Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/05a1ca-33c5-4aef-9c9a-f50fd99373ec/1/YwUBofzpdb2XlxNWqarvpI2CjsI.roa
File: YwUBofzpdb2XlxNWqarvpI2CjsI.roa (raw, json)
Hash identifier: EPFsIwDmraVbFgkdcj2nZNJIHCQ0iL3n0sDT4PMmeWg=
Subject key identifier: 63:05:01:A1:FC:E9:75:BD:97:97:13:56:A9:AA:EF:A4:8D:82:8E:C2
Certificate issuer: /CN=7e5555f1a2cee89b7134656086f054d796353c1e
Certificate serial: 1533F480
Authority key identifier: 7E:55:55:F1:A2:CE:E8:9B:71:34:65:60:86:F0:54:D7:96:35:3C:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flVV8aLO6JtxNGVghvBU15Y1PB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/05a1ca-33c5-4aef-9c9a-f50fd99373ec/1/YwUBofzpdb2XlxNWqarvpI2CjsI.roa
Signing time: Sat 01 Jan 2022 12:56:15 +0000
ROA not before: Sat 01 Jan 2022 12:56:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12213
IP address blocks: 83.142.64.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 355726464 (0x1533f480)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e5555f1a2cee89b7134656086f054d796353c1e
Validity
Not Before: Jan 1 12:56:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=630501a1fce975bd97971356a9aaefa48d828ec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b6:11:97:9b:0e:be:cf:89:1f:0d:d8:07:f8:
0e:0c:24:6a:5d:fe:7c:06:49:4d:2a:a7:d5:6b:d0:
f1:02:9f:ac:65:93:99:b8:73:33:2f:32:d4:f7:37:
a9:ef:35:b1:26:80:15:af:26:01:5f:76:c5:ba:ae:
d0:b7:ea:09:2a:0e:53:67:45:bf:21:de:c8:01:7d:
a5:b3:e4:71:b1:67:a3:a0:4f:54:41:cc:dc:2a:06:
f7:a3:d1:12:ed:da:8c:a2:c3:67:9e:aa:54:81:19:
4b:10:96:58:2a:6e:e7:83:9e:34:1b:2f:5c:67:c3:
2f:d4:cb:c5:68:48:d6:2a:22:5c:27:70:09:39:db:
81:dc:ef:d3:b9:01:0c:c6:69:60:02:af:04:e0:4c:
ef:2e:5e:66:f6:de:65:a7:95:66:20:51:a8:dc:20:
0f:e8:00:6f:65:eb:36:ad:db:16:2f:3b:44:3f:9f:
bb:a9:9f:71:98:95:64:72:8f:b4:eb:c0:7d:5d:d9:
bc:e2:0e:28:c9:96:91:3e:07:4c:93:8e:7f:6c:f4:
8a:b8:64:99:ee:4e:81:69:90:ca:29:3a:18:39:07:
2c:60:c6:cc:9c:fe:18:46:00:65:5c:a1:56:e3:a8:
a2:b4:28:58:93:4f:b7:f5:cc:3b:02:8b:73:0c:7b:
62:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:05:01:A1:FC:E9:75:BD:97:97:13:56:A9:AA:EF:A4:8D:82:8E:C2
X509v3 Authority Key Identifier:
keyid:7E:55:55:F1:A2:CE:E8:9B:71:34:65:60:86:F0:54:D7:96:35:3C:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flVV8aLO6JtxNGVghvBU15Y1PB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/05a1ca-33c5-4aef-9c9a-f50fd99373ec/1/YwUBofzpdb2XlxNWqarvpI2CjsI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/05a1ca-33c5-4aef-9c9a-f50fd99373ec/1/flVV8aLO6JtxNGVghvBU15Y1PB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.142.64.0/21
Signature Algorithm: sha256WithRSAEncryption
31:95:4e:12:a4:0b:4c:4f:04:18:6b:64:8a:d9:d0:ac:93:28:
70:99:47:56:8b:aa:15:53:de:67:bb:61:31:6c:51:f3:f5:bf:
f4:49:95:b9:d6:6a:87:65:aa:c1:de:83:d8:53:6e:15:22:0a:
5f:1c:19:33:4c:a4:69:46:0c:a4:7a:80:8a:b6:e0:47:c1:4c:
20:43:18:79:4a:0c:2e:90:0f:27:bd:2d:67:2d:62:73:ac:27:
24:d1:97:55:f3:eb:7b:0d:2b:54:95:db:cb:b4:45:bb:d2:ba:
9c:23:a2:83:5b:6b:c1:2a:2c:94:0c:a3:df:18:fe:63:1c:5a:
27:bd:2e:10:f5:8f:c7:d4:d0:af:17:85:ea:f7:77:b2:48:22:
e5:38:96:7f:bf:69:f5:1d:5e:04:60:d8:28:ff:06:83:f1:cf:
df:97:05:9b:28:a3:85:e0:b4:b9:07:3d:1b:4d:9e:3f:00:a0:
7a:11:1d:d6:36:5c:d1:d9:5d:94:18:c8:db:7b:d5:e6:62:db:
0d:24:30:4e:de:a2:d8:63:e4:f8:89:06:72:4c:2a:de:05:b3:
97:78:87:34:79:5d:b4:02:f4:90:a7:9b:05:5e:52:c0:3f:52:
d1:a1:c1:2a:f0:e9:6c:1b:4b:ba:63:44:08:a6:54:27:98:12:
ab:20:03:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:49 2024 by rpki-client on console-ams.rpki-client.org