Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/YQw2SVGl97a_sXopW2V-spoth8k.roa
File: YQw2SVGl97a_sXopW2V-spoth8k.roa (raw, json)
Hash identifier: 62EYemk7CCy5JQRwVcwVov+3y7loMVjNAB5OSNUc8TI=
Subject key identifier: 61:0C:36:49:51:A5:F7:B6:BF:B1:7A:29:5B:65:7E:B2:9A:2D:87:C9
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 3A8C00E7
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/YQw2SVGl97a_sXopW2V-spoth8k.roa
Signing time: Sat 01 Jan 2022 04:52:10 +0000
ROA not before: Sat 01 Jan 2022 04:52:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202403
IP address blocks: 195.136.76.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 982253799 (0x3a8c00e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 04:52:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=610c364951a5f7b6bfb17a295b657eb29a2d87c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:74:0c:25:b7:fa:a0:9d:f3:f3:e9:8c:23:e2:
1d:8f:1f:44:a6:69:a7:67:39:d2:a3:6a:22:de:de:
8b:a4:f0:13:22:c1:19:64:4d:6b:84:b6:71:2a:cb:
d7:5c:23:b5:f1:58:4e:cd:20:b0:25:e7:6b:aa:83:
89:c2:51:55:7f:76:8e:45:de:a5:cc:d8:08:f8:1a:
59:d0:b9:35:b3:3d:4a:1d:3c:c5:cc:3b:6b:32:d8:
7b:18:12:07:cd:18:36:2a:42:c1:8a:b1:29:bb:eb:
f0:2c:b0:36:c4:1d:f9:49:03:ae:08:89:7a:38:49:
56:55:bd:94:ce:9d:52:97:1b:c7:97:f2:6d:a8:f3:
11:e1:47:70:6a:92:31:94:1d:28:e8:c6:bc:8e:60:
79:ad:41:da:a7:23:ed:04:ce:dd:87:16:6d:58:d5:
45:4d:7a:44:1f:e9:ed:37:85:89:05:9b:2d:9e:04:
59:27:c3:3d:2d:67:bf:00:3e:fd:58:7c:7b:bc:40:
91:e6:96:77:2d:0e:95:ba:f0:31:fc:b6:12:ff:6e:
0d:a2:99:72:cd:5c:c8:56:40:9a:90:f1:80:c3:3b:
38:75:a8:00:de:d6:61:2d:ec:0c:87:a6:c8:62:53:
77:33:3e:62:5c:67:54:f9:a4:d5:c2:f8:e3:cb:dd:
d9:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:0C:36:49:51:A5:F7:B6:BF:B1:7A:29:5B:65:7E:B2:9A:2D:87:C9
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/YQw2SVGl97a_sXopW2V-spoth8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.136.76.0/24
Signature Algorithm: sha256WithRSAEncryption
52:94:39:64:6a:d5:00:78:2b:c6:91:5f:aa:28:39:83:b5:55:
7c:89:b8:b6:e3:61:08:2e:5f:f8:bb:30:df:6b:8c:0a:3d:42:
1d:50:22:eb:87:c1:c2:01:a6:97:80:ef:2d:ee:17:68:1f:72:
48:61:39:98:26:b0:95:c8:35:39:06:ea:22:9a:ad:17:2a:4c:
84:5f:1b:3d:bc:87:50:25:dd:e8:d1:a3:4e:1f:45:4d:c1:bf:
85:47:9b:95:0e:bb:0a:f5:54:2c:6c:7f:02:43:ec:96:eb:5f:
8d:b6:7c:bf:52:1e:78:a6:00:f1:12:72:85:e1:f3:ae:2a:12:
44:1c:7e:50:aa:e7:b7:8b:f7:20:e0:d3:ed:9c:be:fd:d0:bb:
95:30:45:a5:21:e7:c8:2a:ec:9b:e3:5e:05:1f:bb:0e:eb:68:
0f:1a:df:42:11:3e:4b:8a:de:b0:ae:7d:57:29:e5:6c:8d:33:
f7:ce:14:ba:5d:47:34:50:d9:37:7a:cc:fe:79:d8:ee:d2:36:
16:99:d0:84:cf:62:29:50:5d:f5:b5:80:14:8a:01:c4:cd:dc:
1d:e4:45:5b:5b:54:fd:f5:fb:2b:88:f3:dd:d6:0d:71:80:53:
f8:4e:5d:a8:30:fc:0c:e9:b3:03:1b:23:60:8a:f9:0c:39:f3:
82:f6:25:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:21 2023 by rpki-client on console-fra.rpki-client.org