Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/1529c6-8082-4f3a-bc92-423fca224041/1/ylg5ta_F79FdAi8Nd1ocWqGwEDc.roa
File: ylg5ta_F79FdAi8Nd1ocWqGwEDc.roa (raw, json)
Hash identifier: ylibs4DTaSVuKa83AAyRsjyQUkPplcLFwY50wdFQbYc=
Subject key identifier: CA:58:39:B5:AF:C5:EF:D1:5D:02:2F:0D:77:5A:1C:5A:A1:B0:10:37
Certificate issuer: /CN=6e9a558ad546dcc9abc0b8a131067af02e407007
Certificate serial: 1256C93E
Authority key identifier: 6E:9A:55:8A:D5:46:DC:C9:AB:C0:B8:A1:31:06:7A:F0:2E:40:70:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bppVitVG3MmrwLihMQZ68C5AcAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/1529c6-8082-4f3a-bc92-423fca224041/1/ylg5ta_F79FdAi8Nd1ocWqGwEDc.roa
Signing time: Wed 09 Feb 2022 14:13:14 +0000
ROA not before: Wed 09 Feb 2022 14:13:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201849
IP address blocks: 185.62.63.0/24 maxlen: 24
2a06:d700:4444::/48 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 307677502 (0x1256c93e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e9a558ad546dcc9abc0b8a131067af02e407007
Validity
Not Before: Feb 9 14:13:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ca5839b5afc5efd15d022f0d775a1c5aa1b01037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f7:08:2f:1f:6f:a3:6f:2b:22:de:a5:de:47:
03:5f:b6:dc:30:ef:4a:20:40:09:be:90:69:c0:dd:
4e:49:5c:1b:99:f3:31:4e:2b:c5:45:0a:a6:b0:96:
35:90:95:6b:c0:6a:ed:5a:11:97:9e:7f:ba:79:5b:
68:a9:90:87:c6:a7:2d:1e:fc:ec:7f:d2:49:17:74:
f1:00:be:7a:70:e8:52:01:d1:b9:a0:c8:be:24:fa:
52:6f:16:8d:4f:03:fa:c9:99:7f:71:a3:1f:2f:8b:
28:58:71:d5:56:ec:db:b3:ca:7e:41:7d:00:07:f0:
63:04:ba:dd:1f:6c:d7:ec:f3:f5:cc:69:71:b3:e6:
e2:eb:c4:8e:05:87:76:7d:a4:70:d0:48:3c:ba:89:
e2:ec:b8:a7:ae:7c:d8:a3:27:ae:10:bc:b7:94:17:
2d:64:73:b2:27:97:50:c0:66:44:d7:fa:d5:0f:10:
08:1c:ab:1c:c8:3b:ae:5b:f1:37:85:5a:7c:ea:bd:
8e:c2:d5:88:78:9c:6a:a2:7b:9b:cb:e8:03:1d:da:
90:89:94:0b:e2:70:e3:6d:c6:62:cc:d4:b3:ab:6d:
b2:3d:a8:e8:f7:53:bd:0a:83:6f:d2:cf:be:61:5b:
de:4e:8f:ca:fc:b5:fc:39:63:2c:1e:d0:3d:79:fa:
d8:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:58:39:B5:AF:C5:EF:D1:5D:02:2F:0D:77:5A:1C:5A:A1:B0:10:37
X509v3 Authority Key Identifier:
keyid:6E:9A:55:8A:D5:46:DC:C9:AB:C0:B8:A1:31:06:7A:F0:2E:40:70:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bppVitVG3MmrwLihMQZ68C5AcAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/1529c6-8082-4f3a-bc92-423fca224041/1/ylg5ta_F79FdAi8Nd1ocWqGwEDc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/1529c6-8082-4f3a-bc92-423fca224041/1/bppVitVG3MmrwLihMQZ68C5AcAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.62.63.0/24
