Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/Yrt6LidyzdW4oWOv7W75v1-vDwI.roa
File: Yrt6LidyzdW4oWOv7W75v1-vDwI.roa (raw, json)
Hash identifier: oi12S0MogTJh8v9ISLx/U75W/MxOfGT9o7Ws/qtlreo=
Subject key identifier: 62:BB:7A:2E:27:72:CD:D5:B8:A1:63:AF:ED:6E:F9:BF:5F:AF:0F:02
Certificate issuer: /CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Certificate serial: 013DE2A7
Authority key identifier: F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/Yrt6LidyzdW4oWOv7W75v1-vDwI.roa
Signing time: Thu 03 Feb 2022 14:39:38 +0000
ROA not before: Thu 03 Feb 2022 14:39:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203061
IP address blocks: 188.212.6.0/23 maxlen: 23
185.207.37.0/24 maxlen: 24
185.207.38.0/24 maxlen: 24
185.183.44.0/22 maxlen: 22
79.110.239.0/24 maxlen: 24
79.110.239.0/25 maxlen: 25
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20832935 (0x13de2a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Validity
Not Before: Feb 3 14:39:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62bb7a2e2772cdd5b8a163afed6ef9bf5faf0f02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e9:b2:0d:9b:46:76:33:4a:f7:5f:45:f2:6d:
a0:fe:68:cb:35:1e:9c:bc:9c:a7:8c:ce:1b:97:ad:
3b:2c:f8:87:62:a3:6d:c4:cf:d5:09:55:d5:81:79:
e2:e1:05:5b:e6:e4:5b:dd:63:89:64:41:31:41:dc:
0b:80:3e:c5:e3:cb:b4:9f:7c:26:91:7e:4a:ac:f2:
0d:da:3c:5a:64:2d:ef:00:ea:a4:ca:b0:af:fd:90:
e0:ad:af:24:b0:60:98:7e:fa:1e:8f:45:3e:fe:49:
67:47:4f:88:bd:5a:c4:69:5e:10:48:18:43:0a:67:
da:1d:9f:d0:e3:84:ee:1c:7e:c3:f3:3b:3b:be:0f:
d1:d0:67:16:c6:a0:c6:2a:d5:cb:b2:d2:f7:ba:8a:
a2:e2:ca:8c:97:cc:e5:49:ad:12:69:6d:a5:29:9e:
ba:17:87:e9:57:10:16:04:c1:16:99:a0:9f:db:70:
72:26:b8:e8:fc:42:31:e5:dc:eb:be:31:7a:50:13:
19:22:d4:36:1d:cc:06:c5:7f:29:11:e9:9e:f8:e1:
a0:11:06:2b:5e:0b:41:f0:07:f8:62:5b:b3:dd:ec:
61:41:c1:3b:84:3a:0b:a1:77:5d:46:96:c2:05:8f:
aa:8d:0c:db:a3:e0:f7:8d:f1:21:51:6a:12:09:1c:
36:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:BB:7A:2E:27:72:CD:D5:B8:A1:63:AF:ED:6E:F9:BF:5F:AF:0F:02
X509v3 Authority Key Identifier:
keyid:F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/Yrt6LidyzdW4oWOv7W75v1-vDwI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.239.0/24
185.183.44.0/22
185.207.37.0-185.207.38.255
188.212.6.0/23
Signature Algorithm: sha256WithRSAEncryption
27:39:a3:dc:ab:db:3e:e2:36:1d:1d:d9:04:f5:45:88:92:4a:
a2:41:ba:56:eb:56:2b:f7:70:71:83:ce:bc:7d:b6:96:8a:0e:
