Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b58d94-b564-4d49-a8fd-5c096a87bb07/1/YVBbYe-9HdwCqklDHIBzUIVBmGo.roa
File: YVBbYe-9HdwCqklDHIBzUIVBmGo.roa (raw, json)
Hash identifier: TppNjRZU58yY8nOHmGN3cLyQsIOiw93H3jjWcP9MkEw=
Subject key identifier: 61:50:5B:61:EF:BD:1D:DC:02:AA:49:43:1C:80:73:50:85:41:98:6A
Certificate issuer: /CN=3b5c2467546f4b078a0224da1ccac5c287e93453
Certificate serial: 03E1D5EC
Authority key identifier: 3B:5C:24:67:54:6F:4B:07:8A:02:24:DA:1C:CA:C5:C2:87:E9:34:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1wkZ1RvSweKAiTaHMrFwofpNFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b58d94-b564-4d49-a8fd-5c096a87bb07/1/YVBbYe-9HdwCqklDHIBzUIVBmGo.roa
Signing time: Sat 01 Jan 2022 05:02:15 +0000
ROA not before: Sat 01 Jan 2022 05:02:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50177
IP address blocks: 88.135.32.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65132012 (0x3e1d5ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b5c2467546f4b078a0224da1ccac5c287e93453
Validity
Not Before: Jan 1 05:02:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=61505b61efbd1ddc02aa49431c8073508541986a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f7:9b:6f:1f:16:99:7b:d7:39:7e:40:0c:cc:
8f:05:ce:7f:a4:fc:83:c2:61:31:2c:10:b1:e9:4b:
62:36:4b:c9:5d:92:3c:20:73:50:f7:54:d2:ab:ec:
96:8b:04:be:d3:04:09:d5:08:91:aa:6c:6d:74:44:
dc:95:66:db:07:cf:db:cd:ef:89:90:b9:89:4f:f8:
ef:b0:e9:16:3a:8b:e3:f9:a9:ac:3c:f5:f7:50:44:
0a:83:62:14:33:40:a7:b7:d3:ff:ac:13:69:af:86:
28:0f:6e:d3:43:02:91:3e:44:0d:ac:64:b5:64:c4:
ca:18:17:3a:25:f6:5d:f1:a8:32:a2:e2:4e:9e:f5:
65:3a:7f:d7:ad:58:c9:d1:d8:27:f7:72:d8:89:02:
74:f2:e9:94:9e:91:59:16:e5:85:06:d2:df:09:71:
e1:82:f3:c8:9c:c6:5a:e8:e7:10:84:92:03:9c:93:
e3:26:b2:5d:5a:d7:19:02:55:74:3e:78:6d:28:21:
d0:a5:41:d3:4c:79:5b:9b:e3:fd:9b:18:04:8d:34:
21:a5:80:61:d2:43:25:bb:cf:12:1c:5b:ad:86:50:
58:64:28:d2:37:e4:81:42:24:77:7b:f6:4c:e4:f5:
fc:36:f0:a8:06:50:b9:b1:b3:6c:d2:da:77:c3:f0:
8e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:50:5B:61:EF:BD:1D:DC:02:AA:49:43:1C:80:73:50:85:41:98:6A
X509v3 Authority Key Identifier:
keyid:3B:5C:24:67:54:6F:4B:07:8A:02:24:DA:1C:CA:C5:C2:87:E9:34:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1wkZ1RvSweKAiTaHMrFwofpNFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b58d94-b564-4d49-a8fd-5c096a87bb07/1/YVBbYe-9HdwCqklDHIBzUIVBmGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b58d94-b564-4d49-a8fd-5c096a87bb07/1/O1wkZ1RvSweKAiTaHMrFwofpNFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.135.32.0/24
Signature Algorithm: sha256WithRSAEncryption
47:be:58:bd:04:39:ed:8c:43:c7:4d:c8:08:75:54:8e:58:02:
f5:4e:c7:49:25:52:5a:00:73:22:48:d4:2e:05:21:c5:2a:57:
2c:62:d3:70:74:91:15:32:6b:b6:e8:a9:2b:81:60:90:c8:ee:
ca:84:cd:71:4e:00:c5:11:ea:21:dd:93:01:9d:af:ec:c9:ca:
7e:b5:59:99:8a:80:05:e7:9c:4a:db:a4:80:ae:5e:d0:1e:6b:
95:40:2f:ae:5d:1d:f0:09:ad:45:20:3d:15:39:18:a5:bb:b0:
e6:62:be:1b:a6:c7:6e:e1:15:10:9f:6f:61:ed:88:24:64:c9:
80:07:32:29:e0:a7:60:44:a0:85:77:e0:ef:0e:d7:5a:3f:61:
19:dc:66:13:7c:c2:9c:87:be:e1:8c:f6:9b:0b:1a:10:c3:f1:
25:3b:c3:9c:38:8a:7f:fb:98:6e:87:45:6f:c2:dd:f4:eb:9a:
c3:04:fb:82:cb:a3:cc:90:4e:e4:e6:4a:4c:00:57:b2:8d:f0:
2c:e3:e6:be:59:bc:d5:1c:0c:83:a9:13:24:5e:cc:7b:94:e5:
6b:66:a7:a2:c4:be:56:6f:e5:ab:12:0e:f4:e9:1c:be:50:98:
44:af:f1:e0:0b:4d:26:ed:cb:e8:5c:6f:19:98:af:f1:16:13:
83:4b:7c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:14 2024 by rpki-client on console-fra.rpki-client.org