Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/CyFYPrr7GHO6hQaED8lpvqexoF0.roa
File: CyFYPrr7GHO6hQaED8lpvqexoF0.roa (raw, json)
Hash identifier: 6stdH6CnTdhCJHH1na0s5Kg3U1NaAHy1u22DeLVRyvQ=
Subject key identifier: 0B:21:58:3E:BA:FB:18:73:BA:85:06:84:0F:C9:69:BE:A7:B1:A0:5D
Certificate issuer: /CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Certificate serial: 088EF2DD
Authority key identifier: E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/CyFYPrr7GHO6hQaED8lpvqexoF0.roa
Signing time: Sat 01 Jan 2022 03:50:59 +0000
ROA not before: Sat 01 Jan 2022 03:50:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57801
IP address blocks: 84.245.96.0/24 maxlen: 24
195.12.159.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143586013 (0x88ef2dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Validity
Not Before: Jan 1 03:50:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0b21583ebafb1873ba8506840fc969bea7b1a05d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1a:33:52:f3:23:ed:eb:69:ae:36:c4:f6:5b:
b3:12:7a:c4:1b:a6:b3:dd:52:a5:3c:f6:74:6a:a8:
1a:0a:3a:3d:7f:83:06:34:81:8a:41:86:35:ac:03:
6c:bb:5a:26:32:85:3c:c1:a6:dd:9a:c0:52:aa:ed:
59:ba:fa:1c:42:75:a2:37:e3:37:b2:3f:f5:22:88:
77:2a:e1:73:d1:ce:31:68:b2:f7:bf:95:83:98:d0:
fb:bc:f6:2f:6b:3d:b8:60:83:20:e4:9f:6c:96:78:
fb:6a:30:69:5e:3b:59:21:f3:f1:f3:09:f1:89:01:
1d:04:23:88:8b:02:7e:15:25:4f:36:1e:0f:03:0f:
35:74:61:0d:cf:6c:41:bd:c1:eb:06:5a:e7:25:06:
66:f5:fd:98:11:a7:3d:86:75:f6:62:0a:2e:b1:e9:
fa:26:ad:2a:22:9b:cd:9e:cc:1b:b2:68:17:a9:32:
4c:4c:e1:15:68:0b:ee:e9:cf:cc:10:a4:9b:c3:72:
4d:f0:4e:11:8b:3f:29:ee:4e:ba:27:c7:0e:b0:b3:
30:fc:5a:f8:c3:5f:05:9c:72:da:8b:bd:b4:97:8a:
79:7d:10:0e:18:52:bf:be:c7:c0:ef:ca:2e:45:ad:
2f:a2:2d:3c:a0:d5:9e:ed:5e:b2:c0:5a:5c:c6:08:
93:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:21:58:3E:BA:FB:18:73:BA:85:06:84:0F:C9:69:BE:A7:B1:A0:5D
X509v3 Authority Key Identifier:
keyid:E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/CyFYPrr7GHO6hQaED8lpvqexoF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.245.96.0/24
195.12.159.0/24
Signature Algorithm: sha256WithRSAEncryption
92:3e:92:71:10:3f:0e:fd:6b:04:dd:f4:36:05:06:4d:47:d7:
cf:1f:db:38:51:de:97:5f:81:de:2f:2b:76:00:6c:af:12:42:
24:35:fd:0d:ce:dc:87:8e:0d:20:03:20:df:20:97:cf:e2:06:
81:60:39:7c:a5:b6:8b:7d:ce:fb:50:f8:50:c5:a0:92:d7:d6:
6a:e8:cb:0d:76:fd:d7:2e:52:43:83:c5:3f:65:0f:c5:c0:be:
8e:49:56:3d:78:4c:02:64:2b:27:2f:e8:a0:b3:cf:6c:1c:3a:
7c:9d:d7:0d:e9:c3:15:7d:9f:a5:db:8f:ad:45:60:2b:39:62:
db:cf:44:c6:aa:fc:45:27:7a:2a:e0:f9:48:d0:5b:c5:0d:7d:
b0:85:30:f4:08:ae:18:6f:58:73:b7:13:86:78:f7:db:49:2e:
35:bf:7b:91:aa:e6:e8:86:72:22:f4:50:9e:43:b5:64:6a:e1:
b3:e9:27:27:fe:71:aa:84:87:48:fa:d4:2f:b1:57:69:9c:b0:
f4:2d:10:96:02:82:29:ba:84:97:9a:db:6d:eb:31:fd:52:e8:
89:23:1d:40:34:4f:c0:fa:24:73:39:0c:63:32:de:c7:c8:a3:
c3:68:6c:5f:c2:ec:f2:8b:cd:c5:ba:3f:b3:8b:ee:88:75:8a:
93:a1:49:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:23 2023 by rpki-client on console-fra.rpki-client.org