Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/yKqRTt-mVvb3isz4uC4hUEOWabg.roa
File: yKqRTt-mVvb3isz4uC4hUEOWabg.roa (raw, json)
Hash identifier: dQ3prVfF2fhDNHHpaoheMkqB3+yhTiwaxnqrNw4PtLg=
Subject key identifier: C8:AA:91:4E:DF:A6:56:F6:F7:8A:CC:F8:B8:2E:21:50:43:96:69:B8
Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Certificate serial: 1B6E233B
Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/yKqRTt-mVvb3isz4uC4hUEOWabg.roa
Signing time: Sat 01 Jan 2022 10:02:42 +0000
ROA not before: Sat 01 Jan 2022 10:02:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51660
IP address blocks: 84.1.44.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 460202811 (0x1b6e233b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Validity
Not Before: Jan 1 10:02:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c8aa914edfa656f6f78accf8b82e2150439669b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a4:a6:e0:93:12:4e:ce:e6:33:63:01:55:bb:
48:c9:2f:4d:3e:d9:26:32:7b:9c:1e:20:81:92:51:
fa:1f:24:27:6f:88:a8:d8:4f:73:34:a6:8c:51:0a:
51:3f:fa:84:ba:06:ae:c8:75:33:85:9b:7f:68:8d:
b9:87:2d:d1:8c:b0:f8:11:40:0f:1a:b0:36:15:3e:
fa:ec:4c:c7:80:da:e3:65:eb:af:8b:8f:13:06:26:
17:9b:48:1c:5a:68:7c:a5:83:46:2a:80:12:cb:a7:
11:3f:0b:a0:65:d8:24:28:c8:1c:56:c4:5f:fe:ef:
aa:03:18:ff:93:30:d4:81:07:1e:13:90:27:84:85:
d3:ba:2c:1f:d2:80:45:d4:66:eb:5d:8c:8c:55:6b:
cd:8a:f1:75:00:bc:97:7f:19:fb:d0:7a:d0:12:b6:
06:b2:0d:e7:9e:c7:33:97:d7:00:5a:69:d7:5c:bc:
f4:4f:0a:78:09:f5:b6:43:17:18:93:02:8b:d3:57:
67:37:26:8d:4c:65:10:85:d7:d9:e7:e1:d7:1a:3d:
d8:64:d3:f5:a0:70:d7:fd:ed:2b:ca:e0:43:ac:53:
b8:cc:f8:f6:25:aa:2b:23:b1:14:b3:86:c5:f2:38:
65:5e:5c:d4:39:c6:4b:1c:a4:dd:2b:32:e8:68:34:
d4:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:AA:91:4E:DF:A6:56:F6:F7:8A:CC:F8:B8:2E:21:50:43:96:69:B8
X509v3 Authority Key Identifier:
keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/yKqRTt-mVvb3isz4uC4hUEOWabg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.1.44.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:79:fb:76:ab:aa:0a:7e:60:71:0e:2b:d2:98:f3:e1:c9:3b:
21:96:86:41:b3:f9:4e:0d:25:56:65:c6:3f:82:12:c4:51:a2:
79:fa:9b:c7:dc:66:69:e3:2a:69:2e:43:9a:ac:ed:ba:5b:dd:
2d:bd:5e:45:1a:9f:33:86:00:01:69:e2:17:ca:49:b2:fb:d3:
a4:cc:0a:aa:d1:82:99:04:1a:3f:8b:06:d9:2c:da:71:83:0b:
d2:4a:df:79:46:a1:e3:f7:97:86:d3:6a:69:ee:b7:c6:ee:4f:
73:12:af:c9:4a:f1:5f:74:3e:89:a8:6e:b5:fe:5c:cd:1f:36:
cd:e3:63:fc:1c:19:f8:11:49:c8:5f:b7:78:f9:36:d2:23:4d:
70:a5:20:29:32:4a:c0:39:7b:ae:bf:2c:0a:1d:5b:b7:1f:11:
ec:32:8a:07:cd:73:4a:10:5d:57:07:2c:20:a7:8b:3c:aa:4c:
4f:92:e8:a3:a5:bb:e0:27:7b:25:54:46:fd:40:f0:db:fc:a3:
b5:b1:fb:f2:f7:a7:04:0e:f5:dd:b1:0b:2e:32:5e:cc:5b:4f:
fc:03:9f:85:f9:84:66:cc:b7:78:7c:47:87:06:fe:d9:ed:e7:
4b:96:22:95:4e:f8:22:ff:0b:d5:73:27:a1:c0:cc:4e:aa:41:
ab:29:26:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:47 2024 by rpki-client on console-fra.rpki-client.org