Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/YynnLBnp_KhOxSDnB941K24qzyw.roa
File: YynnLBnp_KhOxSDnB941K24qzyw.roa (raw, json)
Hash identifier: WuiHN0yPHcWpFVo6GSsz+zjam9Tp26Voj+PiXlhjX+I=
Subject key identifier: 63:29:E7:2C:19:E9:FC:A8:4E:C5:20:E7:07:DE:35:2B:6E:2A:CF:2C
Certificate issuer: /CN=c4a3eb175f7b57906c80f508e15f63e03f0b7ef8
Certificate serial: 05B431DE
Authority key identifier: C4:A3:EB:17:5F:7B:57:90:6C:80:F5:08:E1:5F:63:E0:3F:0B:7E:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xKPrF197V5BsgPUI4V9j4D8Lfvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/YynnLBnp_KhOxSDnB941K24qzyw.roa
Signing time: Sat 01 Jan 2022 15:00:58 +0000
ROA not before: Sat 01 Jan 2022 15:00:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207590
IP address blocks: 94.154.1.0/24 maxlen: 24
94.154.1.1/32 maxlen: 32
2a0f:f3c0:1::/48 maxlen: 48
2a0f:f3c0::/29 maxlen: 29
2a0f:f3c0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95695326 (0x5b431de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4a3eb175f7b57906c80f508e15f63e03f0b7ef8
Validity
Not Before: Jan 1 15:00:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6329e72c19e9fca84ec520e707de352b6e2acf2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fa:27:51:cf:26:25:9e:68:a9:36:37:75:0d:
cf:99:e0:bb:27:b9:eb:2f:c8:a1:98:99:b1:48:60:
44:c4:b2:7a:21:17:64:00:b2:d9:2c:3b:05:7c:08:
56:80:c8:bd:b6:98:0e:71:13:35:dc:a5:62:35:9a:
a1:2e:4b:88:88:11:3c:2d:e6:e1:7c:b2:b0:47:d9:
e5:80:6d:bb:51:18:81:58:fa:bc:5d:75:dd:f2:e0:
1c:55:a9:d1:2f:12:b6:2b:2b:77:da:79:51:48:17:
f2:99:4a:ba:60:f7:2e:1a:ee:96:07:bb:a5:a7:3d:
0c:bb:76:11:c2:b5:69:b2:06:b3:7a:5e:fe:20:7d:
b5:bc:8d:72:53:23:d3:d7:27:a0:d9:94:70:f3:a8:
2e:9d:7e:9c:06:67:e4:c4:66:80:50:a1:3f:43:d4:
07:f0:19:f2:4a:d3:80:73:f4:40:5d:b3:a6:d5:b1:
90:27:cc:a3:c8:a3:72:81:0f:70:2e:a2:76:23:3b:
16:e1:8a:c0:fd:30:ee:0d:f4:3a:a5:c7:ab:0d:d5:
1f:8c:37:b3:b2:4c:e7:64:2c:f0:12:bd:52:95:73:
ec:33:36:a0:4b:7d:2f:11:f6:0f:79:6a:11:c0:b2:
8f:7c:a7:8a:52:fd:dc:23:50:36:1c:9f:6a:53:6c:
51:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:29:E7:2C:19:E9:FC:A8:4E:C5:20:E7:07:DE:35:2B:6E:2A:CF:2C
X509v3 Authority Key Identifier:
keyid:C4:A3:EB:17:5F:7B:57:90:6C:80:F5:08:E1:5F:63:E0:3F:0B:7E:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xKPrF197V5BsgPUI4V9j4D8Lfvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/YynnLBnp_KhOxSDnB941K24qzyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.1.0/24
IPv6:
2a0f:f3c0::/29
Signature Algorithm: sha256WithRSAEncryption
18:5a:e9:62:50:ec:a4:6e:f2:be:05:2d:ad:18:8e:7f:b8:7c:
e5:8a:b1:7f:15:03:d0:8b:40:a1:ff:13:93:dc:88:0d:a0:72:
be:87:93:26:c2:6d:0c:96:0f:c6:6b:0b:55:68:2f:f3:da:d7:
32:b6:24:bc:16:a4:86:1a:c4:41:d4:25:47:93:d7:af:46:bf:
77:14:b2:ab:d7:5a:3b:59:58:b4:54:18:39:08:81:da:5a:71:
c4:08:f0:3d:fa:e5:76:97:23:20:6f:0f:bf:e9:de:da:0f:ce:
43:e7:5c:c1:d7:05:7e:7f:a3:34:03:61:08:d1:08:7d:7c:31:
b2:e9:c4:b4:1c:3b:6e:5f:17:1c:03:d3:59:54:83:68:fb:a0:
86:30:c2:e9:52:2a:a2:63:f5:bb:e4:77:9b:e1:b8:a4:7c:12:
dd:1c:35:a1:99:67:d7:8c:29:50:fc:31:f4:02:b3:c6:00:4c:
37:df:8d:b7:43:4a:8c:db:06:f8:29:5c:36:58:01:87:c2:9a:
f2:20:81:a5:dc:ff:65:a0:ce:77:8e:ef:f2:a3:f6:5a:d8:9b:
07:53:83:27:73:74:ae:b7:c3:be:0d:e3:d1:1e:0b:da:d1:84:
e5:97:6f:54:3e:a0:02:02:97:0c:57:b7:4f:b5:c2:56:01:19:
4f:90:56:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:12 2024 by rpki-client on console-fra.rpki-client.org