Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/yJDH7Kodt-yiScqicRwvscMN0-4.roa
File: yJDH7Kodt-yiScqicRwvscMN0-4.roa (raw, json)
Hash identifier: yrk5/l9Ftjuf9TRfqGp9qkYm6nJENF5PXb63ppn68BE=
Subject key identifier: C8:90:C7:EC:AA:1D:B7:EC:A2:49:CA:A2:71:1C:2F:B1:C3:0D:D3:EE
Certificate issuer: /CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6
Certificate serial: 37DE721C
Authority key identifier: A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/yJDH7Kodt-yiScqicRwvscMN0-4.roa
Signing time: Sat 01 Jan 2022 14:56:02 +0000
ROA not before: Sat 01 Jan 2022 14:56:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44668
IP address blocks: 185.11.80.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 937325084 (0x37de721c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6
Validity
Not Before: Jan 1 14:56:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c890c7ecaa1db7eca249caa2711c2fb1c30dd3ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:35:20:56:d7:02:6d:2f:b0:0f:c3:20:55:9c:
22:80:af:d2:42:28:9c:82:1c:04:6b:30:9e:c6:d1:
ca:3a:28:bd:9e:89:36:60:63:6a:56:63:78:de:bf:
6a:60:27:6d:2d:3f:bc:8d:98:19:5f:43:a7:dd:48:
29:43:94:36:2e:ca:e8:2d:f3:b9:51:10:1e:9e:28:
05:aa:d4:3e:89:cf:ba:8d:fd:42:65:3c:c7:47:54:
04:88:76:cf:fe:14:8b:4b:a9:ab:df:13:1c:55:1b:
50:9b:58:17:c3:0a:7f:3f:a3:c9:90:68:84:79:39:
dc:8a:b9:60:4a:66:e5:cf:eb:7e:78:1c:a3:0d:d6:
5a:c3:d2:cf:b5:d3:34:8a:bb:05:96:03:97:5a:3e:
e2:f2:a0:0c:3a:d4:b9:01:cd:bf:ba:e3:cc:49:c2:
2a:98:5e:d5:63:dd:09:7a:f1:2c:15:01:30:4b:64:
5e:13:0c:d2:4a:db:4a:50:e3:a2:70:33:5b:3f:6f:
ab:67:af:d4:9d:7e:68:66:9d:8c:50:74:08:d0:e0:
4f:09:60:68:d8:0f:1d:e4:fb:fc:83:72:46:5a:e0:
a9:16:44:62:e1:63:78:9c:ac:db:ab:ae:13:6a:c8:
15:62:f2:5b:4a:a4:2f:15:1b:10:2f:6c:42:8d:6f:
3b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:90:C7:EC:AA:1D:B7:EC:A2:49:CA:A2:71:1C:2F:B1:C3:0D:D3:EE
X509v3 Authority Key Identifier:
keyid:A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/yJDH7Kodt-yiScqicRwvscMN0-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.11.80.0/22
Signature Algorithm: sha256WithRSAEncryption
89:2f:c2:b6:1f:f4:0b:29:31:fa:11:80:25:f8:80:d4:73:9d:
4b:36:14:cb:d6:60:98:22:03:45:54:f9:28:3f:9b:b9:81:dc:
82:b9:cc:aa:fc:f2:8d:73:34:b3:0b:3c:ce:eb:df:ed:fe:ff:
8e:b5:18:99:bc:23:4e:d7:14:28:59:7a:54:3c:df:c4:5e:88:
0a:55:e0:b4:54:10:4a:62:80:42:cd:0b:90:07:77:15:77:ec:
0d:4f:29:2f:09:a8:fb:f7:96:73:c5:20:a8:8c:2b:85:c9:bf:
b4:f0:74:23:1e:40:8c:8e:a6:74:88:84:1f:26:f0:bc:a3:1e:
14:65:ba:c3:f1:df:f4:f3:18:92:c7:1c:f7:e6:54:40:14:bf:
9c:ba:d9:57:91:6e:7e:13:bc:42:47:14:d0:90:9f:77:33:f7:
a8:fd:4d:03:cd:e8:c0:32:ed:b1:b0:b1:ff:29:9a:5b:4e:4e:
98:d4:0f:39:47:62:79:ef:6d:81:19:07:aa:5a:07:b0:50:5b:
8f:3e:1b:0c:75:16:f1:18:26:1d:49:a0:94:c1:c6:37:d0:70:
be:e4:56:b7:b8:3e:25:ad:17:9d:3f:34:77:69:13:3c:56:4b:
b9:54:6a:7a:ce:3b:47:4f:51:47:e3:44:f9:ad:6a:fd:96:b2:
90:55:38:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:07 2024 by rpki-client on console-fra.rpki-client.org