Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/ygPHZs50j28mt3T4NairwUS4O64.roa
File: ygPHZs50j28mt3T4NairwUS4O64.roa (raw, json)
Hash identifier: dUOoreKNHpklUEeXEV71hZ3dwMoA9ToatJJfh1JEGBM=
Subject key identifier: CA:03:C7:66:CE:74:8F:6F:26:B7:74:F8:35:A8:AB:C1:44:B8:3B:AE
Certificate issuer: /CN=0eca6e06c6824bd1b811183e0e17fa19496d261c
Certificate serial: 86A42B
Authority key identifier: 0E:CA:6E:06:C6:82:4B:D1:B8:11:18:3E:0E:17:FA:19:49:6D:26:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DspuBsaCS9G4ERg-Dhf6GUltJhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/ygPHZs50j28mt3T4NairwUS4O64.roa
Signing time: Tue 22 Mar 2022 12:04:12 +0000
ROA not before: Tue 22 Mar 2022 12:04:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8352
IP address blocks: 185.65.141.0/24 maxlen: 24
91.213.148.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8823851 (0x86a42b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eca6e06c6824bd1b811183e0e17fa19496d261c
Validity
Not Before: Mar 22 12:04:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ca03c766ce748f6f26b774f835a8abc144b83bae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f3:ae:bb:e6:47:40:91:03:a0:a8:fa:c2:d7:
71:73:89:a3:89:6f:2c:dc:de:ec:e5:f0:d8:69:39:
c7:33:d9:58:48:a5:75:d5:b9:95:6d:40:42:3b:eb:
9e:05:00:50:74:85:78:3c:26:e2:ae:37:e6:4e:33:
22:79:b5:5f:2a:dc:42:78:ec:d0:7a:0d:25:b8:c9:
de:82:72:03:99:3d:4f:1a:28:91:da:9b:bc:de:cb:
64:ef:65:5e:a2:45:d4:8f:98:bf:75:b5:6a:68:66:
6b:26:61:88:ce:9e:d9:c9:12:e3:a4:71:38:20:90:
9e:da:72:d7:e1:84:fb:92:4d:3a:cf:2b:5a:cb:eb:
35:15:85:0f:63:91:7b:34:ef:f1:28:60:6b:2c:ff:
35:0a:b8:62:e6:47:e6:b7:0e:72:f7:ec:72:69:6d:
8f:f9:b3:57:c4:41:44:da:8e:86:28:c8:a6:d6:ac:
df:7b:fa:d2:8e:14:a5:40:ff:63:8b:83:50:8b:3e:
e7:5b:10:7c:fe:fb:25:e1:92:1c:4b:af:71:a3:20:
e0:03:ba:78:8b:7c:e8:e2:d9:99:bb:9f:37:35:42:
35:49:e2:c1:65:84:06:56:19:da:ed:fd:b8:2f:d7:
9c:db:48:88:d1:0e:91:8c:8d:03:5a:20:16:63:f5:
b9:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:03:C7:66:CE:74:8F:6F:26:B7:74:F8:35:A8:AB:C1:44:B8:3B:AE
X509v3 Authority Key Identifier:
keyid:0E:CA:6E:06:C6:82:4B:D1:B8:11:18:3E:0E:17:FA:19:49:6D:26:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DspuBsaCS9G4ERg-Dhf6GUltJhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/ygPHZs50j28mt3T4NairwUS4O64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/DspuBsaCS9G4ERg-Dhf6GUltJhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.148.0/24
185.65.141.0/24
Signature Algorithm: sha256WithRSAEncryption
00:e4:0b:d6:a2:48:08:4f:8d:fd:35:60:3b:1b:fd:9d:e1:7d:
9b:1b:12:f5:e7:a7:3f:0c:19:60:d5:fb:6d:b4:60:36:01:b0:
2e:43:12:cb:14:e1:d5:93:d3:9f:7e:18:aa:e3:7c:8f:3c:6a:
8e:05:bc:a0:46:d6:01:25:81:1a:64:76:8d:75:43:81:3a:41:
e8:8f:67:96:68:90:79:5c:14:c1:61:fc:58:24:ce:0b:a9:1b:
e9:1c:80:0f:a9:45:b0:2a:1b:a0:36:14:66:94:dd:49:38:07:
82:74:03:24:8f:50:0f:e0:dc:e6:84:fc:59:c0:ef:19:38:37:
0a:70:7a:92:8c:a4:3f:33:9a:99:e6:5f:ec:80:b2:0f:59:75:
c6:d5:97:35:5a:e0:de:3f:a7:da:70:63:d9:3c:82:81:61:f7:
85:8d:7f:15:91:8c:38:3b:0f:41:bd:69:23:80:fe:9a:df:b7:
04:5e:b2:5b:a2:e7:82:5e:f1:a6:c0:b3:99:1d:f2:88:10:ca:
d6:f8:c7:f3:3c:25:ef:b8:e6:61:59:52:01:d2:e3:77:9d:4c:
16:af:06:26:be:fb:b4:e4:bf:62:9c:56:8e:53:34:6e:32:26:
f7:2b:68:f6:e2:d7:fb:65:14:2c:c6:8b:bc:fd:8c:6d:dd:6c:
02:d2:25:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:00 2023 by rpki-client on console-ams.rpki-client.org