Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/6b6d1f-5421-48b9-b7eb-da1fe9ebee8e/1/yLGw8W3m0VnQuzWmIDzDucbtccs.roa
File: yLGw8W3m0VnQuzWmIDzDucbtccs.roa (raw, json)
Hash identifier: tXExGFAzPnK5Ka/n9HDaqPKLb7LKInQU/VpZ4gxXr4I=
Subject key identifier: C8:B1:B0:F1:6D:E6:D1:59:D0:BB:35:A6:20:3C:C3:B9:C6:ED:71:CB
Certificate issuer: /CN=9b8151ae164a5b782b103de7f7c8a8948932aebf
Certificate serial: 18F8D79A
Authority key identifier: 9B:81:51:AE:16:4A:5B:78:2B:10:3D:E7:F7:C8:A8:94:89:32:AE:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m4FRrhZKW3grED3n98iolIkyrr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/6b6d1f-5421-48b9-b7eb-da1fe9ebee8e/1/yLGw8W3m0VnQuzWmIDzDucbtccs.roa
Signing time: Sat 01 Jan 2022 05:02:21 +0000
ROA not before: Sat 01 Jan 2022 05:02:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48926
IP address blocks: 37.143.112.0/21 maxlen: 21
185.75.116.0/22 maxlen: 22
178.248.248.0/21 maxlen: 21
94.142.232.0/21 maxlen: 21
2a03:a900::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 418961306 (0x18f8d79a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b8151ae164a5b782b103de7f7c8a8948932aebf
Validity
Not Before: Jan 1 05:02:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c8b1b0f16de6d159d0bb35a6203cc3b9c6ed71cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:23:15:0e:c9:8e:3d:39:91:c4:21:f4:0a:ee:
c4:5f:bc:d1:61:c7:0b:ab:64:ec:e9:2f:18:99:35:
ac:15:a5:c2:e0:92:81:b0:dc:a7:15:77:86:92:6b:
11:77:6b:8e:46:2b:75:bc:19:dc:30:b4:92:ae:ed:
3f:8c:16:12:97:6e:31:95:45:6b:5f:8c:d0:c4:28:
35:e1:45:14:18:44:0d:ee:6c:cf:9f:d6:84:98:21:
8f:cc:7e:3b:55:cb:0e:95:58:28:a4:c9:6d:36:1c:
8f:ba:02:2b:b2:0e:db:cf:44:b4:73:87:7c:c6:86:
1a:b3:8c:56:c2:6a:0b:87:d6:18:7b:34:50:b1:7a:
1d:2c:33:65:94:f2:85:0b:09:69:29:b4:5d:38:9b:
22:0b:63:a6:13:a2:e8:cf:d9:9b:70:1e:e8:3c:ab:
5c:b0:57:89:c9:6d:a2:7c:c0:4f:b9:5e:06:40:b2:
09:4b:11:04:a0:a2:72:42:69:db:10:96:57:08:cd:
e6:ea:12:08:20:86:59:f4:da:a1:f7:2d:ab:f0:bd:
37:dd:db:7b:f8:03:bc:c1:3e:54:e9:e8:ff:d8:c9:
d7:47:21:10:8b:ba:03:ef:51:21:ae:5a:91:a5:9a:
b1:94:cb:4c:fa:8d:8d:ae:38:dd:80:a2:41:7a:30:
82:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:B1:B0:F1:6D:E6:D1:59:D0:BB:35:A6:20:3C:C3:B9:C6:ED:71:CB
X509v3 Authority Key Identifier:
keyid:9B:81:51:AE:16:4A:5B:78:2B:10:3D:E7:F7:C8:A8:94:89:32:AE:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4FRrhZKW3grED3n98iolIkyrr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/6b6d1f-5421-48b9-b7eb-da1fe9ebee8e/1/yLGw8W3m0VnQuzWmIDzDucbtccs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/6b6d1f-5421-48b9-b7eb-da1fe9ebee8e/1/m4FRrhZKW3grED3n98iolIkyrr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.143.112.0/21
94.142.232.0/21
178.248.248.0/21
185.75.116.0/22
IPv6:
2a03:a900::/32
Signature Algorithm: sha256WithRSAEncryption
23:d7:f4:cb:66:1c:58:09:d7:05:c6:f5:5b:ad:16:8b:c6:f1:
ef:e5:9c:00:e0:e7:1c:e9:58:18:dd:1e:14:7a:e0:d1:e1:bb:
62:f4:7b:18:b9:ae:4e:38:db:1b:5c:56:bb:4d:48:77:d6:99:
41:82:a3:2c:22:69:2c:7a:85:fc:29:89:d3:f0:d4:a0:bf:bf:
0b:d4:1f:e4:bf:93:52:cb:35:07:56:22:dd:6f:22:4a:9b:4e:
43:35:0d:96:45:04:c9:9b:f9:0d:0f:e4:a9:29:80:62:75:2d:
be:28:4c:b6:3c:00:73:03:d3:d4:cd:a7:cd:f0:e0:44:50:26:
33:1b:a8:51:c2:66:5a:97:9c:7f:cd:6e:fd:84:68:3b:0a:48:
b4:69:15:34:a0:fb:53:75:8c:cc:a9:34:b8:87:86:bf:9e:8b:
0a:54:88:21:71:d7:07:54:d0:78:48:fc:5e:3d:02:c2:d9:04:
43:71:3b:e2:3e:48:dc:8a:2a:a1:a6:e2:f8:2d:28:da:c6:53:
94:19:99:bd:46:78:a3:ca:ac:bf:39:df:31:aa:12:11:28:15:
ed:3a:de:5f:b2:fb:87:92:3d:ea:d7:d9:a3:00:18:22:4d:2e:
b7:e9:06:1e:1d:35:ae:14:cf:b9:df:24:ea:b0:1c:f0:c6:a6:
bb:fc:f9:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:33 2023 by rpki-client on console-ams.rpki-client.org