Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/Yt-BLD1LmRwpmrsw-GkdpDUJALM.roa
File: Yt-BLD1LmRwpmrsw-GkdpDUJALM.roa (raw, json)
Hash identifier: hpMHW/aNyA4SbI89359iAnKiV+kL7y6jE/6Cvfa06Zs=
Subject key identifier: 62:DF:81:2C:3D:4B:99:1C:29:9A:BB:30:F8:69:1D:A4:35:09:00:B3
Certificate issuer: /CN=9cce3b1197d0cf9511540572a58fd372dcc07489
Certificate serial: 02187C8B
Authority key identifier: 9C:CE:3B:11:97:D0:CF:95:11:54:05:72:A5:8F:D3:72:DC:C0:74:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nM47EZfQz5URVAVypY_TctzAdIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/Yt-BLD1LmRwpmrsw-GkdpDUJALM.roa
Signing time: Sat 01 Jan 2022 15:58:28 +0000
ROA not before: Sat 01 Jan 2022 15:58:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41705
IP address blocks: 193.32.240.0/24 maxlen: 24
193.32.240.0/22 maxlen: 24
193.32.242.0/24 maxlen: 24
193.32.243.0/24 maxlen: 24
193.32.241.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35159179 (0x2187c8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cce3b1197d0cf9511540572a58fd372dcc07489
Validity
Not Before: Jan 1 15:58:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62df812c3d4b991c299abb30f8691da4350900b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e4:ef:76:9a:80:5c:98:d4:dc:a6:4e:2c:15:
30:f4:4e:3f:bb:5c:21:32:23:6d:e3:3e:e0:21:72:
87:bc:e5:f0:12:73:de:cc:ec:bd:0e:d9:2d:14:94:
20:43:90:47:8f:7e:56:3b:6c:08:18:66:07:75:df:
a3:f0:60:a8:11:2d:d7:4e:d8:26:0c:d6:fb:9f:22:
0c:13:05:fd:4e:4e:62:38:e5:a3:95:bb:03:0b:f1:
1f:1f:fa:4b:e3:3d:86:66:c1:87:09:e9:fc:78:36:
d0:16:2d:48:ee:51:57:be:1f:b0:a6:c0:e9:1d:4b:
d1:71:03:83:e6:c3:4e:12:ad:e8:d7:72:52:d2:5e:
ae:9d:ad:47:df:22:96:28:12:b6:7d:9c:72:1c:1d:
b0:51:d4:d5:29:cf:ea:19:3e:32:76:af:9b:ad:67:
1b:63:8d:90:1f:dc:87:7c:be:46:36:de:8b:80:11:
00:d6:cd:0e:9a:3a:5c:1d:51:e6:ed:b4:9a:cf:d3:
a6:4d:84:39:65:50:a9:72:60:ce:0e:a7:40:3c:4f:
d9:5c:3c:6a:04:87:ba:b2:2f:e9:eb:8f:c7:db:69:
d3:57:57:16:c3:8a:67:b1:8b:00:c4:d7:8e:71:69:
73:71:2b:bd:7c:20:5d:6c:d0:57:f6:a6:49:82:f0:
42:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:DF:81:2C:3D:4B:99:1C:29:9A:BB:30:F8:69:1D:A4:35:09:00:B3
X509v3 Authority Key Identifier:
keyid:9C:CE:3B:11:97:D0:CF:95:11:54:05:72:A5:8F:D3:72:DC:C0:74:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nM47EZfQz5URVAVypY_TctzAdIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/Yt-BLD1LmRwpmrsw-GkdpDUJALM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.32.240.0/22
Signature Algorithm: sha256WithRSAEncryption
65:e3:f6:22:4f:7a:08:04:b1:49:f1:dd:71:b2:bb:ad:3b:d7:
57:eb:63:cf:42:9a:07:ae:87:86:d3:e0:d8:71:24:5c:c6:73:
3b:20:e7:6f:5e:f8:ab:36:17:1d:ef:76:3c:c3:59:b2:73:55:
d4:43:38:4f:f6:c2:2b:f2:7d:b4:5b:b8:2e:7d:bf:c8:04:3f:
c7:b0:48:a3:22:10:cf:11:b5:3b:3f:2f:d5:40:18:82:11:9a:
71:a2:ab:7c:29:16:d3:9f:19:9f:66:1d:0e:73:a9:16:9b:b5:
a3:ea:bd:7d:f7:8d:e8:c5:bb:39:98:4b:c8:58:0f:0e:2a:e8:
1a:0e:45:22:d7:6e:d7:50:49:60:69:76:47:a6:36:c8:82:42:
de:4b:9c:94:e3:8a:10:3e:ae:ce:6e:81:f7:29:4f:14:82:14:
43:2d:1b:b1:6c:96:49:22:e5:88:b4:e7:fa:ac:4a:04:5c:78:
15:e4:10:51:e7:5f:d9:50:67:ae:98:3a:95:4b:69:33:27:bb:
12:76:2a:10:e4:41:ac:81:5d:fe:e3:b4:cd:d0:5a:c7:03:5f:
73:e2:63:b7:f0:53:46:27:f2:06:a0:ed:8f:f6:00:59:e7:19:
21:50:fe:84:1f:26:cd:2a:b2:56:5b:72:05:1e:b4:4d:cc:37:
a5:4d:eb:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:35:09 2025 by rpki-client