:c9:64:23:
a4:5e:50:03:3a:55:62:e9:a7:2d:e5:85:6a:48:2d:
09:1d:cb:ba:27:06:01:f5:7b:8b:a6:46:ff:ba:76:
8e:90:c4:4b:82:de:cf:ab:41:f6:71:35:68:7a:d3:
23:4a:60:f0:78:c0:3f:a6:77:80:e8:07:e5:46:10:
95:5f:86:6f:ca:31:67:e9:2f:10:4c:5a:d0:a9:ee:
47:83:05:8b:6b:62:c6:a1:45:4e:52:e4:6a:6a:96:
1b:f2:8a:65:ce:2a:cc:f0:d7:b8:b2:86:07:db:f2:
40:94:07:f0:af:7b:e9:72:6b:dc:4e:57:af:f7:a3:
0a:ea:16:b7:22:ca:e9:43:03:f3:5d:1c:52:15:bd:
47:29:b4:63:f8:dc:4e:c9:e6:59:86:e7:ea:1a:e7:
a6:09:fc:e4:50:f5:35:2a:cf:cf:ad:1e:05:49:e6:
87:4c:14:d5:17:33:53:f8:38:3c:46:a9:d8:ea:8b:
db:95:d8:3a:14:f6:aa:63:7c:65:80:71:30:c0:d2:
92:a4:df:3b:5a:ba:fe:9b:78:5a:79:a2:ed:7e:5b:
72:03:a7:c5:67:0a:31:f3:7a:ad:f5:a0:28:41:7c:
b2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:85:8B:37:28:5E:64:59:5E:63:E0:81:A8:75:BC:3B:73:A9:53:3F
X509v3 Authority Key Identifier:
keyid:5C:75:11:4A:DC:2C:F8:ED:EA:50:59:57:E7:9E:89:04:42:66:C2:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHURStws-O3qUFlX556JBEJmwk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/YYWLNyheZFleY-CBqHW8O3OpUz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.28.200.0/21
95.183.48.0/20
IPv6:
2a0c:2240::/48
Signature Algorithm: sha256WithRSAEncryption
6b:eb:43:09:2b:2b:6d:66:da:11:42:ef:94:11:88:70:f5:6b:
15:28:83:86:c8:03:37:03:2c:91:cc:07:94:5c:e1:72:9f:1e:
02:df:95:e3:87:22:66:c8:f3:34:3b:9e:3d:95:de:bc:43:fd:
f9:43:df:66:10:a7:68:f0:09:d1:32:9e:b8:98:18:85:e2:54:
e6:c2:2b:1e:66:31:55:4e:84:f4:6f:b0:ed:81:44:ae:11:0f:
13:c9:66:ff:37:30:9a:5a:5b:be:89:a2:2c:05:b0:5b:8c:57:
bf:62:d5:e8:a9:72:e7:1d:16:34:7a:ef:6f:d1:90:1e:39:09:
ec:96:00:91:96:a1:f4:e9:17:52:64:2c:ef:e8:81:0c:a5:1c:
bf:4c:c9:18:98:12:0a:c6:ca:81:8e:e4:36:51:63:a4:fb:25:
f7:41:2e:a3:23:86:b8:db:7c:b2:02:71:21:17:2a:2e:e2:e9:
6d:69:28:70:5a:ea:8f:e0:28:c0:df:57:91:f6:03:8c:25:43:
cf:ce:42:b3:40:4b:85:ab:8c:f7:62:1a:0e:16:09:2e:74:49:
0b:f9:4c:58:40:a2:f2:19:c5:6d:7c:7d:7a:b6:d9:20:87:c4:
30:c8:90:78:91:5c:6e:d7:11:4c:40:f7:72:75:da:4b:aa:58:
e7:d1:1a:ae
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIEF/aodjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
Yzc1MTE0YWRjMmNmOGVkZWE1MDU5NTdlNzllODkwNDQyNjZjMjRlMB4XDTIyMDEw
MTExNTkzNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjE4NThiMzcyODVl
NjQ1OTVlNjNlMDgxYTg3NWJjM2I3M2E5NTMzZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJKRmz/T1CjLZ5Hl8qc9LfzyDb6xKClExDoVyWQjpF5QAzpV
YumnLeWFakgtCR3LuicGAfV7i6ZG/7p2jpDES4Lez6tB9nE1aHrTI0pg8HjAP6Z3
gOgH5UYQlV+Gb8oxZ+kvEExa0KnuR4MFi2tixqFFTlLkamqWG/KKZc4qzPDXuLKG
B9vyQJQH8K976XJr3E5Xr/ejCuoWtyLK6UMD810cUhW9Rym0Y/jcTsnmWYbn6hrn
pgn85FD1NSrPz60eBUnmh0wU1RczU/g4PEap2OqL25XYOhT2qmN8ZYBxMMDSkqTf
O1q6/pt4Wnmi7X5bcgOnxWcKMfN6rfWgKEF8sqkCAwEAAaOCAiAwggIcMB0GA1Ud
DgQWBBRhhYs3KF5kWV5j4IGodbw7c6lTPzAfBgNVHSMEGDAWgBRcdRFK3Cz47epQ
WVfnnokEQmbCTjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1hIVVJTdHdzLU8zcVVGbFg1NTZKQkVKbXdrNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWYvYzY5NzA0LWRiNzEtNGIxZC1iOGFjLWM1ZGMwOTRkZjljNC8x
L1lZV0xOeWhlWkZsZVktQ0JxSFc4TzNPcFV6OC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWYv
YzY5NzA0LWRiNzEtNGIxZC1iOGFjLWM1ZGMwOTRkZjljNC8xL1hIVVJTdHdzLU8z
cVVGbFg1NTZKQkVKbXdrNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA2
BggrBgEFBQcBBwEB/wQnMCUwEgQCAAEwDAMEAy4cyAMEBF+3MDAPBAIAAjAJAwcA
KgwiQAAAMA0GCSqGSIb3DQEBCwUAA4IBAQBr60MJKyttZtoRQu+UEYhw9WsVKIOG
yAM3AyyRzAeUXOFynx4C35XjhyJmyPM0O549ld68Q/35Q99mEKdo8AnRMp64mBiF
4lTmwiseZjFVToT0b7DtgUSuEQ8TyWb/NzCaWlu+iaIsBbBbjFe/YtXoqXLnHRY0
eu9v0ZAeOQnslgCRlqH06RdSZCzv6IEMpRy/TMkYmBIKxsqBjuQ2UWOk+yX3QS6j
I4a423yyAnEhFyou4ultaShwWuqP4CjA31eR9gOMJUPPzkKzQEuFq4z3YhoOFgku
dEkL+UxYQKLyGcVtfH16ttkgh8QwyJB4kVxu1xFMQPdyddpLqljn0Rqu
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:08 2024 by rpki-client on console-fra.rpki-client.org