Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/yA2SiigR_85u95Dvh7FkNzcv2eU.roa
File: yA2SiigR_85u95Dvh7FkNzcv2eU.roa (raw, json)
Hash identifier: iOToCQx/qs5eODlKAmSJpdpYGcZojoUgz8o22Ln9xsg=
Subject key identifier: C8:0D:92:8A:28:11:FF:CE:6E:F7:90:EF:87:B1:64:37:37:2F:D9:E5
Certificate issuer: /CN=dcef58d4cfa35543f8488a2756e6924e647b4589
Certificate serial: 059D1708
Authority key identifier: DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/yA2SiigR_85u95Dvh7FkNzcv2eU.roa
Signing time: Sat 01 Jan 2022 07:04:00 +0000
ROA not before: Sat 01 Jan 2022 07:04:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47390
IP address blocks: 185.220.187.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94181128 (0x59d1708)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcef58d4cfa35543f8488a2756e6924e647b4589
Validity
Not Before: Jan 1 07:04:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c80d928a2811ffce6ef790ef87b16437372fd9e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:41:e7:84:35:d2:82:be:37:be:e6:af:b4:b6:
87:55:a3:15:90:b5:56:7a:4b:30:49:1c:08:e0:46:
2b:39:68:2f:ad:58:4e:8b:42:f6:21:7e:3a:bf:87:
08:34:7c:ac:a9:07:4c:ff:98:26:b9:e5:8e:01:98:
a0:57:f1:76:ba:8e:ff:65:14:07:c0:16:db:4b:c5:
1f:01:5f:fb:bd:94:84:76:6d:ed:e8:53:21:f9:0f:
c0:7e:da:c8:52:2a:e5:03:2a:eb:be:48:02:47:c2:
0b:22:5c:bc:eb:f3:69:d5:44:00:f1:cb:29:fa:e5:
46:c3:94:4e:f2:9b:6c:ff:d0:6e:8e:40:b6:46:ff:
30:03:2a:db:a2:5f:9c:5d:71:ec:4b:fc:fa:27:a2:
e5:34:9a:35:8e:19:b3:59:99:7b:65:45:eb:ed:62:
89:89:f6:24:ac:90:0e:7f:0d:63:ce:3e:47:23:d6:
1d:f3:bb:85:7e:4c:28:a6:06:0e:d0:09:e5:d3:c4:
2e:91:44:3d:a2:e9:e7:6a:6e:35:02:5d:26:a5:af:
f9:86:4c:e9:cd:36:ec:20:86:36:d1:af:1a:06:60:
b2:3d:93:b4:fb:8f:f4:5d:fc:4d:55:ec:3b:72:40:
e0:f4:83:64:3a:f5:cb:3d:a0:3f:5b:cb:93:3e:5f:
2f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:0D:92:8A:28:11:FF:CE:6E:F7:90:EF:87:B1:64:37:37:2F:D9:E5
X509v3 Authority Key Identifier:
keyid:DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/yA2SiigR_85u95Dvh7FkNzcv2eU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.187.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:e5:5d:b1:37:05:78:cc:d1:5c:79:2d:6e:07:f0:0a:c1:dc:
9e:18:8f:e2:74:1f:d7:03:c4:db:57:6e:a8:4b:c2:73:5d:46:
20:6a:07:75:92:6b:d6:b6:f0:92:67:96:6f:36:16:10:2d:2d:
34:76:34:41:76:72:02:71:3d:da:7d:71:fd:16:4d:cb:16:4d:
ca:b4:9b:ff:00:1c:d0:9b:bd:bc:e6:43:97:82:dd:a3:93:82:
25:b7:ac:40:a3:36:81:b8:bf:37:ed:bc:ab:0c:d1:9d:51:89:
7c:37:df:4f:ed:94:89:d1:58:bd:15:55:a4:1f:e6:af:57:41:
35:9a:05:cf:13:13:2c:81:01:18:e1:58:1e:cb:8e:e9:28:87:
b4:0c:e5:1d:a6:1b:c6:ef:6e:49:be:19:64:94:cc:28:73:1d:
48:3b:15:8b:ca:f0:52:ab:dd:a2:8f:b0:a8:ce:42:9b:bd:0a:
ed:40:9e:8a:fe:f3:a3:62:4e:27:5f:66:94:c8:f6:75:b0:1d:
46:5f:87:3e:35:0e:cc:62:c4:e1:13:a1:51:4f:90:ad:ca:ee:
57:67:6c:58:31:12:fa:e1:87:86:63:22:03:40:dd:4b:75:c8:
a9:a3:40:3e:07:97:1c:ab:f5:52:c4:be:9e:63:49:60:62:f7:
9d:cc:84:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:54 2023 by rpki-client on console-ams.rpki-client.org