Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/YPg--EL9L8fFv-_DueuF5P_6V-k.roa
File: YPg--EL9L8fFv-_DueuF5P_6V-k.roa (raw, json)
Hash identifier: 9WckgKJ6GbkMEsCk5/3pXYq0qRSued2syO4fMdDDhAs=
Subject key identifier: 60:F8:3E:F8:42:FD:2F:C7:C5:BF:EF:C3:B9:EB:85:E4:FF:FA:57:E9
Certificate issuer: /CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
Certificate serial: 0182CEFCE2333A5B1A97CF03A7B8ED6CEFF9
Authority key identifier: 22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/YPg--EL9L8fFv-_DueuF5P_6V-k.roa
Signing time: Wed 24 Aug 2022 08:34:15 +0000
ROA not before: Wed 24 Aug 2022 08:34:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9009
IP address blocks: 109.166.36.0/22 maxlen: 24
151.248.68.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ce:fc:e2:33:3a:5b:1a:97:cf:03:a7:b8:ed:6c:ef:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
Validity
Not Before: Aug 24 08:34:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=60f83ef842fd2fc7c5bfefc3b9eb85e4fffa57e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:70:44:33:c5:bd:ea:68:de:7a:f9:c4:84:3a:
fb:b4:97:22:d9:d1:52:be:1f:e0:d5:63:e5:16:14:
f9:99:e0:52:a1:39:d3:d4:16:3f:f6:87:0d:71:17:
f4:3e:40:22:c9:21:ae:35:13:cb:12:8a:5b:08:43:
b7:1e:cb:1c:89:c8:a3:69:97:56:58:32:a1:07:9d:
86:33:e7:bf:da:44:9b:cf:9c:36:43:22:c7:f1:c3:
8e:00:54:47:38:49:17:a6:40:d5:b4:44:e9:75:f4:
1d:62:7a:ce:dd:3f:a9:84:3c:51:e1:ca:bb:f4:ca:
0c:82:35:f4:18:d2:fb:e2:f1:74:ff:f9:84:69:c8:
a4:1c:3c:dd:6f:c7:2e:85:19:72:c8:fb:db:b3:96:
ad:a1:39:41:43:a6:14:de:5d:27:c7:17:d9:f8:36:
c4:34:3a:df:42:8a:2f:61:f2:52:c8:df:b1:36:6d:
0b:b9:a0:49:4f:15:06:d2:64:4c:9d:25:ee:d3:8f:
10:02:b3:60:39:fb:74:64:d6:6f:99:a3:de:80:30:
b9:30:cd:4e:74:a5:c9:aa:ff:bc:cb:a1:c2:51:77:
6d:d6:e5:03:0f:2b:60:f1:91:17:be:59:e5:80:7c:
56:54:ea:af:48:a4:a7:65:18:f0:eb:1a:8e:9a:06:
24:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:F8:3E:F8:42:FD:2F:C7:C5:BF:EF:C3:B9:EB:85:E4:FF:FA:57:E9
X509v3 Authority Key Identifier:
keyid:22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/YPg--EL9L8fFv-_DueuF5P_6V-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.166.36.0/22
151.248.68.0/23
Signature Algorithm: sha256WithRSAEncryption
3c:25:b5:89:18:f3:7c:e0:c8:56:91:9f:b5:b1:f6:c7:c2:7d:
23:07:20:dc:85:82:5c:a7:64:d0:ab:34:2e:ab:2c:76:e6:11:
97:24:2e:91:b5:59:37:6d:2c:68:3c:3a:1b:7b:8f:1a:2c:9d:
8b:47:39:d8:ff:68:ad:ff:f6:5c:38:64:3d:f5:14:5f:a7:ef:
9e:8c:25:78:7f:5a:6c:25:aa:18:cd:6b:50:fe:21:82:71:c3:
46:b3:90:f6:ae:62:8b:1a:1d:76:f4:e8:22:36:1a:69:52:b9:
5c:f8:1c:75:c9:21:6c:5f:89:89:11:16:5a:02:eb:19:c9:12:
63:58:29:da:76:50:1f:d9:f6:6f:96:d1:bb:3a:5e:c6:1e:59:
29:f7:69:3e:b5:21:be:4d:42:be:32:44:dd:3d:4d:04:5b:9f:
57:e3:3e:6e:bc:fc:5c:8a:b5:0e:38:69:01:9b:b9:30:09:5e:
c7:9c:a4:a7:db:11:2a:64:28:c3:fe:4d:e9:08:ac:7e:83:d6:
ec:4c:f3:cb:51:52:77:f8:9b:59:c1:11:5d:d4:9f:d7:52:21:
3f:cf:2e:f5:ff:6b:a1:8b:6b:b2:0e:07:5e:8c:64:3d:12:40:
54:79:09:0a:b8:14:61:e4:19:e0:fa:b5:14:2e:48:a3:01:d5:
2f:af:04:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:21 2023 by rpki-client on console-fra.rpki-client.org