Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/YOCkeS7vq9v4Mz-NFBc5PV-Y_9M.roa
File: YOCkeS7vq9v4Mz-NFBc5PV-Y_9M.roa (raw, json)
Hash identifier: QKW1WWyYz4CZvvzQuYhfCxQsrLrj6407dqO/7CdDCvU=
Subject key identifier: 60:E0:A4:79:2E:EF:AB:DB:F8:33:3F:8D:14:17:39:3D:5F:98:FF:D3
Certificate issuer: /CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6
Certificate serial: 098DD1E6
Authority key identifier: 14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/YOCkeS7vq9v4Mz-NFBc5PV-Y_9M.roa
Signing time: Sat 01 Jan 2022 05:59:44 +0000
ROA not before: Sat 01 Jan 2022 05:59:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39855
IP address blocks: 195.226.205.0/24 maxlen: 24
213.249.76.0/22 maxlen: 24
213.249.74.0/23 maxlen: 24
213.249.73.0/24 maxlen: 24
213.249.82.0/23 maxlen: 24
213.249.81.0/24 maxlen: 24
213.249.84.0/22 maxlen: 24
213.249.88.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 160289254 (0x98dd1e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6
Validity
Not Before: Jan 1 05:59:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=60e0a4792eefabdbf8333f8d1417393d5f98ffd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:b4:ca:5b:27:aa:5a:cf:3a:ab:8a:0e:c8:c0:
df:10:b1:4f:e9:d1:ea:21:f6:c4:60:d3:13:8e:3e:
e5:ee:e3:85:3c:7b:2f:b8:cf:85:fc:b4:f6:6a:d7:
18:3a:6c:ed:34:a0:30:9d:3d:3c:0f:ab:17:6a:cd:
4e:26:17:48:ab:ac:6a:7d:dd:0a:03:81:98:74:2e:
8a:60:5c:17:ba:17:52:b6:9e:5c:29:4e:1a:60:39:
64:db:8f:1d:0a:f9:7f:b4:f3:93:2f:25:ba:dd:9c:
c4:87:47:40:25:a7:8e:d9:1b:f8:8c:8c:00:04:39:
5b:5c:e0:a3:17:55:4b:25:4e:dd:d9:cb:9f:78:39:
0c:2b:4c:b0:14:3e:16:e6:15:0d:6c:f0:e2:e1:34:
c8:1f:e2:a2:30:90:1f:dd:b4:c5:f1:55:ca:13:cf:
ef:3e:c7:a2:a1:61:c7:96:69:4c:f0:23:0c:9d:46:
3b:e3:a0:f5:91:23:78:d9:d5:de:06:74:87:a3:91:
31:06:d8:2c:0c:46:5a:46:ac:d6:52:22:ff:58:2e:
50:2f:95:b7:2a:1f:c5:54:29:fc:1d:1a:f9:09:33:
3d:7b:d6:27:b0:dc:21:83:53:9b:02:27:21:be:ea:
df:84:5c:c9:0f:50:02:22:21:e7:a2:17:55:31:e3:
37:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:E0:A4:79:2E:EF:AB:DB:F8:33:3F:8D:14:17:39:3D:5F:98:FF:D3
X509v3 Authority Key Identifier:
keyid:14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/YOCkeS7vq9v4Mz-NFBc5PV-Y_9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.226.205.0/24
213.249.73.0-213.249.79.255
213.249.81.0-213.249.91.255
Signature Algorithm: sha256WithRSAEncryption
93:09:83:cd:0c:f3:00:3f:12:ff:87:b2:89:a9:01:3d:c8:9c:
c9:59:c2:b9:70:60:45:42:33:05:9e:dc:71:99:25:5c:e6:14:
f0:62:4d:49:77:5c:c0:8c:ba:f0:97:98:52:be:a1:55:e5:1c:
7d:b7:6a:32:81:bd:2f:a0:5b:49:a4:ee:06:43:53:a2:7a:c2:
76:7f:00:08:48:fc:c1:1c:0a:d6:23:87:4e:bc:9f:9e:61:ca:
d8:b4:45:96:4a:75:ee:bd:4c:10:e4:6a:7c:2d:d3:52:bb:8c:
4c:34:ea:7e:83:e5:93:ad:e6:34:ea:f6:c8:fe:95:6e:c3:9d:
f9:8d:c9:ae:d9:03:8e:12:23:6a:54:79:6d:e8:ef:de:f4:29:
95:d8:cd:2a:d9:35:c1:99:2e:b7:4b:af:9f:ca:48:58:c9:29:
64:de:85:f2:88:1d:70:31:6b:ec:98:aa:ce:15:19:0c:06:49:
07:b5:a9:c0:72:8b:0e:b0:d6:a7:93:e3:f7:c3:2a:82:f2:d7:
00:fb:4a:57:04:2c:54:d2:5b:8d:26:da:7c:bb:51:4e:25:3a:
b3:ed:5a:97:ba:56:44:d6:14:15:83:bc:67:60:39:7b:1c:55:
19:93:a3:40:1f:53:bd:70:21:53:f5:05:a3:b2:d8:df:f9:76:
3b:bb:73:79
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:58 2024 by rpki-client on console-ams.rpki-client.org