Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/yIIipuwCCB22KdGPFE0LY7wpwKQ.roa
File: yIIipuwCCB22KdGPFE0LY7wpwKQ.roa (raw, json)
Hash identifier: fScp/jUD4Zsv85mZ0MUB9QYgo0EDXpbo0jfutPb1GrY=
Subject key identifier: C8:82:22:A6:EC:02:08:1D:B6:29:D1:8F:14:4D:0B:63:BC:29:C0:A4
Certificate issuer: /CN=c2d21e804ab7713ad7877dde603aa7824b31983c
Certificate serial: FD30A1
Authority key identifier: C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/yIIipuwCCB22KdGPFE0LY7wpwKQ.roa
Signing time: Sat 01 Jan 2022 13:01:00 +0000
ROA not before: Sat 01 Jan 2022 13:01:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 54103
IP address blocks: 79.143.131.0/24 maxlen: 24
79.143.129.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16593057 (0xfd30a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2d21e804ab7713ad7877dde603aa7824b31983c
Validity
Not Before: Jan 1 13:01:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c88222a6ec02081db629d18f144d0b63bc29c0a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6b:11:d4:7e:1c:57:28:73:d0:c7:5e:48:ca:
75:07:e4:a8:47:f3:af:d3:b3:95:29:be:e2:f4:78:
b6:b6:cf:f3:53:9f:0f:c1:67:21:ca:5c:7e:9c:8e:
3d:8b:b5:8b:f6:5e:09:79:7a:ba:88:74:ce:dd:1a:
15:03:74:85:0d:59:c7:f3:66:5f:6d:93:f9:9f:af:
32:23:ef:fe:de:90:00:92:52:a3:86:e7:e6:73:51:
81:66:a8:7f:eb:e0:1f:38:e0:0c:a5:92:2e:50:d6:
50:75:6f:63:9c:22:51:12:ae:c8:ee:e0:10:db:f0:
5e:26:4c:35:db:02:c8:eb:0c:07:24:df:03:09:ac:
12:d5:ad:0f:ad:6f:55:bd:c9:70:7c:c1:f3:a0:7d:
15:0c:60:45:b8:71:41:75:ce:27:d2:08:4a:ea:a6:
d3:4b:29:1e:94:ed:bc:10:0f:03:99:74:22:7e:f6:
4c:4c:2c:ed:c1:59:8d:66:67:7c:a9:fd:39:fa:3a:
25:9f:d2:c7:ca:70:46:79:15:2c:36:ba:f3:8a:bb:
3f:8b:aa:a6:e6:c7:74:f0:04:d8:ca:16:0d:59:71:
83:62:63:61:36:cb:d6:22:b5:13:21:12:0c:cf:9e:
2c:ba:9c:9e:df:12:e6:0c:f8:45:55:8b:8c:05:f8:
07:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:82:22:A6:EC:02:08:1D:B6:29:D1:8F:14:4D:0B:63:BC:29:C0:A4
X509v3 Authority Key Identifier:
keyid:C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/yIIipuwCCB22KdGPFE0LY7wpwKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.143.129.0/24
79.143.131.0/24
Signature Algorithm: sha256WithRSAEncryption
08:15:c4:71:8d:a3:7f:34:df:40:21:5a:45:09:56:a4:12:2d:
25:e0:a4:83:25:22:62:3f:31:4e:9e:64:00:75:82:07:bc:e9:
e6:fb:b5:1e:cd:7e:c9:ac:57:40:bc:07:c0:77:53:0f:d9:b2:
8a:14:61:a6:e8:9b:4a:f4:39:23:7c:16:0e:4a:58:fe:3b:dc:
60:e2:67:70:a0:70:f1:61:a5:8a:a2:35:99:d8:f0:4b:4a:2f:
9d:2e:df:31:33:d3:30:63:f5:d9:88:58:d5:4e:dc:89:4c:4a:
e0:1b:fb:7c:b7:52:46:05:89:df:24:b5:cb:79:50:47:2e:60:
b1:25:67:77:28:63:30:dc:7c:e4:e4:d6:92:45:8a:cd:0f:d2:
c5:4c:3a:30:bb:95:e3:b3:85:e5:f7:b8:a4:54:38:1a:ff:5b:
cf:73:24:ea:d5:43:79:72:4e:a2:e3:9c:d9:62:28:a9:34:b3:
b0:db:22:dd:13:8f:57:3c:9f:55:b2:e6:0b:e4:3f:fe:3b:76:
93:20:b2:ce:f1:18:df:11:e5:38:3e:f6:18:70:a9:55:95:58:
17:64:e5:42:3a:26:06:2f:3d:16:98:d7:b6:e2:ca:eb:23:6d:
c9:3a:9a:74:08:85:7f:4f:1f:a2:7b:1e:4b:97:f6:54:b5:6c:
35:17:9f:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:17 2023 by rpki-client on console-fra.rpki-client.org