Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/f92871-0d3a-4d87-afdc-071b991af01f/1/y0otSCBU7zY1IjTORA8F6kGKzSY.roa
File: y0otSCBU7zY1IjTORA8F6kGKzSY.roa (raw, json)
Hash identifier: LFEtlVEYT1tcfk5v2+71Fqyrp7A3PfA4eXt1AF5BdWc=
Subject key identifier: CB:4A:2D:48:20:54:EF:36:35:22:34:CE:44:0F:05:EA:41:8A:CD:26
Certificate issuer: /CN=4c71b147eb8737abcc335f8020951b25ff2656a6
Certificate serial: 0184DCB6A13F31120572A8FD7E12D0F409C7
Authority key identifier: 4C:71:B1:47:EB:87:37:AB:CC:33:5F:80:20:95:1B:25:FF:26:56:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/THGxR-uHN6vMM1-AIJUbJf8mVqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/f92871-0d3a-4d87-afdc-071b991af01f/1/y0otSCBU7zY1IjTORA8F6kGKzSY.roa
Signing time: Sun 04 Dec 2022 10:37:47 +0000
ROA not before: Sun 04 Dec 2022 10:37:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35819
IP address blocks: 82.197.52.0/27 maxlen: 27
82.197.52.32/27 maxlen: 27
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:dc:b6:a1:3f:31:12:05:72:a8:fd:7e:12:d0:f4:09:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c71b147eb8737abcc335f8020951b25ff2656a6
Validity
Not Before: Dec 4 10:37:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cb4a2d482054ef36352234ce440f05ea418acd26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:97:01:89:f7:13:29:f4:07:cf:3b:f9:62:3e:
7c:87:8d:37:d6:40:fb:8a:6f:74:93:47:3c:e7:f8:
5a:cf:c5:8b:4c:fc:f8:74:52:dd:f1:aa:8b:2f:48:
cb:db:e0:4c:bf:68:cc:16:0f:a9:e1:b5:f8:2c:db:
75:3d:9e:4b:21:0f:0d:12:6d:0c:e4:a0:a4:4f:f9:
82:52:a8:aa:13:44:7b:8c:5b:49:23:13:10:85:58:
f5:db:c2:c4:50:cb:22:dd:e1:a6:9f:b4:22:3d:7e:
92:6d:17:74:15:7b:89:97:73:d8:09:09:43:09:33:
5e:84:f4:de:06:32:8c:1b:7b:51:d8:e7:33:28:e0:
62:2d:cf:fa:63:91:29:eb:76:65:a5:6d:ff:e2:fb:
2d:4d:dd:bd:01:23:ba:dd:7e:99:09:b5:ae:d9:8d:
b2:e2:ee:2d:ab:a4:44:90:da:23:8f:4b:1f:97:ea:
1f:ee:47:7c:fa:59:51:e4:4b:2a:59:43:28:f4:c5:
09:42:29:cb:73:2d:4d:56:a2:2b:19:9f:f4:37:38:
1c:ae:e0:f5:76:67:ee:8a:df:2e:22:84:1e:47:20:
47:8a:9a:59:58:89:83:29:b1:be:3f:f3:23:04:1d:
80:8b:cd:85:8a:73:05:62:95:20:cd:be:1c:1d:4f:
d6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:4A:2D:48:20:54:EF:36:35:22:34:CE:44:0F:05:EA:41:8A:CD:26
X509v3 Authority Key Identifier:
keyid:4C:71:B1:47:EB:87:37:AB:CC:33:5F:80:20:95:1B:25:FF:26:56:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/THGxR-uHN6vMM1-AIJUbJf8mVqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/f92871-0d3a-4d87-afdc-071b991af01f/1/y0otSCBU7zY1IjTORA8F6kGKzSY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/f92871-0d3a-4d87-afdc-071b991af01f/1/THGxR-uHN6vMM1-AIJUbJf8mVqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.197.52.0/26
Signature Algorithm: sha256WithRSAEncryption
93:19:1d:2e:93:b7:d2:df:cc:ba:27:d1:b3:71:87:d4:75:62:
57:d3:90:c3:4c:86:eb:27:e7:77:ae:b7:94:b1:cf:7c:0f:f6:
2f:9d:38:69:c3:a9:7f:cd:da:e9:86:ff:4d:72:d9:f0:c4:8e:
e7:31:73:23:86:0d:e7:92:ee:bc:4c:57:cc:12:54:78:9d:c1:
6b:af:6d:d3:f7:ba:9d:1c:83:a1:6e:cf:48:bc:8b:3a:e2:92:
ef:e2:36:c1:9a:4e:f0:f4:77:fd:c4:62:04:78:9e:11:5a:92:
64:7d:8b:f9:e5:c4:80:15:fd:72:9b:69:cf:bf:88:70:8d:7f:
26:d8:55:0e:70:03:1a:83:a2:34:92:cc:22:8d:f1:cd:b4:57:
31:f7:47:43:5b:05:3c:dd:80:0c:3a:23:16:fb:8e:a3:78:4c:
19:1d:ce:7c:dd:fe:e0:29:fc:a8:11:50:4f:58:46:65:c2:4b:
1b:1a:0b:65:a7:e4:43:49:4b:4a:a1:ac:13:e5:56:2c:e9:3b:
54:f1:19:58:c3:26:ee:0b:a9:4e:92:65:fe:bb:dc:23:67:3f:
f0:99:3a:11:1f:b9:c5:d8:e6:00:33:b1:0e:6d:cf:b9:78:44:
48:33:47:0a:bc:74:5f:15:2a:3c:af:26:23:58:c6:75:3d:56:
7c:07:ae:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:59 2024 by rpki-client on console-ams.rpki-client.org