IPv6:
2a06:d700:4444::/48
Signature Algorithm: sha256WithRSAEncryption
9b:d4:9c:5b:a7:03:10:5a:4c:97:47:8e:a6:bd:6a:cb:b2:f0:
19:f8:98:0c:f2:f0:0f:24:40:37:e0:10:9d:84:6b:4e:37:8b:
20:d1:58:e4:d4:1a:51:89:0d:56:1f:e7:20:39:52:37:dd:f2:
fa:c8:9f:dd:f3:1d:21:94:46:99:0e:6a:cd:3e:bc:bc:e0:86:
cd:3f:ef:0d:6f:11:ff:89:65:d9:ba:ba:46:fe:34:3c:b5:70:
91:c8:82:8a:32:3c:96:aa:f5:f3:9c:b5:4b:86:ac:15:3d:39:
33:b6:a3:52:4d:8a:b8:35:be:95:ee:c4:d6:ab:2c:3a:66:77:
a4:5a:fb:74:b3:ca:36:1f:dc:5c:0b:7c:8c:78:1a:80:4a:1c:
21:71:78:ac:43:89:f1:8e:47:66:74:0f:b9:96:25:1a:81:51:
95:22:19:2b:9f:8d:2f:18:e9:b2:10:92:c9:85:59:02:7f:71:
4c:ec:3b:5b:ef:33:c3:09:cf:4b:1f:dd:bf:0e:9d:79:21:70:
8a:36:74:9b:b7:c8:22:ba:f7:08:fe:06:80:6c:fd:cb:9c:6b:
b9:9f:37:f9:9c:a9:8e:75:1c:46:e6:6c:99:9b:72:cc:4f:e2:
11:1f:fa:2a:09:5e:5d:28:85:43:d7:2e:d0:f3:dd:d9:9d:b4:
3e:fb:c8:b8
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEElbJPjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
ZTlhNTU4YWQ1NDZkY2M5YWJjMGI4YTEzMTA2N2FmMDJlNDA3MDA3MB4XDTIyMDIw
OTE0MTMxNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoY2E1ODM5YjVhZmM1
ZWZkMTVkMDIyZjBkNzc1YTFjNWFhMWIwMTAzNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMP3CC8fb6NvKyLepd5HA1+23DDvSiBACb6QacDdTklcG5nz
MU4rxUUKprCWNZCVa8Bq7VoRl55/unlbaKmQh8anLR787H/SSRd08QC+enDoUgHR
uaDIviT6Um8WjU8D+smZf3GjHy+LKFhx1Vbs27PKfkF9AAfwYwS63R9s1+zz9cxp
cbPm4uvEjgWHdn2kcNBIPLqJ4uy4p6582KMnrhC8t5QXLWRzsieXUMBmRNf61Q8Q
CByrHMg7rlvxN4VafOq9jsLViHicaqJ7m8voAx3akImUC+Jw423GYszUs6ttsj2o
6PdTvQqDb9LPvmFb3k6Pyvy1/DljLB7QPXn62OECAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBTKWDm1r8Xv0V0CLw13WhxaobAQNzAfBgNVHSMEGDAWgBRumlWK1UbcyavA
uKExBnrwLkBwBzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JwcFZpdFZHM01tcndMaWhNUVo2OEM1QWNBYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODQvMTUyOWM2LTgwODItNGYzYS1iYzkyLTQyM2ZjYTIyNDA0MS8x
L3lsZzV0YV9GNzlGZEFpOE5kMW9jV3FHd0VEYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODQv
MTUyOWM2LTgwODItNGYzYS1iYzkyLTQyM2ZjYTIyNDA0MS8xL2JwcFZpdFZHM01t
cndMaWhNUVo2OEM1QWNBYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEALk+PzAPBAIAAjAJAwcAKgbXAERE
MA0GCSqGSIb3DQEBCwUAA4IBAQCb1JxbpwMQWkyXR46mvWrLsvAZ+JgM8vAPJEA3
4BCdhGtON4sg0Vjk1BpRiQ1WH+cgOVI33fL6yJ/d8x0hlEaZDmrNPry84IbNP+8N
bxH/iWXZurpG/jQ8tXCRyIKKMjyWqvXznLVLhqwVPTkztqNSTYq4Nb6V7sTWqyw6
ZnekWvt0s8o2H9xcC3yMeBqAShwhcXisQ4nxjkdmdA+5liUagVGVIhkrn40vGOmy
EJLJhVkCf3FM7Dtb7zPDCc9LH92/Dp15IXCKNnSbt8giuvcI/gaAbP3LnGu5nzf5
nKmOdRxG5myZm3LMT+IRH/oqCV5dKIVD1y7Q893ZnbQ++8i4
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:20 2024 by rpki-client on console-fra.rpki-client.org