Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/YIpBis37i0STl5ELHgFu-3kwl6k.roa
File: YIpBis37i0STl5ELHgFu-3kwl6k.roa (raw, json)
Hash identifier: GQun7qnHN6YVjMbzaTx9ExEDbQh6lYtJVJfOocStfrs=
Subject key identifier: 60:8A:41:8A:CD:FB:8B:44:93:97:91:0B:1E:01:6E:FB:79:30:97:A9
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 0183603BD79591E80DDEF03B943F498F5F3B
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/YIpBis37i0STl5ELHgFu-3kwl6k.roa
Signing time: Wed 21 Sep 2022 13:27:58 +0000
ROA not before: Wed 21 Sep 2022 13:27:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 188.215.124.0/22 maxlen: 24
89.46.176.0/22 maxlen: 24
89.46.180.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:60:3b:d7:95:91:e8:0d:de:f0:3b:94:3f:49:8f:5f:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Sep 21 13:27:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=608a418acdfb8b449397910b1e016efb793097a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:3b:40:f0:e6:bf:69:89:55:33:db:06:0e:34:
3c:f8:05:de:e9:e2:ed:d7:15:eb:e2:bb:c2:9a:63:
80:04:a0:7f:ab:89:8f:1b:58:f3:08:24:de:e8:00:
41:70:95:8a:3c:c0:42:c3:ae:5a:d6:5e:3a:98:f4:
8b:f4:0c:6e:f0:68:8c:27:ea:f3:d4:f4:87:82:38:
da:e0:95:87:cc:19:58:b5:be:e0:89:67:17:22:c1:
dc:57:e6:63:76:31:f9:3d:09:d9:e1:d7:12:9b:16:
34:34:03:96:6e:66:f2:65:42:0e:bf:42:b5:7b:83:
78:c7:6f:89:2d:9a:9f:61:dd:a9:5b:8e:2e:7d:85:
53:9d:99:a8:37:51:a4:0f:7c:ed:53:c8:e9:bb:0d:
9e:96:9f:dd:ee:03:ea:ba:42:25:ee:6f:75:ce:bc:
ad:0a:0e:f7:a2:0c:b7:ea:dc:5d:b1:e8:7a:c4:9a:
34:4f:41:0d:29:0e:78:ba:a7:2e:9b:20:2f:12:c6:
d5:9b:01:ab:e7:cb:35:74:4c:29:2b:70:de:50:cc:
a2:d4:87:e8:3b:29:9a:41:93:5e:8c:f8:1e:31:8e:
36:ad:15:db:84:22:03:39:37:0e:6f:61:74:61:1e:
7d:51:74:3f:f9:46:55:bb:04:75:55:da:f1:95:13:
ed:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:8A:41:8A:CD:FB:8B:44:93:97:91:0B:1E:01:6E:FB:79:30:97:A9
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/YIpBis37i0STl5ELHgFu-3kwl6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.46.176.0/21
188.215.124.0/22
Signature Algorithm: sha256WithRSAEncryption
88:20:ba:47:e7:8e:f8:f4:d0:25:5d:fd:3d:dc:1c:0c:55:d2:
2c:67:4f:98:74:9d:80:c1:cf:88:ee:c2:97:58:b4:74:42:f8:
16:4b:dc:93:46:21:0d:45:09:38:d0:9a:3e:79:06:90:80:5d:
78:2e:dc:68:bf:73:e3:28:4e:63:18:69:ff:38:e4:f3:f2:13:
ee:33:3e:35:d8:92:50:86:97:0d:07:0b:44:62:1a:df:fb:5e:
82:f8:c5:bc:4e:f5:49:69:ff:95:01:cd:af:c6:21:23:99:4e:
d5:94:6f:f6:a0:f2:89:cb:cd:3f:2c:a2:79:37:2c:3c:50:52:
6c:0a:11:5c:0d:9a:d6:56:6e:f5:5a:87:96:d2:44:f1:ae:ea:
60:0d:ca:fe:6b:74:7d:7e:c7:2a:d1:c0:5b:85:ec:cb:07:52:
42:b8:53:47:6f:e1:0e:47:f8:8a:35:62:b0:58:c7:10:5e:83:
7d:b6:95:a3:e5:15:3c:07:65:de:f1:19:e2:dc:32:a8:f2:22:
9e:62:19:b2:79:72:db:5b:7b:35:90:85:15:7c:8c:da:34:82:
ac:d1:8e:08:57:84:e2:f2:4b:4d:ef:99:db:0c:bd:1f:43:eb:
c8:dc:04:b8:6a:62:8f:fd:fe:74:eb:91:61:00:be:bb:57:55:
39:37:34:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:47 2023 by rpki-client on console-ams.rpki-client.org