Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/YjUbdIE-TmpGzcqUc8EocL-ihfA.roa
File: YjUbdIE-TmpGzcqUc8EocL-ihfA.roa (raw, json)
Hash identifier: M0seisPn66amMPespiCbNy67eHxpeiQ9H84JtuN7kTA=
Subject key identifier: 62:35:1B:74:81:3E:4E:6A:46:CD:CA:94:73:C1:28:70:BF:A2:85:F0
Certificate issuer: /CN=713b9404a0c43223addc8ea1b10ab74b777a2a01
Certificate serial: 16241FCF
Authority key identifier: 71:3B:94:04:A0:C4:32:23:AD:DC:8E:A1:B1:0A:B7:4B:77:7A:2A:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cTuUBKDEMiOt3I6hsQq3S3d6KgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/YjUbdIE-TmpGzcqUc8EocL-ihfA.roa
Signing time: Sat 01 Jan 2022 08:03:13 +0000
ROA not before: Sat 01 Jan 2022 08:03:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25234
IP address blocks: 81.95.96.0/20 maxlen: 20
31.15.8.0/21 maxlen: 21
185.12.196.0/22 maxlen: 22
2a02:4a8::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 371466191 (0x16241fcf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=713b9404a0c43223addc8ea1b10ab74b777a2a01
Validity
Not Before: Jan 1 08:03:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62351b74813e4e6a46cdca9473c12870bfa285f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5f:ff:29:16:f7:16:a6:47:67:08:88:c9:07:
57:3f:f9:bb:53:6e:0d:82:ea:89:83:16:2d:25:a5:
1e:03:2c:1d:18:62:40:98:71:44:62:e1:33:c3:70:
a2:72:c0:65:d9:77:d6:54:3b:06:f5:f0:e1:16:24:
41:07:0e:07:9c:dc:13:c3:0f:8f:23:9a:60:f9:78:
91:c3:4b:75:6a:02:1c:a6:b7:4c:35:35:3c:2c:d4:
6c:4a:34:74:97:b7:b3:ee:74:20:5a:d4:19:7b:67:
d6:9f:60:3b:58:0c:03:3c:9c:55:4c:2b:02:c6:cb:
07:ee:df:28:ea:66:d3:3f:cc:2d:e6:19:5f:a4:eb:
3e:ac:9f:d3:66:b0:fe:24:96:8b:28:30:b1:54:e8:
57:01:41:e2:c2:a1:0f:72:ed:ad:4a:cf:54:8d:3a:
6d:22:3a:b8:73:6a:9b:cc:88:27:2d:61:e9:e3:b3:
a2:71:c9:07:b0:db:32:e4:55:e0:0d:15:f3:0f:a6:
09:58:28:d0:4e:2e:ae:97:18:13:54:d3:ab:01:d0:
35:dd:ab:aa:7a:34:1e:f7:d3:68:e9:57:8c:cb:45:
a9:81:95:23:95:94:3b:84:2c:76:b1:06:62:e0:a5:
11:b2:14:9f:5d:d2:d5:99:1a:6f:b8:91:38:34:57:
9a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:35:1B:74:81:3E:4E:6A:46:CD:CA:94:73:C1:28:70:BF:A2:85:F0
X509v3 Authority Key Identifier:
keyid:71:3B:94:04:A0:C4:32:23:AD:DC:8E:A1:B1:0A:B7:4B:77:7A:2A:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTuUBKDEMiOt3I6hsQq3S3d6KgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/YjUbdIE-TmpGzcqUc8EocL-ihfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.15.8.0/21
81.95.96.0/20
185.12.196.0/22
IPv6:
2a02:4a8::/32
Signature Algorithm: sha256WithRSAEncryption
88:4e:86:e0:da:21:f1:54:8a:a2:13:71:14:ab:b4:30:85:2c:
90:7e:f7:9d:0b:b4:54:94:52:61:10:61:0c:4b:e7:ab:e7:f6:
f2:bb:0f:7e:a5:c5:34:ab:b2:72:ae:68:86:77:79:70:c8:4d:
3c:03:ab:b5:59:32:fc:7b:51:32:f5:fb:73:49:20:40:de:5a:
54:8f:4c:6d:f3:50:a5:66:2c:00:d3:d4:67:7a:34:54:9c:39:
45:ca:e7:30:d3:75:bf:fc:f4:47:16:47:21:cb:df:ef:89:3e:
99:ad:91:2e:4f:12:18:d8:e1:73:9c:20:c1:f5:d9:a2:f0:5e:
f3:b9:87:5a:de:ce:c2:70:ef:cf:4c:79:15:51:ce:b5:fe:73:
81:32:8d:12:90:91:ca:be:f8:02:c6:42:2e:38:a2:8a:39:9f:
10:2d:e5:28:dc:c6:ae:e1:e7:53:a8:56:23:cc:28:ee:55:f5:
e7:0c:22:09:02:2f:91:35:73:5a:19:d0:b0:ad:8d:8d:71:3a:
1a:c1:ef:65:58:e5:63:95:bf:fc:45:45:de:84:47:0d:34:30:
76:cf:80:3c:12:cc:53:f3:80:ad:69:b1:83:be:d7:4e:84:e5:
67:45:c6:ca:4f:99:fc:b4:95:ff:35:56:1d:6d:d5:76:19:18:
71:58:29:18
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:50:11 2025 by rpki-client