Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/yevTRoyBgNQ4HAm9HO_iTz4QXx4.roa
File: yevTRoyBgNQ4HAm9HO_iTz4QXx4.roa (raw, json)
Hash identifier: 3j8JLak/+Zy3lLaVftZq++kqEe4bp3ih7lrPbHPQ7dM=
Subject key identifier: C9:EB:D3:46:8C:81:80:D4:38:1C:09:BD:1C:EF:E2:4F:3E:10:5F:1E
Certificate issuer: /CN=c285a1474e38627e301a551be34efa4582a5cf39
Certificate serial: 1765C5A8
Authority key identifier: C2:85:A1:47:4E:38:62:7E:30:1A:55:1B:E3:4E:FA:45:82:A5:CF:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/woWhR044Yn4wGlUb4076RYKlzzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/yevTRoyBgNQ4HAm9HO_iTz4QXx4.roa
Signing time: Sat 01 Jan 2022 06:02:50 +0000
ROA not before: Sat 01 Jan 2022 06:02:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201822
IP address blocks: 185.62.160.0/23 maxlen: 23
81.173.42.0/24 maxlen: 24
2a03:521::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 392545704 (0x1765c5a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c285a1474e38627e301a551be34efa4582a5cf39
Validity
Not Before: Jan 1 06:02:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c9ebd3468c8180d4381c09bd1cefe24f3e105f1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:34:74:0b:c4:a3:9c:6b:63:c6:3a:ce:86:9a:
25:80:01:5c:bb:75:6f:0a:6d:9c:fe:d5:9d:0c:e1:
a9:80:91:67:4c:53:eb:18:1b:46:ff:e8:c3:15:a5:
c8:b2:b2:d7:9c:f9:2b:72:f5:1c:66:cd:b5:f2:54:
7a:6a:f8:e4:a6:1f:72:4f:bf:0b:a0:32:fa:56:b2:
3c:ee:d9:e0:a4:71:b2:00:9b:ad:cb:99:cf:79:86:
25:f2:47:0e:65:d4:9d:3d:b8:27:5b:8d:86:df:13:
0c:7b:2d:c0:c1:5b:26:d8:ed:95:99:d0:3b:49:41:
3a:89:06:23:08:6c:76:fb:a9:e5:0d:6f:0f:65:1f:
7c:d0:df:86:bc:21:f2:7b:69:34:e3:40:cd:94:67:
81:fe:90:b7:6a:11:98:b3:17:b2:8f:24:89:8a:7a:
51:73:27:39:9f:73:1a:5d:c3:e3:35:f1:4d:af:72:
05:17:17:ea:48:f8:a4:3b:b9:c5:cf:75:12:80:5d:
82:4a:e7:97:89:c5:47:f8:08:92:08:4d:75:12:11:
a8:52:bb:fa:96:44:56:90:cf:e9:22:79:0b:a4:77:
86:54:b0:09:70:99:37:be:cc:91:c5:f1:fd:41:2d:
0a:46:41:51:6d:05:5d:d6:f2:fd:f9:01:58:2d:c1:
0b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:EB:D3:46:8C:81:80:D4:38:1C:09:BD:1C:EF:E2:4F:3E:10:5F:1E
X509v3 Authority Key Identifier:
keyid:C2:85:A1:47:4E:38:62:7E:30:1A:55:1B:E3:4E:FA:45:82:A5:CF:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/woWhR044Yn4wGlUb4076RYKlzzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/yevTRoyBgNQ4HAm9HO_iTz4QXx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/woWhR044Yn4wGlUb4076RYKlzzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.173.42.0/24
185.62.160.0/23
IPv6:
2a03:521::/32
Signature Algorithm: sha256WithRSAEncryption
7e:17:e5:46:b8:c4:ac:5e:c5:be:7e:99:15:df:13:f7:80:32:
76:3a:a2:63:ba:13:b9:53:e6:af:ec:12:47:a8:5d:77:3d:f2:
f9:b1:54:67:44:d5:68:80:77:16:6f:65:f3:1f:1e:75:32:fa:
b8:78:77:9e:00:40:c4:40:da:22:ea:d7:de:f0:89:61:9e:c9:
29:d0:ce:0f:3b:39:53:e9:4b:7a:9c:bc:40:b9:fa:7f:07:78:
7f:50:db:d6:06:81:0a:30:63:df:ba:63:47:70:a6:c0:64:ed:
cd:26:d2:b2:45:35:8e:9d:98:91:e6:53:07:30:20:51:8f:98:
e2:f1:d2:a5:2e:bc:d0:ce:b9:9e:8a:46:f7:1c:bd:fd:bf:46:
9b:c6:88:10:55:e4:6a:33:0f:03:cf:4f:fa:96:41:5c:03:65:
3d:e4:46:bb:60:71:74:28:e1:ab:ee:53:ca:d0:20:78:67:f3:
28:ef:df:c3:3a:c6:61:69:68:bf:72:bf:24:05:f0:57:05:4c:
4f:ef:fe:93:e3:74:57:83:d2:e5:aa:ac:24:19:ae:32:69:de:
35:43:f5:bf:5d:00:81:e9:df:dc:13:c7:01:49:46:9f:cb:7b:
ff:f2:a9:55:d1:6a:50:e6:2a:28:83:53:8c:d9:8e:5d:ef:25:
56:9f:a7:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:48 2024 by rpki-client on console-ams.rpki-client.org