Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/YEh99X4IbdLfr3NAeTdH5cj5GD4.roa
File: YEh99X4IbdLfr3NAeTdH5cj5GD4.roa (raw, json)
Hash identifier: Fs8UiB9lAhpAEEDvSjkLGplhPF2R1Dd8K//tidzUHEc=
Subject key identifier: 60:48:7D:F5:7E:08:6D:D2:DF:AF:73:40:79:37:47:E5:C8:F9:18:3E
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 16D69325
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/YEh99X4IbdLfr3NAeTdH5cj5GD4.roa
Signing time: Sat 01 Jan 2022 12:01:32 +0000
ROA not before: Sat 01 Jan 2022 12:01:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57489
IP address blocks: 141.101.236.0/24 maxlen: 24
46.243.253.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 383161125 (0x16d69325)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 12:01:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=60487df57e086dd2dfaf7340793747e5c8f9183e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:79:99:1a:64:2a:a6:df:c6:72:d0:64:ea:64:
15:7d:2e:3a:0d:f6:81:02:ec:da:eb:f4:61:65:d9:
33:a4:e1:0f:63:4d:cb:4f:f5:ab:9f:7b:34:0c:29:
fb:e8:8a:55:34:aa:f4:88:33:c3:1d:82:f8:32:47:
dc:2f:c1:1a:e8:21:aa:ac:b9:53:ac:50:84:a4:5e:
74:96:08:97:63:e3:d5:b4:8d:c3:5b:1d:d6:af:8d:
f4:03:52:5b:53:a7:e4:34:d0:e4:42:9b:52:55:1b:
2c:0b:16:a8:63:55:5d:52:7f:33:fe:4f:89:91:a4:
5d:a5:85:8d:32:68:be:0a:76:2d:bb:d6:13:76:b3:
96:63:09:88:51:0f:21:4b:15:9c:e1:c0:32:d1:e1:
21:6e:27:76:7a:be:25:d8:5d:a3:d2:83:60:45:07:
b5:af:93:67:55:27:13:bb:59:b7:7e:c7:51:f6:55:
19:83:c4:ef:c0:5c:4b:bb:bb:09:ac:64:fb:c0:7f:
ec:f9:70:e7:4d:ce:a2:25:93:5c:aa:dc:02:e4:ce:
31:53:fa:26:db:b1:2a:cd:e2:51:30:3c:40:9d:7b:
85:b7:43:18:12:38:6d:c3:62:c9:5c:d1:97:6d:cf:
f3:31:98:2a:0e:52:2a:73:30:f6:10:61:ce:eb:96:
dc:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:48:7D:F5:7E:08:6D:D2:DF:AF:73:40:79:37:47:E5:C8:F9:18:3E
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/YEh99X4IbdLfr3NAeTdH5cj5GD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.253.0/24
141.101.236.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:71:b1:5c:7b:95:ae:44:db:3f:c9:48:99:7b:ad:73:d7:8a:
12:0e:65:37:be:2f:d5:1e:99:1e:14:49:86:86:27:78:31:7c:
8d:ff:26:f7:16:7d:65:4d:84:81:c5:f6:71:74:c9:87:63:aa:
5e:b3:d1:7e:eb:4f:31:20:98:b8:e9:fb:48:6a:d0:4c:d9:fe:
02:cf:01:8b:46:64:e0:5c:d5:d6:60:f1:3d:99:86:99:3f:86:
87:ad:85:8f:26:d2:a1:74:93:56:9c:a9:28:30:90:7f:7f:c9:
54:79:b8:cb:a4:8b:4e:39:0f:0d:ca:e5:9b:f4:a6:8c:e7:5a:
ff:75:49:f5:1b:67:2c:c5:41:58:bb:eb:4d:48:02:3a:45:6d:
75:89:12:33:2f:a1:6b:83:6f:04:cf:8a:07:79:fe:fc:37:f5:
2e:2c:d9:73:57:f0:4d:58:fd:29:49:14:88:16:f3:c6:66:ce:
9d:b6:ba:26:0b:d3:ac:e9:ac:91:39:23:71:36:da:ab:12:f7:
3d:4e:40:75:ef:00:fb:5e:85:f7:b6:4e:c4:4a:4c:1d:cc:23:
14:a5:91:ef:9b:ca:54:7b:b6:3e:ec:c0:84:3d:a0:96:33:98:
3b:54:16:26:87:85:bc:26:e5:1a:f7:95:de:71:0f:eb:08:ed:
e5:fe:2c:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:33 2024 by rpki-client on console-ams.rpki-client.org