Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/2Yb9IKqdzhD-TXjawVCw3wWNjlg.roa
File: 2Yb9IKqdzhD-TXjawVCw3wWNjlg.roa (raw, json)
Hash identifier: MSssyiCGk0p0QX4KpVxQdXvw09eNcJbga9tTx52SHdo=
Subject key identifier: D9:86:FD:20:AA:9D:CE:10:FE:4D:78:DA:C1:50:B0:DF:05:8D:8E:58
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 3A8895A2
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/2Yb9IKqdzhD-TXjawVCw3wWNjlg.roa
Signing time: Sat 01 Jan 2022 04:52:08 +0000
ROA not before: Sat 01 Jan 2022 04:52:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201439
IP address blocks: 195.136.104.0/22 maxlen: 22
195.136.10.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 982029730 (0x3a8895a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 04:52:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d986fd20aa9dce10fe4d78dac150b0df058d8e58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:55:cd:99:fd:55:ab:58:c5:8a:10:92:94:cb:
6b:0e:a4:27:89:ed:7c:d0:e7:ba:d7:6a:62:69:b4:
18:43:a7:d0:84:6d:00:6e:43:e8:59:f4:d7:89:2c:
9e:f4:ae:26:3f:f5:c6:19:20:ba:fd:97:b9:87:c2:
dc:84:71:58:e0:ac:39:6f:bc:cd:fa:b7:03:43:fe:
da:76:40:ba:a8:ca:9a:31:87:fd:64:7e:72:97:e4:
36:c3:67:47:ec:1b:bf:fe:9d:c1:21:40:5c:85:6c:
23:fd:de:5f:4b:d5:cc:4a:bd:b3:26:43:98:5b:b4:
74:d2:ab:86:6f:ae:66:ac:1b:5e:69:a0:15:83:ec:
67:69:08:fe:ef:fc:74:cb:42:ed:04:9c:61:91:5d:
3d:dc:1d:2a:4d:b6:9e:d2:b7:98:5f:77:af:ac:34:
9e:3d:8a:76:66:89:9f:34:ca:b9:31:1a:26:55:37:
31:2c:bc:44:f0:04:e5:ac:5d:d7:4a:c4:65:ac:9e:
06:a0:cd:6e:d6:f4:d3:9a:84:a5:96:00:85:c0:8c:
d4:fb:e3:f1:35:bf:f8:ab:e1:a0:4b:95:64:97:ef:
4a:cf:f3:62:a9:eb:88:88:df:cd:6f:18:3f:66:cd:
c7:32:8c:78:cf:cc:e7:7e:57:cc:ed:92:bd:e4:3d:
2c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:86:FD:20:AA:9D:CE:10:FE:4D:78:DA:C1:50:B0:DF:05:8D:8E:58
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/2Yb9IKqdzhD-TXjawVCw3wWNjlg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.136.10.0/24
195.136.104.0/22
Signature Algorithm: sha256WithRSAEncryption
b4:6c:ff:26:e8:9f:d0:46:61:dc:f1:19:97:6b:6d:05:e8:40:
3a:ae:6e:4e:58:78:c0:90:47:3a:90:de:ef:92:1f:07:24:bb:
5f:0b:23:25:eb:a4:18:60:3b:76:04:b5:a2:22:a2:38:67:88:
33:1a:54:39:ff:1a:4c:7f:f3:73:9d:65:90:ef:04:6b:19:93:
88:e4:fe:88:ea:7b:bb:7e:56:ea:39:7d:cc:d8:0b:16:d6:93:
16:18:b5:1b:b4:f7:4f:04:8c:52:95:94:e2:c2:6d:1b:fb:7f:
6c:5c:36:b4:15:89:1f:3a:cb:64:94:8f:8e:8c:f9:49:d0:49:
9b:e7:09:24:fe:bc:16:d7:3d:74:d2:2c:fb:b5:c4:af:8e:82:
74:4c:65:9a:b9:c8:5a:ea:b6:03:35:4e:f3:1d:be:71:db:b6:
2f:cb:4e:a8:0a:eb:6c:64:56:b9:57:26:28:c3:6f:ee:f6:1b:
e0:b9:f4:52:3d:aa:67:05:48:0d:c4:17:94:ac:7a:77:33:5d:
c8:58:5d:70:f6:06:3a:7d:aa:ce:b4:2a:8e:92:71:53:2e:da:
35:d6:75:d3:30:c1:62:ac:40:c0:ff:d1:3e:57:79:08:59:c3:
63:91:6e:02:7e:a5:60:5d:38:ea:20:c4:16:a0:39:c9:ac:38:
be:52:64:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:02 2023 by rpki-client on console-ams.rpki-client.org