Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/42d821-74af-4ced-94ea-027b58e6fdc5/1/yYCHzGwfy5Lk8EB50vWvqCi6R2w.roa
File: yYCHzGwfy5Lk8EB50vWvqCi6R2w.roa (raw, json)
Hash identifier: bnSGSUeLf77wn2QTsgeLjf9Q9tyOLh2itTqPqmp7QF0=
Subject key identifier: C9:80:87:CC:6C:1F:CB:92:E4:F0:40:79:D2:F5:AF:A8:28:BA:47:6C
Certificate issuer: /CN=bef2158a0f2a42617a821a0b4fcc9c9a93f4246d
Certificate serial: 07C87E98
Authority key identifier: BE:F2:15:8A:0F:2A:42:61:7A:82:1A:0B:4F:CC:9C:9A:93:F4:24:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vvIVig8qQmF6ghoLT8ycmpP0JG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/42d821-74af-4ced-94ea-027b58e6fdc5/1/yYCHzGwfy5Lk8EB50vWvqCi6R2w.roa
Signing time: Sat 01 Jan 2022 01:54:54 +0000
ROA not before: Sat 01 Jan 2022 01:54:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 185.255.32.0/23 maxlen: 24
185.255.34.0/23 maxlen: 24
185.68.58.0/24 maxlen: 24
185.68.59.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 130580120 (0x7c87e98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bef2158a0f2a42617a821a0b4fcc9c9a93f4246d
Validity
Not Before: Jan 1 01:54:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c98087cc6c1fcb92e4f04079d2f5afa828ba476c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:08:2c:45:11:1f:3c:a2:81:0d:9e:b6:eb:8a:
58:95:20:38:e2:86:39:29:d7:e7:81:9d:ab:f1:22:
34:9a:80:15:3b:38:f0:e4:a4:68:fa:db:1e:cd:97:
1e:84:52:69:e6:db:bf:9d:70:92:d8:38:ef:76:e5:
fc:55:2b:43:0f:4f:b5:57:c9:3f:2f:28:98:c0:ce:
f7:8d:79:ed:70:56:b4:2d:9c:23:14:ad:16:98:5d:
00:49:d8:30:53:18:38:5b:6a:b5:40:04:51:4c:43:
89:f1:4f:b9:91:89:fd:91:b2:21:7b:fa:6a:66:c0:
3a:47:13:4b:eb:2f:71:db:85:c3:4d:bf:7c:47:e4:
9b:62:36:69:02:55:84:2b:7a:cc:3b:ad:aa:26:37:
b1:9a:cc:65:fb:54:22:5c:e9:a5:c4:90:92:f4:50:
6a:01:6a:d1:82:ef:0b:1d:a2:ff:07:ad:0f:a7:e2:
91:f7:d7:a4:84:7b:14:4f:3a:6f:48:04:36:ac:49:
0e:e1:28:6a:d6:da:50:47:c2:4d:d1:dc:e4:dc:ad:
c6:07:c3:2f:ba:93:c1:e7:16:17:fa:90:76:e5:49:
fd:14:1b:df:06:99:1f:1b:94:41:8d:55:d0:6a:37:
8d:22:cf:db:cd:1d:53:40:8f:ed:d2:aa:e0:36:5d:
35:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:80:87:CC:6C:1F:CB:92:E4:F0:40:79:D2:F5:AF:A8:28:BA:47:6C
X509v3 Authority Key Identifier:
keyid:BE:F2:15:8A:0F:2A:42:61:7A:82:1A:0B:4F:CC:9C:9A:93:F4:24:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vvIVig8qQmF6ghoLT8ycmpP0JG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/42d821-74af-4ced-94ea-027b58e6fdc5/1/yYCHzGwfy5Lk8EB50vWvqCi6R2w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/42d821-74af-4ced-94ea-027b58e6fdc5/1/vvIVig8qQmF6ghoLT8ycmpP0JG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.68.58.0/23
185.255.32.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:0c:0c:3d:e8:2c:e0:82:0c:36:30:6b:d6:0e:42:8f:36:d8:
a7:42:e5:2e:53:8e:72:b2:69:37:9c:3e:30:64:a5:a1:2d:0d:
0b:c9:01:67:c9:9f:4b:a1:36:77:6a:3b:b6:bb:d6:a9:73:ec:
fb:06:e4:9c:ad:3b:34:63:30:fa:a6:c3:87:33:84:82:af:fd:
39:ca:e0:7f:66:8c:cf:01:00:f6:df:2b:1a:55:1c:8f:f3:92:
6b:d4:36:ba:ff:41:92:fb:aa:bc:e4:c4:ed:1f:c8:67:0e:44:
39:69:63:ab:ff:b4:01:1a:d1:4c:fd:89:aa:5d:cf:61:b6:07:
1a:a9:b7:91:53:6d:a5:eb:0b:54:a6:63:dd:43:a2:95:26:0b:
53:f7:8b:d7:0e:9e:a3:15:fe:dc:df:8d:65:6d:16:a8:85:55:
0e:43:ac:a8:0f:ca:15:a0:a8:f8:c5:e6:84:84:d5:d7:52:a3:
8d:42:53:5f:1e:ae:c0:9e:24:e6:22:27:0a:39:c0:ea:01:da:
94:f7:4a:9d:c2:4f:c1:c2:ee:9e:b9:a1:c8:b6:ec:35:ac:c2:
11:19:ca:62:5e:8b:12:3a:dd:f5:c1:7f:a1:34:a4:dc:93:6f:
f9:0a:59:bb:48:56:73:5e:75:09:b4:74:7c:b9:4d:3c:65:a7:
c3:fd:2d:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:57 2024 by rpki-client on console-ams.rpki-client.org