Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/YQaWfdZ9hhuwe6FR2l4XuS7qpn8.roa
File: YQaWfdZ9hhuwe6FR2l4XuS7qpn8.roa (raw, json)
Hash identifier: KPkVJqNUar7SpmOF/ETaEiapLfbw5FqWd/mCyyJmW8E=
Subject key identifier: 61:06:96:7D:D6:7D:86:1B:B0:7B:A1:51:DA:5E:17:B9:2E:EA:A6:7F
Certificate issuer: /CN=2a4472336c9d02a488cdd77534d65fb1465ec09a
Certificate serial: 01852A259EA62DD0CB94EDC46C5C1228E5D9
Authority key identifier: 2A:44:72:33:6C:9D:02:A4:88:CD:D7:75:34:D6:5F:B1:46:5E:C0:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KkRyM2ydAqSIzdd1NNZfsUZewJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/YQaWfdZ9hhuwe6FR2l4XuS7qpn8.roa
Signing time: Mon 19 Dec 2022 11:29:46 +0000
ROA not before: Mon 19 Dec 2022 11:29:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50837
IP address blocks: 185.12.4.0/22 maxlen: 24
178.22.64.0/21 maxlen: 24
93.123.82.0/23 maxlen: 24
91.92.71.0/24 maxlen: 24
93.123.14.0/23 maxlen: 24
94.156.200.0/22 maxlen: 24
31.171.240.0/20 maxlen: 24
2a01:9980::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2a:25:9e:a6:2d:d0:cb:94:ed:c4:6c:5c:12:28:e5:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a4472336c9d02a488cdd77534d65fb1465ec09a
Validity
Not Before: Dec 19 11:29:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6106967dd67d861bb07ba151da5e17b92eeaa67f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:dd:03:28:35:f3:cc:1a:b9:af:da:f2:e0:97:
ec:98:3f:82:f3:bd:7c:dc:81:da:0a:cb:70:46:1a:
ec:0c:93:9b:04:df:45:c4:93:af:b5:9d:9a:ba:9a:
ae:30:c9:ef:f8:48:a4:31:db:f7:ff:29:54:d2:cb:
b4:1b:64:db:d9:8b:7f:c8:e1:2f:fa:98:c4:01:08:
9b:91:ff:bd:76:86:f5:b9:94:cd:dc:2f:13:6e:34:
b6:86:77:da:43:21:73:20:cf:30:89:9f:65:b6:85:
1c:c0:f1:3a:73:97:12:eb:25:37:97:62:82:38:65:
e6:85:17:43:5a:05:e0:1d:23:e3:c0:54:3c:fa:e3:
a0:b0:08:c3:ae:42:78:36:00:d3:f3:37:06:07:2d:
aa:be:43:4f:ca:73:fb:b6:9a:8b:33:48:c9:51:10:
db:66:5f:3e:2d:37:da:e8:9b:f4:32:10:86:ec:3e:
64:61:53:8a:e5:76:41:a8:d3:c1:19:60:4c:3b:8f:
f1:c9:ff:99:8f:93:ff:90:25:0c:ea:83:ef:07:7d:
06:14:f2:9c:1e:e2:94:81:f2:e6:fb:0f:41:c2:50:
3e:3f:2a:9e:ac:ee:72:df:dd:8d:2f:63:36:5d:67:
a9:6b:df:7a:38:cb:f0:c9:2e:07:7c:bf:79:35:ba:
fd:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:06:96:7D:D6:7D:86:1B:B0:7B:A1:51:DA:5E:17:B9:2E:EA:A6:7F
X509v3 Authority Key Identifier:
keyid:2A:44:72:33:6C:9D:02:A4:88:CD:D7:75:34:D6:5F:B1:46:5E:C0:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KkRyM2ydAqSIzdd1NNZfsUZewJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/YQaWfdZ9hhuwe6FR2l4XuS7qpn8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.171.240.0/20
91.92.71.0/24
93.123.14.0/23
93.123.82.0/23
94.156.200.0/22
178.22.64.0/21
185.12.4.0/22
IPv6:
2a01:9980::/32
Signature Algorithm: sha256WithRSAEncryption
ab:0f:8b:fa:84:b6:a1:f3:83:b6:76:3a:dd:44:5b:d6:23:47:
2d:a7:78:58:e0:29:57:1e:91:9e:03:6e:6b:c0:01:dd:6c:0a:
28:ec:e3:32:e4:c7:84:c7:30:ff:d8:8f:25:ea:79:ff:35:8d:
17:24:e3:2b:4d:e6:b3:23:aa:56:14:d2:4d:e1:f8:fe:ae:d6:
9c:93:da:1f:0e:bf:f3:f9:96:cd:1a:70:71:9d:6d:f5:f3:dd:
8e:9c:db:65:fa:51:b7:f1:8d:6c:d1:5b:a8:68:a0:5f:0e:a7:
51:70:89:96:d5:44:d0:4a:e2:cd:7f:fa:01:b1:64:a4:77:87:
12:64:cf:41:f2:61:09:7f:d3:f5:cf:7f:93:be:78:e1:87:21:
c1:75:58:5f:ba:27:93:ca:60:6f:47:fe:bc:99:2d:a8:3f:9e:
ba:07:19:ba:71:5c:96:1c:1d:1f:58:0b:ae:f6:59:e6:ae:49:
ba:a5:8f:98:b2:37:3b:7f:0b:f2:0e:9a:8e:e9:b4:1a:9c:5d:
e6:94:0b:8a:47:65:6b:8c:48:14:2e:94:70:b9:e3:51:14:35:
67:6c:93:68:dc:28:11:d1:9d:e1:74:82:9d:e1:2b:0a:c4:a3:
1d:29:6b:3b:dd:b8:e7:db:97:65:50:98:67:06:24:eb:cf:2a:
c7:6c:b3:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:33 2024 by rpki-client on console-ams.rpki-client.org