Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/K_YYbQxKpmVdLGagMkcpcUxJS94.roa
File: K_YYbQxKpmVdLGagMkcpcUxJS94.roa (raw, json)
Hash identifier: HVZKqO08l0OF/BtQRxOWYHEy/rq7c9PELEmPLA0OHvI=
Subject key identifier: 2B:F6:18:6D:0C:4A:A6:65:5D:2C:66:A0:32:47:29:71:4C:49:4B:DE
Certificate issuer: /CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Certificate serial: 0182379F4DB933DF9C5F1232BA39A3D7B234
Authority key identifier: BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/K_YYbQxKpmVdLGagMkcpcUxJS94.roa
Signing time: Mon 25 Jul 2022 23:09:23 +0000
ROA not before: Mon 25 Jul 2022 23:09:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44477
IP address blocks: 185.250.148.0/24 maxlen: 24
45.67.229.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:37:9f:4d:b9:33:df:9c:5f:12:32:ba:39:a3:d7:b2:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Validity
Not Before: Jul 25 23:09:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2bf6186d0c4aa6655d2c66a0324729714c494bde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:4b:67:31:9c:6f:74:d0:32:16:cb:fc:d0:cb:
4b:9a:9f:21:a4:d9:6f:05:b6:06:61:af:0e:62:b9:
f6:43:b2:02:21:44:41:0b:02:78:cd:1d:7e:ff:fb:
16:8c:b6:5c:a2:4a:17:c6:d0:9f:be:99:e0:58:95:
52:b9:b0:1e:2a:6c:bc:e9:85:cb:55:39:82:51:fd:
ef:74:a8:da:54:36:07:63:04:09:e9:34:2e:45:19:
17:41:36:a8:5d:f5:81:6b:2b:c6:4a:1a:59:e4:bd:
b1:5a:4b:17:3c:b9:fa:9a:02:2c:8c:42:c5:43:23:
e4:e1:9d:f2:77:5e:8b:39:c7:6a:64:b7:b1:05:ce:
7b:7c:35:72:41:de:7e:53:2f:47:11:45:f5:bf:bc:
b7:68:67:96:5f:27:89:06:13:a7:46:c5:1c:d0:10:
d3:fb:64:a3:7e:99:4e:46:84:cf:f5:f9:ab:b6:b6:
a5:77:18:66:cc:58:69:6e:a6:98:5b:bd:40:35:a2:
b9:2c:1d:41:e4:00:0f:13:b0:0d:20:1d:b7:e8:ac:
ab:db:a8:55:2c:2c:7e:2d:2e:f9:a0:c9:31:4d:bd:
37:a6:cf:a9:36:21:38:5e:4a:01:17:36:8e:f0:bd:
50:af:4d:db:00:15:65:8f:7c:9a:b0:44:47:fe:85:
ea:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:F6:18:6D:0C:4A:A6:65:5D:2C:66:A0:32:47:29:71:4C:49:4B:DE
X509v3 Authority Key Identifier:
keyid:BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/K_YYbQxKpmVdLGagMkcpcUxJS94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.229.0/24
185.250.148.0/24
Signature Algorithm: sha256WithRSAEncryption
96:f4:4f:16:1a:92:19:27:52:94:b7:6e:24:90:4f:bf:75:b4:
d0:67:b8:f2:ef:ce:9d:57:7c:f6:d1:9e:70:35:58:16:15:77:
e5:fe:45:9b:fb:97:1b:3d:29:c6:aa:0b:0b:16:2e:6d:68:cd:
12:58:14:17:ad:56:05:da:c6:c9:a8:fd:a3:34:10:c7:7f:df:
c1:7d:43:b5:0e:12:66:d7:78:23:de:5c:22:ce:c0:93:ac:48:
1d:74:eb:c0:d8:03:21:eb:51:2d:a0:ab:d7:4c:07:40:b0:84:
31:94:3e:43:fd:2a:3e:02:fe:de:02:93:18:a3:79:26:ce:7c:
0f:a7:fa:ec:3c:34:21:68:cb:f2:59:2a:b1:fd:b7:7f:11:ca:
b8:39:bf:a4:f0:6c:63:21:c6:fa:89:4e:b5:20:b8:b1:70:ad:
f3:ce:18:44:10:f4:ab:ba:8d:fa:86:bf:cc:ae:0c:61:09:05:
79:55:8b:f4:af:a9:71:29:03:76:1d:9d:77:c6:00:bc:7b:8b:
b9:79:f1:14:ba:da:06:e1:ad:4e:21:a3:5a:14:55:77:07:2b:
d9:79:a7:37:1a:df:01:cc:6d:2c:2f:e0:1b:00:bb:17:3d:ed:
3d:93:c4:38:32:04:25:61:7d:73:ac:e8:a2:12:16:0b:7c:79:
1c:1f:c1:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:06 2023 by rpki-client on console-fra.rpki-client.org