Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/ya5VOdvcIlAWyLEPTpv4H3PipG4.roa
File: ya5VOdvcIlAWyLEPTpv4H3PipG4.roa (raw, json)
Hash identifier: 9ag+AZQWvOXVOlf5qIgcyFtFRJmF27sEg7MVrOFKLA8=
Subject key identifier: C9:AE:55:39:DB:DC:22:50:16:C8:B1:0F:4E:9B:F8:1F:73:E2:A4:6E
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 018560402AAFB579DFCB212FCAB43FC4DC88
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/ya5VOdvcIlAWyLEPTpv4H3PipG4.roa
Signing time: Thu 29 Dec 2022 23:38:15 +0000
ROA not before: Thu 29 Dec 2022 23:38:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210464
IP address blocks: 185.197.133.0/24 maxlen: 32
2a06:e881:8707::/48 maxlen: 128
2a06:e881:870c::/48 maxlen: 128
2a06:e881:870d::/48 maxlen: 128
2a06:e881:8702::/48 maxlen: 128
2a06:e881:8703::/48 maxlen: 128
2a06:e881:8708::/48 maxlen: 128
2a06:e881:8709::/48 maxlen: 128
2a06:e881:870e::/48 maxlen: 128
2a06:e881:870f::/48 maxlen: 128
2a06:e881:8704::/48 maxlen: 128
2a06:e881:8705::/48 maxlen: 128
2a06:e881:870a::/48 maxlen: 128
2a06:e881:870b::/48 maxlen: 128
2a06:e881:8700::/48 maxlen: 128
2a06:e881:8701::/48 maxlen: 128
2a06:e881:8706::/48 maxlen: 128
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:60:40:2a:af:b5:79:df:cb:21:2f:ca:b4:3f:c4:dc:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Dec 29 23:38:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c9ae5539dbdc225016c8b10f4e9bf81f73e2a46e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:59:a7:ef:1a:45:7a:1d:65:b4:e5:ab:7b:f3:
33:f6:61:ed:58:aa:a7:9d:e0:12:6d:55:54:7c:5c:
b7:18:82:1c:fc:66:4e:c7:06:6c:cf:4f:72:eb:a4:
3e:49:72:05:19:99:84:5f:ae:0b:f9:7f:a6:ce:89:
52:b2:0b:ad:45:49:5b:e4:7f:95:b7:00:ea:a7:44:
53:40:61:5d:87:6a:56:8a:d2:2b:d8:c9:23:51:53:
d3:b0:8d:85:c5:c1:20:2e:8f:42:ae:45:c8:a5:f1:
2a:5d:dd:02:02:35:25:56:c0:66:9a:36:b7:e7:04:
12:11:11:13:05:c7:69:d0:03:d9:ce:46:81:a9:18:
34:28:88:97:24:bb:eb:6e:b1:e6:07:11:37:4c:06:
3c:17:63:3f:d9:26:5d:61:22:a0:3a:df:bf:1d:54:
38:c9:3d:03:58:48:ac:fc:99:0b:6f:a0:a6:51:e9:
ca:51:d6:6f:7d:21:ea:ba:56:71:30:f4:e0:15:b9:
ec:35:62:0f:c5:0a:f7:0e:98:8a:a0:44:ce:5e:88:
7e:b4:03:cc:02:af:f7:bd:02:90:56:cf:60:5b:5a:
7f:a9:d9:8c:f7:49:34:24:30:3a:4c:24:f5:36:64:
43:93:64:b1:ac:0e:92:fb:c2:2d:51:ac:c3:0d:a3:
93:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:AE:55:39:DB:DC:22:50:16:C8:B1:0F:4E:9B:F8:1F:73:E2:A4:6E
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/ya5VOdvcIlAWyLEPTpv4H3PipG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.197.133.0/24
IPv6:
2a06:e881:8700::/44
Signature Algorithm: sha256WithRSAEncryption
92:c8:79:dd:07:4a:d5:2e:bf:9a:22:90:f3:0d:1c:35:ae:ce:
f1:53:47:5e:2f:9d:85:df:b5:48:6b:fc:e2:05:ee:64:a0:8b:
5d:dc:34:e4:7c:e9:96:0c:3a:2c:e0:a9:47:0f:f8:92:3c:e6:
be:3a:5a:4d:90:8c:d7:4d:09:63:8d:ad:a7:69:be:03:1e:32:
e1:a3:28:e8:19:11:2e:86:75:9e:09:8b:bc:35:70:20:1f:e7:
7b:0d:80:cf:cb:91:c6:20:5f:6c:13:6c:f1:02:a8:ec:ce:11:
f3:d8:f3:22:91:d8:2d:3d:75:61:e3:dd:d0:03:49:46:47:92:
a7:99:82:05:62:c9:83:3b:54:91:db:dc:f9:bb:23:f3:c1:b9:
c3:0f:26:28:3f:93:de:9e:77:48:f4:d7:fa:2e:44:a0:ab:96:
1b:e9:4f:6e:0d:0e:80:60:5e:7f:3f:8f:f6:6b:67:23:4e:eb:
dd:a1:86:77:52:a3:e1:40:09:37:62:af:87:6d:1d:5f:17:ee:
c8:04:a2:76:cd:84:f5:cd:de:d5:3f:3d:cd:48:f9:6e:a6:de:
f6:04:cd:93:98:db:38:5d:9a:fe:1a:35:b7:fd:c4:0b:2a:ba:
47:03:3e:a1:85:2c:6b:5a:f3:84:33:51:08:dd:2b:d4:f6:66:
9b:d8:4d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:40 2024 by rpki-client on console-ams.rpki-client.org