Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/70c477-a8cd-4a72-b669-1f93c239a012/1/yHrK4ThEGQ7_ncuFF8gzNzeRUz4.roa
File: yHrK4ThEGQ7_ncuFF8gzNzeRUz4.roa (raw, json)
Hash identifier: 1cUK0Lm0oprBwY5VpDBookdCKs8o8OocuRGfzBBJf6Y=
Subject key identifier: C8:7A:CA:E1:38:44:19:0E:FF:9D:CB:85:17:C8:33:37:37:91:53:3E
Certificate issuer: /CN=1bd2d463ae15346d5edd7937b8bfa8e09b14376d
Certificate serial: 022710D6
Authority key identifier: 1B:D2:D4:63:AE:15:34:6D:5E:DD:79:37:B8:BF:A8:E0:9B:14:37:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G9LUY64VNG1e3Xk3uL-o4JsUN20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/70c477-a8cd-4a72-b669-1f93c239a012/1/yHrK4ThEGQ7_ncuFF8gzNzeRUz4.roa
Signing time: Sat 01 Jan 2022 05:55:59 +0000
ROA not before: Sat 01 Jan 2022 05:55:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43289
IP address blocks: 194.61.32.0/24 maxlen: 24
194.61.33.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36114646 (0x22710d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bd2d463ae15346d5edd7937b8bfa8e09b14376d
Validity
Not Before: Jan 1 05:55:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c87acae13844190eff9dcb8517c833373791533e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c7:36:89:7b:0b:0c:85:d2:7b:7e:f0:08:df:
66:27:64:76:f5:cd:20:82:e6:e6:37:37:0b:7d:33:
6a:cc:5e:80:4a:34:54:f0:af:93:7f:43:eb:6a:f8:
99:40:c4:47:05:a1:36:bf:18:61:e5:ac:fc:01:6d:
93:c1:77:a4:a3:65:67:78:92:f2:31:68:81:11:c8:
d4:39:c0:28:57:43:e6:52:86:cf:ad:10:e6:67:c7:
e6:a0:a4:b3:6f:67:62:3d:3a:aa:3a:be:83:87:7e:
55:89:2d:b5:77:19:bb:6a:d1:7e:96:9d:66:83:94:
7f:32:b2:e7:94:f1:3e:1e:68:38:2e:f9:14:13:f8:
97:1e:7c:45:7e:2c:d5:c2:b0:e3:92:99:48:0b:2a:
68:24:6d:85:bb:d1:be:5b:4f:05:be:d1:d6:47:9c:
27:7c:a8:72:21:95:23:75:3f:14:fa:ce:e5:84:c0:
85:38:ef:29:43:37:d7:ff:59:c5:1f:85:9e:e0:94:
86:51:4f:9d:ad:18:56:8f:5d:24:c0:45:9c:e0:4d:
e7:c7:61:9e:ce:19:94:1e:42:fd:1e:87:e7:34:18:
eb:7b:a7:d8:70:e3:89:b5:98:4d:7e:98:41:16:24:
6f:30:8a:c9:a8:be:0c:12:b2:b9:c8:77:a9:64:17:
f1:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:7A:CA:E1:38:44:19:0E:FF:9D:CB:85:17:C8:33:37:37:91:53:3E
X509v3 Authority Key Identifier:
keyid:1B:D2:D4:63:AE:15:34:6D:5E:DD:79:37:B8:BF:A8:E0:9B:14:37:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G9LUY64VNG1e3Xk3uL-o4JsUN20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/70c477-a8cd-4a72-b669-1f93c239a012/1/yHrK4ThEGQ7_ncuFF8gzNzeRUz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/70c477-a8cd-4a72-b669-1f93c239a012/1/G9LUY64VNG1e3Xk3uL-o4JsUN20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.61.32.0/23
Signature Algorithm: sha256WithRSAEncryption
80:01:bd:b5:a8:72:42:1b:ca:d8:83:e1:59:b4:46:99:57:c5:
b1:1e:3a:0f:17:36:1e:72:db:ab:09:85:04:c5:ad:f0:67:f8:
31:e3:65:60:79:e9:1d:b2:0a:fc:e2:b9:42:8e:ad:28:3b:5a:
5a:19:fb:db:eb:12:08:f9:54:b9:48:d8:27:cd:00:34:a2:1d:
ff:c4:74:a5:78:26:87:99:50:a6:2a:93:ba:89:51:6c:06:2c:
84:4d:58:c2:08:d7:77:21:9d:88:3e:15:e5:72:cf:88:f5:66:
bf:78:d0:39:84:14:85:82:fa:b8:c8:ce:ef:55:da:25:f7:39:
9d:84:66:e4:b1:a8:29:82:de:e3:71:a7:66:8d:16:52:26:cf:
c0:1c:c0:7a:88:85:f6:f9:a8:9f:bc:57:e9:f5:0a:43:b3:4c:
d6:77:50:e6:e2:ae:0d:43:77:4d:46:3f:49:66:fc:be:1e:b9:
71:ce:40:7a:30:57:20:37:78:5d:a6:d0:79:99:30:83:98:05:
68:81:fd:94:58:fc:db:3c:e6:2d:10:94:f5:a8:54:72:f5:3b:
c3:9d:16:26:bd:f3:50:d3:8b:50:8a:ad:28:d7:06:e6:94:d8:
f3:37:0a:9b:11:8e:26:e3:3d:2b:75:48:52:ac:b5:9a:d5:66:
75:5e:65:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:00 2023 by rpki-client on console-fra.rpki-client.org