Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/d1c70e-226a-4781-b662-741ab92997d0/1/YhmSRLF_dvsf43S3zSjjR9h5ZaM.roa
File: YhmSRLF_dvsf43S3zSjjR9h5ZaM.roa (raw, json)
Hash identifier: 3adP9BgAhPnKGwrjJVbSS74my2XTqeFhmWIU5S8eH1o=
Subject key identifier: 62:19:92:44:B1:7F:76:FB:1F:E3:74:B7:CD:28:E3:47:D8:79:65:A3
Certificate issuer: /CN=bd252a75c961ad338fd91147d461dd8b3d20cf51
Certificate serial: 088B1A86
Authority key identifier: BD:25:2A:75:C9:61:AD:33:8F:D9:11:47:D4:61:DD:8B:3D:20:CF:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vSUqdclhrTOP2RFH1GHdiz0gz1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/d1c70e-226a-4781-b662-741ab92997d0/1/YhmSRLF_dvsf43S3zSjjR9h5ZaM.roa
Signing time: Sat 01 Jan 2022 09:57:45 +0000
ROA not before: Sat 01 Jan 2022 09:57:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 5539
IP address blocks: 5.182.155.0/24 maxlen: 24
5.182.154.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143334022 (0x88b1a86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd252a75c961ad338fd91147d461dd8b3d20cf51
Validity
Not Before: Jan 1 09:57:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62199244b17f76fb1fe374b7cd28e347d87965a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9f:6a:c1:81:73:cf:85:3a:fe:92:42:96:08:
bc:7f:92:40:45:63:ab:d0:b5:eb:f9:03:55:a1:7c:
46:a4:29:57:bf:dd:21:c9:04:d2:6b:29:4f:10:59:
28:65:d5:ac:47:ca:88:d4:34:82:ce:1c:ba:5a:b7:
2e:1a:d3:91:8d:e0:d5:b0:be:7c:75:fe:f9:76:89:
31:ba:8d:8f:7e:d4:23:89:80:b5:3a:84:af:70:f4:
1e:d7:27:58:4f:ad:37:15:7d:4b:e5:26:3d:78:8a:
19:68:08:66:0d:fb:87:ba:c9:f0:47:c8:94:6d:84:
98:10:00:ef:fc:47:64:e8:44:32:90:66:73:17:d4:
8f:b0:0b:d6:90:bb:14:40:28:3b:80:24:3a:1f:ea:
f2:b7:cd:07:d8:3c:7d:46:6b:f7:ce:b0:e5:cc:71:
96:4b:27:fb:b5:57:aa:83:6f:d5:5f:0e:c0:b6:66:
94:31:de:01:73:25:ac:65:ea:1f:3a:65:ac:48:13:
d3:05:ec:28:b6:3b:44:03:0b:8d:23:ac:28:11:f6:
fc:a3:4e:97:58:1b:a8:a6:58:6c:91:47:a9:b3:f0:
20:a9:30:8f:1c:5f:2e:a0:3d:22:cf:91:46:e7:9b:
cb:e1:0f:21:4a:c6:b7:39:f6:11:b6:d5:8e:19:85:
4b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:19:92:44:B1:7F:76:FB:1F:E3:74:B7:CD:28:E3:47:D8:79:65:A3
X509v3 Authority Key Identifier:
keyid:BD:25:2A:75:C9:61:AD:33:8F:D9:11:47:D4:61:DD:8B:3D:20:CF:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vSUqdclhrTOP2RFH1GHdiz0gz1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d1c70e-226a-4781-b662-741ab92997d0/1/YhmSRLF_dvsf43S3zSjjR9h5ZaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d1c70e-226a-4781-b662-741ab92997d0/1/vSUqdclhrTOP2RFH1GHdiz0gz1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.154.0/23
Signature Algorithm: sha256WithRSAEncryption
9b:c9:50:cf:21:7b:c7:11:e5:45:b3:55:ba:e7:46:c4:1f:34:
5f:34:b2:b8:ba:9b:c2:db:8a:4f:5c:0f:7c:7f:77:ed:55:27:
6d:01:31:3b:44:e1:73:e9:02:1e:92:86:ec:fb:bf:49:54:8f:
b2:c5:73:c5:c4:0c:38:dd:81:6c:35:a3:f6:6f:34:58:4a:3c:
d4:63:04:c6:f7:90:e4:3b:5d:5b:15:8e:e7:c9:19:5f:39:f3:
40:ec:db:eb:19:12:c6:65:06:d4:6f:47:54:fe:96:d0:91:9e:
fc:8d:e6:ff:82:e1:78:20:ba:62:cd:34:23:5e:4d:5e:f8:96:
6f:5e:71:77:20:92:7f:1a:93:3a:99:99:8c:97:bd:d0:e9:94:
d3:09:55:6a:3f:31:c5:14:87:3e:b5:cc:5f:82:52:f7:31:b6:
3d:82:2c:42:dc:d4:0b:c8:fd:e3:7f:0b:ab:47:eb:a1:bb:7f:
f1:10:c6:b0:a6:29:d6:79:25:02:32:08:22:03:99:2c:b7:a1:
5e:e4:2a:58:62:80:67:18:a0:92:5b:dc:02:8d:05:63:10:a0:
cf:e6:56:24:b2:6f:19:2d:a1:e7:1e:d0:70:22:68:1f:12:a2:
f7:30:f2:34:3a:7f:0a:cb:11:d6:9b:9a:5e:7c:5c:d8:34:77:
27:f2:9c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:42 2023 by rpki-client on console-fra.rpki-client.org