18:f9:e9:2a:7d:1c:ba:00:2f:b5:8d:24:2b:8d:f1:39:98:63:
bb:31:c5:11:8e:6f:be:07:f9:8a:62:77:c7:62:74:50:99:33:
47:56:5a:e4:8c:16:3f:5d:47:0e:37:e3:35:b4:86:e0:23:8b:
3c:07:e8:19:8a:56:56:5b:04:f6:82:6e:a0:b7:f4:86:c7:90:
47:9d:d0:ce:af:26:b2:c9:7c:bd:62:85:bd:9d:09:22:9e:d3:
90:01:f0:31:84:6d:fb:98:9b:b1:8c:11:52:8c:7f:95:a2:ae:
96:10:1b:ec:5e:41:9b:ee:b6:14:ab:b5:c5:ce:b9:73:ea:ba:
e1:e6:b8:21:4b:0a:75:17:51:42:f7:5e:01:08:f0:59:91:9c:
1f:aa:f3:8d:94:33:3d:e2:87:94:49:71:3c:bd:ec:cd:83:e9:
78:8d:47:f4:21:82:19:2e:a1:34:0f:d3:3a:93:12:68:09:d3:
5d:5e:43:5b:e4:b6:0b:2e:90:ef:47:fc:f3:bb:a6:7e:21:3d:
94:61:a4:bf:fb:de:2f:26:02:ea:19:18:94:49:77:d0:0c:e4:
ac:38:9c:36
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgIEAT3ipzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
NWZiMzJkMjI2NmIxZjliY2U1N2NhYzk4YmMwMjQ3ZjJjOTE5N2YyMB4XDTIyMDIw
MzE0MzkzOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjJiYjdhMmUyNzcy
Y2RkNWI4YTE2M2FmZWQ2ZWY5YmY1ZmFmMGYwMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAODpsg2bRnYzSvdfRfJtoP5oyzUenLycp4zOG5etOyz4h2Kj
bcTP1QlV1YF54uEFW+bkW91jiWRBMUHcC4A+xePLtJ98JpF+SqzyDdo8WmQt7wDq
pMqwr/2Q4K2vJLBgmH76Ho9FPv5JZ0dPiL1axGleEEgYQwpn2h2f0OOE7hx+w/M7
O74P0dBnFsagxirVy7LS97qKouLKjJfM5UmtEmltpSmeuheH6VcQFgTBFpmgn9tw
cia46PxCMeXc674xelATGSLUNh3MBsV/KRHpnvjhoBEGK14LQfAH+GJbs93sYUHB
O4Q6C6F3XUaWwgWPqo0M26Pg943xIVFqEgkcNjECAwEAAaOCAiMwggIfMB0GA1Ud
DgQWBBRiu3ouJ3LN1bihY6/tbvm/X68PAjAfBgNVHSMEGDAWgBT1+zLSJmsfm85X
ysmLwCR/LJGX8jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
Lzlmc3kwaVpySDV2T1Y4ckppOEFrZnl5UmxfSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODAvZmI0MmVjLTEwYjQtNGRjZi1iZWYwLTJkMTQzZDdiODUzYy8x
L1lydDZMaWR5emRXNG9XT3Y3Vzc1djEtdkR3SS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODAv
ZmI0MmVjLTEwYjQtNGRjZi1iZWYwLTJkMTQzZDdiODUzYy8xLzlmc3kwaVpySDV2
T1Y4ckppOEFrZnl5UmxfSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA5
BggrBgEFBQcBBwEB/wQqMCgwJgQCAAEwIAMEAE9u7wMEArm3LDAMAwQAuc8lAwQA
uc8mAwQBvNQGMA0GCSqGSIb3DQEBCwUAA4IBAQAnOaPcq9s+4jYdHdkE9UWIkkqi
QbpW61Yr93Bxg868fbaWig4Y+ekqfRy6AC+1jSQrjfE5mGO7McURjm++B/mKYnfH
YnRQmTNHVlrkjBY/XUcON+M1tIbgI4s8B+gZilZWWwT2gm6gt/SGx5BHndDOryay
yXy9YoW9nQkintOQAfAxhG37mJuxjBFSjH+Voq6WEBvsXkGb7rYUq7XFzrlz6rrh
5rghSwp1F1FC914BCPBZkZwfqvONlDM94oeUSXE8vezNg+l4jUf0IYIZLqE0D9M6
kxJoCdNdXkNb5LYLLpDvR/zzu6Z+IT2UYaS/+94vJgLqGRiUSXfQDOSsOJw2
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:15 2023 by rpki-client on console-ams.rpki-client.org