Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/86ed6d-e126-4279-ad98-6692fc619567/1/YYVQBsVu5EzZLCGR84GI4D6soyQ.roa
File: YYVQBsVu5EzZLCGR84GI4D6soyQ.roa (raw, json)
Hash identifier: aqlBlkRwxGoH987J7canX/9DOvOVKZgMK/COTL+S+30=
Subject key identifier: 61:85:50:06:C5:6E:E4:4C:D9:2C:21:91:F3:81:88:E0:3E:AC:A3:24
Certificate issuer: /CN=397879aff2c4369d06c4f119a6fd7a5a13db8697
Certificate serial: 07E490E9
Authority key identifier: 39:78:79:AF:F2:C4:36:9D:06:C4:F1:19:A6:FD:7A:5A:13:DB:86:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXh5r_LENp0GxPEZpv16WhPbhpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/86ed6d-e126-4279-ad98-6692fc619567/1/YYVQBsVu5EzZLCGR84GI4D6soyQ.roa
Signing time: Sat 01 Jan 2022 04:58:24 +0000
ROA not before: Sat 01 Jan 2022 04:58:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200697
IP address blocks: 185.98.24.0/24 maxlen: 24
185.98.27.0/24 maxlen: 24
185.98.25.0/24 maxlen: 24
185.98.26.0/24 maxlen: 24
2a04:7800::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 132419817 (0x7e490e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=397879aff2c4369d06c4f119a6fd7a5a13db8697
Validity
Not Before: Jan 1 04:58:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=61855006c56ee44cd92c2191f38188e03eaca324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:4d:29:35:67:80:c8:74:7e:61:29:3d:ae:06:
93:7c:e1:ad:96:cb:44:52:b2:9b:10:17:f9:6e:f9:
78:6b:07:f9:e4:8f:11:6d:50:50:77:b6:38:7b:e4:
63:a9:78:03:5f:87:bc:8c:59:6c:9e:fa:f7:d8:d2:
84:e6:ae:30:a4:fd:bc:74:13:4e:a8:36:2d:82:df:
39:69:05:3d:b7:47:37:9c:c5:25:e8:ec:8c:65:fd:
78:e2:47:30:2f:f6:de:7e:ed:86:c5:c1:c0:71:ea:
0f:73:41:e0:03:3e:da:d4:70:c2:6b:66:c4:6d:b0:
96:f0:ae:cf:00:f2:e8:d3:a4:10:d4:6f:93:21:61:
0d:bd:64:db:aa:22:ee:7e:35:2d:d4:2b:f9:28:62:
66:53:be:6f:a5:67:f7:d7:3e:f6:ff:1e:c4:ea:0e:
5f:42:4b:55:4b:0b:36:ab:62:c5:50:7f:2b:3a:29:
89:c9:26:92:24:72:db:71:ce:61:e5:20:44:03:a4:
cc:75:14:a5:48:67:96:08:b7:6f:3c:71:15:94:fc:
13:f6:e2:b0:b2:f0:5a:d8:ce:7f:81:bb:42:e8:8e:
37:c6:50:ee:34:a6:ed:78:9d:c6:37:6d:cc:47:1e:
86:8c:9e:b6:fc:38:39:2e:25:01:92:7d:87:fe:56:
09:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:85:50:06:C5:6E:E4:4C:D9:2C:21:91:F3:81:88:E0:3E:AC:A3:24
X509v3 Authority Key Identifier:
keyid:39:78:79:AF:F2:C4:36:9D:06:C4:F1:19:A6:FD:7A:5A:13:DB:86:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXh5r_LENp0GxPEZpv16WhPbhpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/86ed6d-e126-4279-ad98-6692fc619567/1/YYVQBsVu5EzZLCGR84GI4D6soyQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/86ed6d-e126-4279-ad98-6692fc619567/1/OXh5r_LENp0GxPEZpv16WhPbhpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.98.24.0/22
IPv6:
2a04:7800::/29
Signature Algorithm: sha256WithRSAEncryption
45:89:16:db:78:8b:54:7e:2a:55:4d:af:22:89:fa:d0:7e:a5:
9f:31:11:e4:f1:07:cf:62:ee:81:86:e0:1e:df:2b:d2:e5:7c:
27:67:e0:17:c9:ad:69:4b:ae:2f:79:aa:3a:47:37:c2:6d:92:
0f:b9:0f:2c:ac:2f:b8:f5:9b:2e:b8:9a:a6:ce:8d:a4:b8:85:
d7:ee:6a:3b:77:85:21:57:80:82:a7:26:7e:ac:35:9b:5d:69:
17:05:f5:91:4d:df:cd:44:7a:7a:57:5d:38:57:d5:43:e3:ea:
bd:46:8c:9c:75:7e:77:a0:93:5c:78:2c:28:fd:75:42:90:80:
4a:ad:5b:5b:a8:45:ca:38:c9:a5:52:7e:fd:34:04:b5:7a:12:
0f:27:d0:07:bf:39:62:75:4f:69:50:14:36:2e:dd:c9:b9:36:
39:ac:50:08:bd:e7:8c:78:16:b4:06:85:0e:5d:bf:9f:99:0b:
b7:19:ae:72:1c:fc:81:6e:22:16:3a:41:18:0b:96:4a:c5:ba:
aa:24:eb:80:d3:24:b2:a5:6d:0d:d1:27:62:8e:6b:fb:1d:9f:
48:ee:a6:f6:3b:4f:46:91:db:c0:d4:ad:48:39:5f:6a:9e:77:
3d:2e:f6:c0:c5:a2:fb:d1:45:86:6c:61:df:e2:58:84:c1:2c:
60:00:4e:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:31 2024 by rpki-client on console-ams.rpki-client.org