Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/YwkpOQzFxPUmrWxRkAMLUqp2gYY.roa
File: YwkpOQzFxPUmrWxRkAMLUqp2gYY.roa (raw, json)
Hash identifier: wm49rC9m7uvCezpizC2GsUyy22N8G/0dl5KKSSN/WOU=
Subject key identifier: 63:09:29:39:0C:C5:C4:F5:26:AD:6C:51:90:03:0B:52:AA:76:81:86
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 144258C0
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/YwkpOQzFxPUmrWxRkAMLUqp2gYY.roa
Signing time: Mon 21 Mar 2022 02:25:14 +0000
ROA not before: Mon 21 Mar 2022 02:25:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 142430
IP address blocks: 193.36.84.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 339892416 (0x144258c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Mar 21 02:25:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=630929390cc5c4f526ad6c5190030b52aa768186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fc:f5:79:9f:27:c8:50:5f:9e:8a:ea:79:8d:
fd:b6:15:b9:f3:0c:5d:56:ac:3e:cf:44:03:53:6b:
6d:ce:73:5a:83:eb:c6:b4:ae:61:2a:84:53:5b:f2:
0c:1f:13:1a:ce:57:55:cb:f0:73:2e:dd:13:cc:d1:
b5:fa:1b:6a:49:bc:44:44:4a:95:2d:d2:42:58:b4:
e4:ea:49:da:50:f8:b0:c0:48:4f:f4:6f:b8:e2:f6:
88:a8:1a:ff:7e:fe:15:16:d6:ab:f7:0f:df:4f:ce:
2d:bb:73:ad:9f:10:3f:b1:c6:22:08:80:f0:28:cd:
ae:c5:a7:67:83:d0:69:72:67:9c:b7:6d:c3:87:a6:
80:1d:56:7f:63:1d:73:33:43:e7:83:26:d5:86:b5:
6b:a8:42:8c:40:12:ef:06:e1:23:70:a6:be:95:13:
08:05:7f:cc:cd:1e:25:11:7e:26:b7:64:fd:46:d1:
1a:06:ed:8a:73:f5:dd:ba:1a:da:57:0e:6b:5f:76:
2b:94:4e:24:d3:a0:b3:af:61:20:ee:8f:75:8f:e9:
81:ed:01:ae:2d:56:bd:7f:65:df:f7:70:72:43:bc:
6e:2a:7d:2d:1b:98:4f:74:f9:47:42:a4:8e:4f:2c:
85:4d:be:cc:8e:6d:a7:8c:0e:89:7d:ed:98:f2:ac:
b4:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:09:29:39:0C:C5:C4:F5:26:AD:6C:51:90:03:0B:52:AA:76:81:86
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/YwkpOQzFxPUmrWxRkAMLUqp2gYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.36.84.0/24
Signature Algorithm: sha256WithRSAEncryption
50:e6:5f:e3:c8:a7:54:b5:34:c0:82:91:5c:85:a5:92:87:43:
aa:c0:c2:0b:87:5e:ed:f5:3d:d7:99:c2:f5:64:df:fa:1d:67:
fb:39:39:5f:28:3b:b2:70:cc:d0:96:60:d9:e2:31:33:ab:0e:
79:82:7e:b8:d0:2e:6a:9a:a9:c5:a3:50:33:20:81:94:0f:6c:
5a:ae:aa:57:e4:a8:d8:e1:df:2d:c2:7e:cd:3c:46:03:8c:9c:
59:25:68:eb:93:25:c7:a1:cf:1d:4a:36:98:ea:d7:c4:2d:36:
91:63:c1:07:04:95:01:54:0b:a9:db:9c:b6:17:8e:d1:93:25:
da:4b:3c:49:4b:1c:8b:de:b1:87:32:96:89:03:8a:55:e6:c4:
d6:43:91:7f:7c:37:94:4e:22:2c:f7:3b:46:c3:df:76:6f:f7:
3e:0e:c9:a3:04:51:0e:7a:44:9f:96:a3:90:59:0f:37:32:b1:
0a:fe:1f:fe:a9:aa:09:03:d2:1c:ed:fa:aa:20:01:6c:d0:ed:
7c:23:75:b5:8a:9f:e6:e9:1d:7b:a1:cc:5d:3a:de:d5:de:84:
79:01:34:07:00:12:31:bb:a7:f0:fc:06:1a:62:0d:6f:84:10:
52:88:68:97:f8:59:6c:26:18:4f:e2:e9:95:84:75:ce:fa:3e:
f4:67:c3:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:24 2023 by rpki-client on console-ams.rpki-client.org