Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/YTJrVYbRUGYGkv4qs9ssT0U_chE.roa
File: YTJrVYbRUGYGkv4qs9ssT0U_chE.roa (raw, json)
Hash identifier: QHS/eZhIXi1ZNiC4zET7cCXL58h29J+BmKso7M/TMoc=
Subject key identifier: 61:32:6B:55:86:D1:50:66:06:92:FE:2A:B3:DB:2C:4F:45:3F:72:11
Certificate issuer: /CN=3be2f0164b66a76795860b4ea3586fad563bac47
Certificate serial: 0E11073F
Authority key identifier: 3B:E2:F0:16:4B:66:A7:67:95:86:0B:4E:A3:58:6F:AD:56:3B:AC:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-LwFktmp2eVhgtOo1hvrVY7rEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/YTJrVYbRUGYGkv4qs9ssT0U_chE.roa
Signing time: Mon 14 Mar 2022 14:24:19 +0000
ROA not before: Mon 14 Mar 2022 14:24:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206264
IP address blocks: 5.183.209.0/24 maxlen: 24
185.191.125.0/24 maxlen: 24
185.191.124.0/24 maxlen: 24
89.249.49.0/24 maxlen: 24
185.191.126.0/24 maxlen: 24
185.191.127.0/24 maxlen: 24
45.139.122.0/24 maxlen: 24
2a0d:1000::/30 maxlen: 30
2a0d:1000::/29 maxlen: 29
2a0d:1004::/30 maxlen: 30
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 235996991 (0xe11073f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3be2f0164b66a76795860b4ea3586fad563bac47
Validity
Not Before: Mar 14 14:24:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=61326b5586d150660692fe2ab3db2c4f453f7211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a7:26:76:82:e2:a0:5a:7f:c7:7f:d3:a5:33:
15:f7:38:42:cf:18:dc:98:dd:a8:47:e6:fb:fa:7e:
62:f8:43:41:cb:2d:f0:c5:c8:69:3d:78:6a:a9:de:
c7:61:9c:15:fb:a4:c5:f6:8a:ed:89:1f:3d:91:93:
20:4d:56:76:6c:35:44:0d:d8:ac:b0:19:59:7d:e2:
70:7f:01:f4:5c:32:d6:02:ef:48:16:bb:bd:f3:bc:
46:bd:e0:0a:ec:af:c8:60:fd:ae:13:e1:59:d4:33:
9d:6f:2a:ec:ce:ba:9f:ea:50:87:ed:b1:42:5b:ca:
fe:b5:14:c8:c4:f9:cd:68:56:06:ab:d5:c4:69:69:
b6:08:fb:4d:3c:d9:66:98:29:47:8b:3d:40:d2:29:
81:d7:28:9a:39:67:b7:80:79:86:02:3f:d5:af:cb:
ca:49:15:19:8d:dc:47:6b:db:55:ae:f6:da:7e:28:
15:fb:20:31:c4:86:ff:85:a0:f5:4f:de:54:07:00:
6a:68:27:52:cb:38:d3:2b:38:b6:f9:8a:db:36:9e:
5f:6b:db:4b:ef:05:57:a7:dc:d5:6e:9f:21:14:97:
1f:41:32:70:11:05:7e:94:80:35:51:fb:3b:a8:d2:
0e:a6:b5:2c:87:e4:96:b8:2d:65:a3:55:5c:27:ee:
d9:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:32:6B:55:86:D1:50:66:06:92:FE:2A:B3:DB:2C:4F:45:3F:72:11
X509v3 Authority Key Identifier:
keyid:3B:E2:F0:16:4B:66:A7:67:95:86:0B:4E:A3:58:6F:AD:56:3B:AC:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-LwFktmp2eVhgtOo1hvrVY7rEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/YTJrVYbRUGYGkv4qs9ssT0U_chE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.209.0/24
45.139.122.0/24
89.249.49.0/24
185.191.124.0/22
IPv6:
2a0d:1000::/29
Signature Algorithm: sha256WithRSAEncryption
87:fe:52:53:4f:78:60:90:80:65:7c:a4:e9:c9:c9:4c:dc:b5:
d0:0f:4b:0f:16:f4:6b:bf:52:e9:f0:d4:67:09:6d:b3:56:f7:
f0:90:49:df:e7:49:5d:f1:47:29:ca:db:ac:7a:b7:a3:c4:e0:
68:74:a0:a5:27:b0:cf:ac:3e:e2:79:44:e2:6c:a7:77:1b:94:
2f:af:33:e7:5e:a4:5d:60:00:6f:95:fb:d4:eb:6a:6f:1d:48:
1d:77:e3:ad:47:43:8f:1b:0c:11:6e:7f:a4:7b:e9:55:37:15:
8b:42:0a:3e:b4:0d:e5:05:d4:68:ec:df:23:da:09:b6:1c:76:
86:f9:53:94:65:a8:82:cd:11:f9:3c:5d:ad:5e:89:07:0a:75:
8f:56:2e:ac:c9:70:df:55:06:ae:e1:78:db:e8:3c:e6:ec:a8:
56:a5:58:e8:34:a9:3a:53:0c:9c:5c:94:f0:a2:b7:de:97:74:
e5:20:31:16:67:50:04:c0:49:c7:85:e7:f7:ff:06:8d:2e:44:
62:a7:71:1d:04:e7:ff:98:6a:b3:d6:ec:c3:42:80:2e:33:59:
96:51:87:77:57:02:bf:28:e9:ea:e6:8c:af:26:06:ec:bd:91:
2c:6f:fb:d1:54:dc:84:1f:0c:f6:8d:cb:32:14:c6:2e:d3:12:
99:8c:8f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:14 2023 by rpki-client on console-ams.rpki-client.org