Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/YuX1oXfb0QqovvoSjgt59HeHwrs.roa
File: YuX1oXfb0QqovvoSjgt59HeHwrs.roa (raw, json)
Hash identifier: ES2ynk1Bc7/EAwzPQzxYny+UeUGpO7pOupq0RbNUDdU=
Subject key identifier: 62:E5:F5:A1:77:DB:D1:0A:A8:BE:FA:12:8E:0B:79:F4:77:87:C2:BB
Certificate issuer: /CN=42f8ab2ba24879e45c445486fceb21af46656d5a
Certificate serial: 01877451C45ADC0A123E80BC3B949C06C110
Authority key identifier: 42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/YuX1oXfb0QqovvoSjgt59HeHwrs.roa
Signing time: Wed 12 Apr 2023 07:15:28 +0000
ROA not before: Wed 12 Apr 2023 07:15:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21379
IP address blocks: 217.147.160.0/24 maxlen: 24
217.147.161.0/24 maxlen: 24
217.147.162.0/24 maxlen: 24
217.147.163.0/24 maxlen: 24
217.147.164.0/24 maxlen: 24
217.147.165.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:74:51:c4:5a:dc:0a:12:3e:80:bc:3b:94:9c:06:c1:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42f8ab2ba24879e45c445486fceb21af46656d5a
Validity
Not Before: Apr 12 07:15:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=62e5f5a177dbd10aa8befa128e0b79f47787c2bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f1:4d:7b:dd:94:88:55:cf:cc:be:c2:46:00:
51:10:12:10:de:42:62:fa:be:46:85:ef:15:f9:c9:
b7:96:e4:f7:2c:1b:7b:09:41:e9:61:56:48:df:4f:
47:b1:62:75:f0:f4:b3:39:22:37:89:8b:51:55:14:
d0:67:4e:c4:92:30:13:5c:22:aa:7d:73:25:28:68:
fe:1d:53:3d:9a:2e:e9:ea:f2:76:4b:2d:62:35:5c:
bd:bc:ac:71:ae:15:31:7a:6b:8e:56:c9:e1:f7:70:
c6:e6:60:37:a8:8a:ac:ec:1a:08:91:27:b5:16:4c:
f4:f1:f9:4b:1e:56:4b:24:7c:90:24:fc:3f:79:de:
6d:53:bc:8e:c7:a8:ce:98:d6:09:bc:72:0b:07:fc:
5b:41:80:15:97:f4:77:62:83:a6:63:3a:e4:41:1e:
bc:45:45:a8:bb:c7:bd:55:a1:75:9d:88:88:a2:d6:
0b:b2:b5:59:f8:a6:70:b5:69:8e:be:e1:cc:4f:d4:
65:1b:af:a6:2a:2f:40:dd:08:81:03:1c:e6:f7:ab:
d8:09:26:50:ae:0c:05:be:6b:17:74:d3:de:c0:1b:
4a:eb:02:82:da:71:43:2a:d1:03:ad:33:bd:26:ab:
f5:bc:5c:31:74:34:82:c0:62:f5:cb:cd:f7:10:07:
49:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:E5:F5:A1:77:DB:D1:0A:A8:BE:FA:12:8E:0B:79:F4:77:87:C2:BB
X509v3 Authority Key Identifier:
keyid:42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/YuX1oXfb0QqovvoSjgt59HeHwrs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.147.160.0-217.147.165.255
Signature Algorithm: sha256WithRSAEncryption
be:35:fa:e9:a3:c4:77:22:05:c9:1d:9e:d5:35:9b:39:e7:19:
e2:cb:6d:9b:1d:86:16:1e:10:ec:0e:c7:c8:3a:93:0d:9c:bb:
e5:8f:e2:f1:0b:d1:83:54:2d:1b:c6:00:55:aa:5b:b8:ae:e0:
74:59:44:a8:0f:37:f9:56:87:aa:5b:0d:f1:04:75:39:42:b3:
1b:ff:dc:64:86:cd:ad:61:5c:7f:2b:1c:17:1c:15:17:16:be:
29:f3:0e:99:12:32:4b:c7:b2:e2:fd:ed:1a:d0:1d:d2:9c:d2:
33:4d:20:7e:31:6d:cb:77:fb:3d:5c:a5:63:22:a3:6a:bc:c6:
40:4d:40:7b:a0:aa:07:7e:09:ce:01:49:8f:43:c8:6d:4f:bd:
f5:f9:5e:b0:52:f7:b4:3f:74:ce:45:4c:cb:df:f0:a9:74:fd:
88:fd:7b:19:b4:8e:d7:ba:2a:63:8b:21:5d:79:aa:0f:eb:dc:
ad:b8:e8:e6:a3:5e:92:3e:dc:9d:9b:d6:1c:77:3a:62:36:62:
22:86:37:d1:1c:87:48:e3:d0:5c:9f:a9:93:86:08:97:36:e0:
d4:51:d3:07:4a:c3:9e:a8:bf:03:ff:8d:0e:5e:94:42:e2:91:
05:a8:83:b5:2d:3a:6b:25:2a:2f:a8:bd:c6:8b:d5:b5:18:96:
1e:90:4d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:56 2025 by rpki-client