Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/221fcd-61e5-4b45-a359-72f6ca757a08/1/YR1EjL8hopV6NApEej6bAf4pVsY.roa
File: YR1EjL8hopV6NApEej6bAf4pVsY.roa (raw, json)
Hash identifier: oXcTyUEzA0HbJHe0uiH0b7xdlsLS4gZ74N9pkRef6iQ=
Subject key identifier: 61:1D:44:8C:BF:21:A2:95:7A:34:0A:44:7A:3E:9B:01:FE:29:56:C6
Certificate issuer: /CN=350b40ced36e31f905e1a6e8e03c621e9fbfcb29
Certificate serial: 03E676F3
Authority key identifier: 35:0B:40:CE:D3:6E:31:F9:05:E1:A6:E8:E0:3C:62:1E:9F:BF:CB:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NQtAztNuMfkF4abo4DxiHp-_yyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/221fcd-61e5-4b45-a359-72f6ca757a08/1/YR1EjL8hopV6NApEej6bAf4pVsY.roa
Signing time: Sat 01 Jan 2022 11:59:37 +0000
ROA not before: Sat 01 Jan 2022 11:59:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41446
IP address blocks: 192.166.12.0/22 maxlen: 22
2001:67c:2108::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65435379 (0x3e676f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=350b40ced36e31f905e1a6e8e03c621e9fbfcb29
Validity
Not Before: Jan 1 11:59:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=611d448cbf21a2957a340a447a3e9b01fe2956c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b0:0b:25:b9:63:cb:98:ee:12:28:a3:27:4d:
34:53:cd:a8:68:4e:ad:e4:4b:6e:cf:81:81:4e:28:
f7:41:13:92:3b:1b:92:50:77:43:c9:de:ae:a0:75:
6d:2d:f7:ab:d1:79:02:4c:89:f7:6d:ec:1f:24:c2:
74:f4:9f:e5:f1:65:f0:86:52:be:53:51:b7:29:7d:
93:4b:ac:53:f1:bf:f8:e3:87:69:4a:66:fd:fc:ff:
9d:da:5e:08:8c:b8:a8:37:80:82:dc:7f:f7:52:97:
ca:dc:84:2c:46:d2:3e:68:2f:2c:f8:ff:ac:ee:90:
da:b2:a1:d3:49:44:04:50:ce:d6:f1:ea:27:32:a6:
dd:93:61:50:fa:e4:3f:d1:8e:9b:38:11:0e:9b:78:
d2:87:cc:ba:3a:8e:8b:5d:49:15:55:dc:42:1d:24:
ec:c2:bf:85:e7:40:e9:1b:ba:46:28:3e:b7:76:c8:
1f:88:fa:60:10:03:b8:43:a9:eb:bd:e7:f3:c4:9d:
ca:00:e7:cb:c9:6c:14:67:9f:62:73:46:e2:38:d2:
57:c2:0b:a7:5c:4a:96:28:0f:59:a0:82:8b:c4:9c:
d2:a4:4d:49:9c:60:88:5c:fc:ad:3b:68:0b:04:7c:
51:f5:0b:32:89:de:34:62:e7:c3:6c:a5:70:56:43:
9a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:1D:44:8C:BF:21:A2:95:7A:34:0A:44:7A:3E:9B:01:FE:29:56:C6
X509v3 Authority Key Identifier:
keyid:35:0B:40:CE:D3:6E:31:F9:05:E1:A6:E8:E0:3C:62:1E:9F:BF:CB:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NQtAztNuMfkF4abo4DxiHp-_yyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/221fcd-61e5-4b45-a359-72f6ca757a08/1/YR1EjL8hopV6NApEej6bAf4pVsY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/221fcd-61e5-4b45-a359-72f6ca757a08/1/NQtAztNuMfkF4abo4DxiHp-_yyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.166.12.0/22
IPv6:
2001:67c:2108::/48
Signature Algorithm: sha256WithRSAEncryption
98:42:24:bc:fb:1c:2d:fb:45:e9:fc:1b:32:61:7d:6f:4e:a2:
83:e2:d6:f2:22:e3:61:51:30:be:a9:b0:6a:38:fb:b8:5f:6f:
e8:b4:76:c1:c7:d6:21:33:2b:47:8d:bb:7b:b8:97:5e:57:a9:
d9:64:45:09:68:e9:df:f3:6e:70:2a:bd:f5:84:90:37:48:dd:
7f:f0:cf:8e:de:2b:a3:a2:f6:f0:6f:b8:58:d3:a5:74:11:fd:
78:13:20:86:00:00:60:e4:0b:34:60:af:31:5d:5f:4a:37:0e:
d7:d0:ec:89:cf:93:e2:f3:d4:c7:f4:73:a8:20:98:42:e5:4a:
e8:80:6a:2d:21:4d:a1:d8:5a:fa:30:46:6b:85:96:f6:77:96:
35:38:6c:33:b3:c3:4a:29:7c:dc:44:e0:6a:a0:cf:bd:8e:a6:
0f:63:73:d6:a0:7e:2f:41:43:8d:39:43:ce:d1:92:13:ff:52:
7b:cd:4a:54:ed:8a:b0:de:67:50:19:be:1d:87:2b:35:0c:99:
fe:fa:13:a0:21:6e:40:7f:b4:82:5e:33:08:9c:b3:f2:0a:20:
ae:e3:6d:e3:6f:97:b4:69:e4:c2:41:5f:de:d2:84:c7:6f:12:
94:b0:fc:94:0a:e7:90:6f:f8:16:57:63:cb:f2:14:e4:50:f7:
12:bf:aa:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:10 2024 by rpki-client on console-fra.rpki-client.org