Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/a65522-f7c5-487b-b7b8-2e4614141aa4/1/yG-f5nEQMKMaus63A5JQd9OI6y8.roa
File: yG-f5nEQMKMaus63A5JQd9OI6y8.roa (raw, json)
Hash identifier: Xld3ePzLsTOgPqTXTjU9fPmhlIXGLsh9r2d3KCCrwe8=
Subject key identifier: C8:6F:9F:E6:71:10:30:A3:1A:BA:CE:B7:03:92:50:77:D3:88:EB:2F
Certificate issuer: /CN=7f188adab5b552081ecac821c9b090394873b315
Certificate serial: 01BF511F
Authority key identifier: 7F:18:8A:DA:B5:B5:52:08:1E:CA:C8:21:C9:B0:90:39:48:73:B3:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fxiK2rW1UggeysghybCQOUhzsxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/a65522-f7c5-487b-b7b8-2e4614141aa4/1/yG-f5nEQMKMaus63A5JQd9OI6y8.roa
Signing time: Sat 01 Jan 2022 05:51:41 +0000
ROA not before: Sat 01 Jan 2022 05:51:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211354
IP address blocks: 185.194.14.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29315359 (0x1bf511f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f188adab5b552081ecac821c9b090394873b315
Validity
Not Before: Jan 1 05:51:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c86f9fe6711030a31abaceb703925077d388eb2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:da:c5:57:2e:0e:7c:54:77:5d:71:11:9c:a4:
c6:db:ee:d9:15:86:b8:fa:44:8f:47:7b:18:3a:ce:
82:6b:7f:57:19:3c:d7:4e:d5:6a:30:6c:32:d1:b1:
3e:b6:2a:f8:0d:fb:60:90:0c:0f:be:fa:25:ff:e3:
06:66:38:d3:84:54:25:42:96:6f:1f:9e:9d:30:cc:
3f:7a:74:3e:90:5f:24:0d:02:f6:5b:fc:d3:80:38:
2f:7f:18:e3:7b:40:9e:9b:a9:f9:01:33:bc:9f:5c:
c5:9f:5b:21:81:ce:18:c8:b5:63:11:2a:f3:b8:65:
99:1c:c4:c4:1d:24:eb:58:ef:5a:1b:07:d5:1c:3c:
fe:a1:a9:b5:d5:58:0f:16:c5:6a:ed:97:1f:03:3b:
d0:c6:f2:55:b1:28:07:b9:fd:9e:35:1d:34:ce:d3:
8e:d2:f5:39:2e:87:d1:76:09:74:c3:95:9a:65:5e:
90:99:5a:39:b9:b5:89:ff:e1:01:45:57:b8:cc:fc:
bf:dd:71:12:ce:c2:f8:1c:e3:37:4b:87:84:c7:86:
d6:f6:1f:f4:ae:39:32:c8:5e:a5:c0:9b:ff:73:2c:
14:c4:b4:77:fb:7d:fa:ed:ea:bb:d9:ee:aa:68:c9:
f1:e7:08:34:28:f3:04:ff:9e:fd:52:29:55:dc:18:
2f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:6F:9F:E6:71:10:30:A3:1A:BA:CE:B7:03:92:50:77:D3:88:EB:2F
X509v3 Authority Key Identifier:
keyid:7F:18:8A:DA:B5:B5:52:08:1E:CA:C8:21:C9:B0:90:39:48:73:B3:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxiK2rW1UggeysghybCQOUhzsxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a65522-f7c5-487b-b7b8-2e4614141aa4/1/yG-f5nEQMKMaus63A5JQd9OI6y8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a65522-f7c5-487b-b7b8-2e4614141aa4/1/fxiK2rW1UggeysghybCQOUhzsxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.14.0/24
Signature Algorithm: sha256WithRSAEncryption
86:7c:82:b8:2f:be:4b:5d:cb:ae:11:aa:bb:0a:d3:04:95:36:
91:5e:32:1c:18:3d:56:1c:6c:c6:33:ac:4c:09:b5:a9:37:d0:
31:08:62:a3:0d:1b:ac:5b:44:b8:88:8f:4c:ce:c6:27:08:2a:
c1:eb:07:c8:95:88:b9:83:36:b0:c2:fc:bf:7d:2e:9a:57:93:
e4:eb:bb:1d:ef:4a:23:08:9e:41:db:a1:c9:fb:f5:7b:dd:b4:
23:16:90:0e:62:38:66:2d:82:53:01:bb:6d:7c:be:a1:db:1f:
74:f6:65:7d:22:0c:08:85:78:27:d8:93:e1:2d:3a:b9:e8:9b:
d6:51:c5:ae:2d:0a:78:aa:e8:db:bd:f9:4d:2e:9f:3a:7e:89:
87:b7:48:27:52:86:07:b3:a7:2a:59:f5:36:5b:26:fb:dd:8a:
db:8f:53:fa:c5:de:9a:36:5c:bb:b2:bc:9e:55:56:48:8b:e9:
7f:ea:60:a2:d6:fb:3f:07:76:8a:7b:32:a3:0f:f0:74:5a:3f:
b1:a6:4a:26:c1:7b:0f:83:92:b4:e1:4b:b5:c6:5d:60:12:2c:
77:b4:63:3c:af:6e:ca:0f:94:0a:49:60:6d:e4:4e:2c:ac:18:
8d:85:38:a0:3c:35:0b:11:cc:02:ae:58:2d:08:4f:9f:e9:56:
24:8b:9e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:51 2024 by rpki-client on console-ams.rpki-client.org