Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/YWnwQO2cGUJqL3u2-4ynXHcbXt8.roa
File: YWnwQO2cGUJqL3u2-4ynXHcbXt8.roa (raw, json)
Hash identifier: 8dBx8apfN6L7zytqmC5GVusze+WkdmR3AgoE2+K4q14=
Subject key identifier: 61:69:F0:40:ED:9C:19:42:6A:2F:7B:B6:FB:8C:A7:5C:77:1B:5E:DF
Certificate issuer: /CN=6ba3186597742a926cd26504e1ed76f8543fdb26
Certificate serial: 01845B9CF4DD8880E362E286FB4FAE46A60F
Authority key identifier: 6B:A3:18:65:97:74:2A:92:6C:D2:65:04:E1:ED:76:F8:54:3F:DB:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a6MYZZd0KpJs0mUE4e12-FQ_2yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/YWnwQO2cGUJqL3u2-4ynXHcbXt8.roa
Signing time: Wed 09 Nov 2022 08:58:43 +0000
ROA not before: Wed 09 Nov 2022 08:58:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3262
IP address blocks: 185.194.24.0/24 maxlen: 24
185.219.217.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:5b:9c:f4:dd:88:80:e3:62:e2:86:fb:4f:ae:46:a6:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ba3186597742a926cd26504e1ed76f8543fdb26
Validity
Not Before: Nov 9 08:58:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6169f040ed9c19426a2f7bb6fb8ca75c771b5edf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:6b:a6:ab:cc:db:2e:74:40:3a:ac:b0:bc:98:
6f:ae:45:e4:52:74:a2:b3:0b:6f:34:4f:d0:c2:61:
7f:92:5a:dc:20:77:33:c0:45:9a:5f:e5:c5:9b:c6:
f5:20:d8:1e:e5:72:68:8a:1d:29:b7:d0:b5:12:ac:
1f:ab:db:25:32:fd:0f:6e:6b:89:c6:3b:89:c8:78:
7d:f4:97:50:dc:1b:f2:8e:af:23:c6:f1:fc:fc:5a:
eb:38:01:96:23:56:fa:6d:59:ea:e0:77:76:fe:5e:
a8:1c:1b:5f:36:a3:cb:a7:16:2a:6f:b6:09:80:fe:
21:23:11:93:10:8b:90:67:0c:7d:c3:42:f1:c4:7e:
66:bb:56:c0:df:26:6d:97:f6:cf:bb:93:3d:8b:97:
40:b6:ae:57:c3:e4:39:19:6f:4c:9a:98:04:61:91:
55:e0:c5:a9:cd:3a:b9:bf:7b:6f:65:06:2b:cf:d4:
7e:1f:f8:ce:60:47:55:c5:fc:a1:b2:66:5a:26:59:
63:dd:28:b6:1f:5e:fe:75:a4:1d:c9:84:3e:2b:96:
e7:96:6c:7a:c3:36:63:8f:27:a6:08:0a:97:59:c4:
23:59:72:f6:fb:49:38:e9:63:3d:e0:e1:8c:21:af:
e8:1f:39:b9:46:28:82:ef:20:98:cf:58:49:21:53:
06:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:69:F0:40:ED:9C:19:42:6A:2F:7B:B6:FB:8C:A7:5C:77:1B:5E:DF
X509v3 Authority Key Identifier:
keyid:6B:A3:18:65:97:74:2A:92:6C:D2:65:04:E1:ED:76:F8:54:3F:DB:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6MYZZd0KpJs0mUE4e12-FQ_2yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/YWnwQO2cGUJqL3u2-4ynXHcbXt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/a6MYZZd0KpJs0mUE4e12-FQ_2yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.24.0/24
185.219.217.0/24
Signature Algorithm: sha256WithRSAEncryption
66:66:22:a2:0d:b6:f7:b8:20:e0:6c:79:9c:d4:c4:91:3e:7c:
d7:2d:0c:b4:db:1d:ff:8d:01:4f:f8:9c:f7:c3:3d:00:dc:41:
7c:d4:44:e4:a2:65:c6:1e:55:1d:98:ef:92:76:b2:01:16:ab:
89:5e:1a:05:07:5f:26:7d:fe:f3:f1:bd:03:47:7a:6a:d0:15:
c4:ca:c4:09:21:ac:04:25:89:b3:43:60:7e:53:be:2d:ff:c2:
3b:3b:3d:5c:15:98:23:84:7d:8b:22:9a:50:49:14:a1:93:57:
dd:f7:c8:25:c7:15:33:2c:4c:c8:cc:e4:c9:d4:c9:df:ae:2d:
a2:0b:1e:f7:94:45:b4:e5:82:69:30:d3:db:6a:06:e6:8d:81:
17:5d:8b:5d:82:69:c4:35:69:b3:d1:9e:36:d2:b2:a6:68:cc:
39:2c:d9:14:9f:67:9b:6d:cb:ac:2a:53:94:47:fd:23:c1:55:
76:24:78:0e:e1:43:2d:05:56:be:51:89:9c:6e:b7:95:4a:63:
f7:60:aa:bf:82:f5:0d:ed:60:ef:95:9a:4e:25:ef:f5:27:d5:
4f:e4:d3:0b:a9:34:f9:f3:9f:c4:f5:a9:7f:8a:c8:20:11:8b:
72:4a:0d:f2:21:49:1a:8a:ae:d8:36:b5:a5:19:58:de:c8:45:
c7:6c:7c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:38 2024 by rpki-client on console-fra.rpki-client.org