Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/yscq-3IxcaKKio9imv2qvodvy8g.roa
File: yscq-3IxcaKKio9imv2qvodvy8g.roa (raw, json)
Hash identifier: Uh5YTyVg7EHJgwGpszi4iPRbe3+aYmsI92JRTEFnqYw=
Subject key identifier: CA:C7:2A:FB:72:31:71:A2:8A:8A:8F:62:9A:FD:AA:BE:87:6F:CB:C8
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 366549E4
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/yscq-3IxcaKKio9imv2qvodvy8g.roa
Signing time: Sat 01 Jan 2022 13:57:25 +0000
ROA not before: Sat 01 Jan 2022 13:57:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60604
IP address blocks: 89.35.158.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 912607716 (0x366549e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 1 13:57:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cac72afb723171a28a8a8f629afdaabe876fcbc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:32:86:db:02:27:ed:fd:0d:67:7e:e4:02:93:
ba:28:73:59:03:16:1a:d1:cc:67:33:a8:81:1f:57:
d8:fa:a4:62:e0:20:e7:16:9c:68:e5:ff:35:e4:bb:
67:c8:ac:f4:e2:ea:e5:ab:9f:36:c1:7a:a4:1c:b3:
1f:5a:7a:8f:e2:f0:59:bd:fc:d9:6f:86:2f:34:58:
12:eb:46:d1:80:25:6f:28:dd:4c:1a:6d:de:a5:79:
ff:02:50:30:24:03:aa:df:96:24:4f:d2:46:6b:87:
6a:d0:f3:60:7e:c1:9f:cc:14:53:c6:0c:a2:67:80:
d4:e5:14:26:70:9e:53:c8:31:92:70:3b:f7:d5:10:
28:3f:9b:48:90:99:c8:ea:bc:39:61:87:92:23:95:
be:5a:53:fc:aa:0b:6c:02:b1:fe:49:cb:97:fa:e6:
b8:e2:33:00:73:0c:5b:39:f9:02:f2:89:0f:14:97:
3a:95:84:40:51:ef:d9:28:5f:3a:2f:04:e1:05:d1:
8f:dc:17:d5:9f:a1:74:e2:61:1f:ff:21:2a:bd:14:
34:0b:50:3d:ff:e7:b6:47:81:67:00:b3:39:c4:6c:
fa:1a:5a:e4:c6:90:17:46:d1:a1:95:0a:2f:ff:0f:
16:95:e8:45:97:f5:91:19:e3:66:40:ef:8e:d3:10:
37:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:C7:2A:FB:72:31:71:A2:8A:8A:8F:62:9A:FD:AA:BE:87:6F:CB:C8
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/yscq-3IxcaKKio9imv2qvodvy8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.158.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:73:70:fa:cd:d3:70:1b:6a:29:34:bf:2a:76:a9:74:28:72:
0d:23:9b:86:3f:ce:2c:fd:a2:d9:a1:f8:e2:fd:fe:d8:8b:b8:
66:08:0e:1b:c3:62:1b:1b:fe:48:9b:9d:44:c5:a6:9a:69:5a:
f1:f1:23:08:bf:bf:a8:4e:1d:42:87:aa:46:04:23:28:87:66:
ff:bf:a9:fc:a9:c6:fc:95:4a:1d:2f:6e:f9:fa:82:64:19:d4:
a0:51:64:8e:95:75:56:05:0e:b7:54:44:b6:83:d6:a0:0b:19:
d4:21:e8:da:a0:58:27:1c:4c:67:b0:7b:51:f5:be:69:37:f6:
de:4b:71:b3:2d:a9:ff:c7:d0:bc:2b:e8:60:e3:0b:11:df:03:
49:6d:17:22:43:f8:cc:90:7f:56:0a:74:76:da:e1:10:4a:04:
e7:db:2b:fb:ad:1a:c2:d7:b9:f4:cf:51:ab:cb:8c:43:35:36:
8f:5c:bc:aa:a1:ac:8d:46:bd:f6:1d:b1:56:3b:ca:c2:55:29:
f8:31:41:2a:ff:fd:68:38:8d:ef:41:f6:85:26:6c:fc:23:d9:
10:47:01:43:a7:02:78:3b:ad:99:9f:b7:53:79:dd:c1:c8:52:
b4:35:15:17:cd:25:3b:a7:7c:51:d6:06:d9:ea:3f:cb:be:d4:
b5:f5:e6:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:03 2023 by rpki-client on console-fra.rpki-client.org