Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/YLyQCJnRlWesBFfyeFIl4mvWE5w.roa
File: YLyQCJnRlWesBFfyeFIl4mvWE5w.roa (raw, json)
Hash identifier: vB3ooMHatKNAS1saE7VroX4fNnI5T8Y51J5aPobk1zg=
Subject key identifier: 60:BC:90:08:99:D1:95:67:AC:04:57:F2:78:52:25:E2:6B:D6:13:9C
Certificate issuer: /CN=4e78b6d00614f5565d9d8af8247cc72ea9b8833d
Certificate serial: 03F9E790
Authority key identifier: 4E:78:B6:D0:06:14:F5:56:5D:9D:8A:F8:24:7C:C7:2E:A9:B8:83:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tni20AYU9VZdnYr4JHzHLqm4gz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/YLyQCJnRlWesBFfyeFIl4mvWE5w.roa
Signing time: Sat 01 Jan 2022 15:59:31 +0000
ROA not before: Sat 01 Jan 2022 15:59:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212734
IP address blocks: 80.92.203.0/24 maxlen: 24
80.92.200.0/24 maxlen: 24
80.92.202.0/24 maxlen: 24
2a07:3a40::/34 maxlen: 34
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66709392 (0x3f9e790)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e78b6d00614f5565d9d8af8247cc72ea9b8833d
Validity
Not Before: Jan 1 15:59:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=60bc900899d19567ac0457f2785225e26bd6139c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b9:05:93:fc:df:76:7a:a1:11:7e:ac:a1:c0:
3e:ba:cb:c0:60:c6:a9:86:e4:9a:89:df:1f:94:45:
ce:30:cf:5d:60:79:89:dd:2e:c7:c8:59:52:f1:76:
c5:2c:e2:e1:df:6f:0b:ca:4f:b6:ee:6f:3f:8d:2f:
82:9e:e7:5f:13:f8:b2:e1:10:4c:87:c7:5c:e0:46:
4d:ac:17:31:1d:40:36:48:f5:16:e5:14:c0:52:f9:
63:11:43:5d:e9:3c:d1:5b:a6:af:86:5b:ec:c2:3d:
b8:90:21:ad:66:2b:60:fc:cf:fe:43:5b:ef:f7:b0:
0f:5d:38:c2:27:49:97:1a:8b:e6:ec:2b:e0:99:e8:
f8:a6:0f:32:d2:57:61:09:3f:d2:4e:aa:42:fc:69:
df:49:e1:df:43:2c:f1:bd:94:23:43:3a:57:9d:b5:
23:f1:0c:a7:9f:fe:95:fa:93:3d:a5:7e:a9:39:dd:
29:2b:40:e1:d1:4c:b3:17:af:ab:94:66:7a:11:29:
35:5e:83:66:75:b1:b7:d6:78:ae:b5:89:a7:3f:bf:
70:f5:7c:3f:b8:a8:41:8c:49:f9:74:bb:85:ba:da:
25:87:0d:e1:41:e4:f8:7f:16:4d:00:b9:a6:e1:0a:
d0:fc:53:64:e5:8c:07:1b:57:a0:26:2d:d0:59:e8:
d3:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:BC:90:08:99:D1:95:67:AC:04:57:F2:78:52:25:E2:6B:D6:13:9C
X509v3 Authority Key Identifier:
keyid:4E:78:B6:D0:06:14:F5:56:5D:9D:8A:F8:24:7C:C7:2E:A9:B8:83:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tni20AYU9VZdnYr4JHzHLqm4gz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/YLyQCJnRlWesBFfyeFIl4mvWE5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/Tni20AYU9VZdnYr4JHzHLqm4gz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.92.200.0/24
80.92.202.0/23
IPv6:
2a07:3a40::/34
Signature Algorithm: sha256WithRSAEncryption
7b:2c:63:86:7a:ec:06:a8:e7:06:14:8a:07:84:6e:a3:cd:b4:
72:27:79:58:e1:1d:32:ca:e9:b2:09:2a:aa:75:32:06:69:9b:
e4:b4:ea:c6:8a:7f:2c:aa:3c:b4:61:b7:c8:58:4b:a1:fa:b4:
57:ed:b0:22:76:3b:da:9a:8c:1c:19:09:ca:f6:e2:a8:73:81:
c5:a9:e8:bc:4d:32:83:b3:f4:4e:07:9c:0f:4d:e8:0c:dd:a4:
ab:05:ea:46:40:9c:ec:d3:c9:25:c5:9e:4c:2f:61:2b:cd:1f:
d2:01:68:25:df:34:88:fb:e6:17:51:e3:ae:2b:7a:5a:33:ec:
91:47:c9:00:ae:a0:5b:69:b4:7b:89:7e:58:ee:96:b2:54:9e:
6f:a6:df:ce:b4:12:87:09:1d:99:64:19:96:40:3c:4d:ed:86:
09:20:e8:1f:73:4d:db:c8:ee:fd:f2:6d:9d:77:72:7d:bf:94:
4a:db:bf:3f:47:d9:ed:dc:20:1b:d0:aa:0b:53:56:f8:af:81:
1d:dd:f8:a6:ee:26:e0:d9:4f:43:8c:45:bf:6c:6b:f5:75:df:
66:5d:4a:6f:dc:33:6c:a5:35:97:08:f0:ec:5a:4a:51:1e:57:
c7:91:37:5e:90:38:7e:84:04:a1:7e:5a:f9:12:a3:a7:e2:80:
88:55:a1:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:06 2024 by rpki-client on console-ams.rpki-client.org