Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/YOfshakIL9e57MbQvfZJkTrOpf0.roa
File: YOfshakIL9e57MbQvfZJkTrOpf0.roa (raw, json)
Hash identifier: h0zNipVgXC9nD5WRRtn0ZigXB5P46OAw1z/WgAxL+zg=
Subject key identifier: 60:E7:EC:85:A9:08:2F:D7:B9:EC:C6:D0:BD:F6:49:91:3A:CE:A5:FD
Certificate issuer: /CN=11184fb6503a760657f90270e276a3fcb50b8e8f
Certificate serial: 0811D094
Authority key identifier: 11:18:4F:B6:50:3A:76:06:57:F9:02:70:E2:76:A3:FC:B5:0B:8E:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERhPtlA6dgZX-QJw4naj_LULjo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/YOfshakIL9e57MbQvfZJkTrOpf0.roa
Signing time: Sat 01 Jan 2022 01:55:11 +0000
ROA not before: Sat 01 Jan 2022 01:55:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12891
IP address blocks: 193.110.210.0/24 maxlen: 24
193.110.213.0/24 maxlen: 24
193.110.211.0/24 maxlen: 24
193.110.208.0/24 maxlen: 24
193.110.212.0/24 maxlen: 24
193.110.214.0/24 maxlen: 24
193.110.215.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135385236 (0x811d094)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11184fb6503a760657f90270e276a3fcb50b8e8f
Validity
Not Before: Jan 1 01:55:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=60e7ec85a9082fd7b9ecc6d0bdf649913acea5fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e5:1a:ff:0b:5c:70:0b:3f:b1:af:bf:1a:d4:
b5:13:53:b2:ae:49:7a:e9:cb:51:a2:8d:1a:37:dd:
07:9d:a0:d2:6d:e8:d4:ab:45:b5:74:49:f3:2d:65:
23:fa:f7:99:4b:3e:71:78:ad:63:c5:66:a1:09:73:
20:e4:27:7e:72:46:88:e5:c3:15:84:fb:f0:6e:8f:
69:62:e6:d3:f8:89:a3:f8:0d:10:5a:f6:b6:30:b7:
fa:c5:03:69:0c:7a:cb:76:2f:73:9c:23:29:36:a9:
1b:a7:6b:cc:89:58:da:7f:f1:9a:dd:dc:b3:f3:20:
e2:f6:f3:35:a6:4b:65:da:48:d4:b4:1d:42:b0:2f:
cc:43:d0:d3:a8:e9:fc:0a:e6:ec:8a:6a:de:06:ae:
06:89:50:66:cb:25:45:69:5c:41:8d:3e:1d:87:c0:
6a:8d:51:ce:ec:1f:dc:72:b3:54:d6:ea:e3:71:88:
01:7b:10:ee:49:32:cd:98:89:59:45:af:9e:c0:f9:
a0:94:bd:28:b8:3c:dc:cc:35:c8:4e:73:24:cf:bd:
1d:eb:af:e0:aa:d1:ed:a7:d8:0e:64:bd:8f:7d:bc:
56:52:0e:3d:ba:d7:ee:f1:0f:07:92:78:8a:bf:bf:
0c:ce:7e:e1:bc:a9:17:b9:c6:25:db:15:23:01:e0:
e7:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:E7:EC:85:A9:08:2F:D7:B9:EC:C6:D0:BD:F6:49:91:3A:CE:A5:FD
X509v3 Authority Key Identifier:
keyid:11:18:4F:B6:50:3A:76:06:57:F9:02:70:E2:76:A3:FC:B5:0B:8E:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERhPtlA6dgZX-QJw4naj_LULjo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/YOfshakIL9e57MbQvfZJkTrOpf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.110.208.0/24
193.110.210.0-193.110.215.255
Signature Algorithm: sha256WithRSAEncryption
98:35:49:61:89:aa:a1:82:b7:ce:4a:50:ef:f5:74:03:8a:9f:
65:ab:fc:8b:43:16:d0:b8:06:3a:71:39:55:e7:c6:8e:ed:79:
35:c0:22:d7:51:f1:f0:f4:2d:f2:84:20:58:40:ec:b1:f8:23:
d7:74:9d:81:b1:75:c8:8c:31:86:b5:2c:31:34:c2:23:2f:42:
d3:f3:b3:58:62:00:53:12:ea:06:78:a9:98:b6:6b:57:54:a2:
9f:cc:df:2d:b0:0f:de:80:56:01:d9:d2:92:9d:b4:80:6a:24:
35:4c:aa:26:80:cc:b4:6f:59:9e:b2:04:d0:75:1e:f9:df:49:
c4:b6:76:66:c5:7b:fa:ad:1f:ad:5b:d3:ab:33:57:88:04:1f:
43:a5:f0:62:5b:6e:e4:61:a7:1d:b9:93:6b:c4:21:38:55:c8:
c9:ba:a3:68:f7:c6:71:cd:8e:fe:ad:44:e2:9b:ff:ca:77:60:
0e:a4:3a:54:2a:7e:5b:e7:fc:c1:ad:b5:60:3e:05:11:1d:0b:
6f:c3:95:16:48:bd:b3:42:c2:86:ff:15:53:b1:a2:73:e4:3e:
35:09:92:33:3c:94:d4:bd:db:5e:02:8d:6c:4f:14:e1:45:b7:
91:e4:bb:e8:46:16:d7:bc:a7:1b:9f:71:39:dc:f4:4b:98:90:
96:95:c3:d2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgIECBHQlDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
MTE4NGZiNjUwM2E3NjA2NTdmOTAyNzBlMjc2YTNmY2I1MGI4ZThmMB4XDTIyMDEw
MTAxNTUxMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjBlN2VjODVhOTA4
MmZkN2I5ZWNjNmQwYmRmNjQ5OTEzYWNlYTVmZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJTlGv8LXHALP7GvvxrUtRNTsq5JeunLUaKNGjfdB52g0m3o
1KtFtXRJ8y1lI/r3mUs+cXitY8VmoQlzIOQnfnJGiOXDFYT78G6PaWLm0/iJo/gN
EFr2tjC3+sUDaQx6y3Yvc5wjKTapG6drzIlY2n/xmt3cs/Mg4vbzNaZLZdpI1LQd
QrAvzEPQ06jp/Arm7Ipq3gauBolQZsslRWlcQY0+HYfAao1Rzuwf3HKzVNbq43GI
AXsQ7kkyzZiJWUWvnsD5oJS9KLg83Mw1yE5zJM+9Heuv4KrR7afYDmS9j328VlIO
PbrX7vEPB5J4ir+/DM5+4bypF7nGJdsVIwHg50cCAwEAAaOCAhcwggITMB0GA1Ud
DgQWBBRg5+yFqQgv17nsxtC99kmROs6l/TAfBgNVHSMEGDAWgBQRGE+2UDp2Blf5
AnDidqP8tQuOjzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0VSaFB0bEE2ZGdaWC1RSnc0bmFqX0xVTGpvOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWYvMzNhNzMzLWVmMDUtNGFmMC04NTM1LTE5NmQ2NjZkMmIyYi8x
L1lPZnNoYWtJTDllNTdNYlF2ZlpKa1RyT3BmMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWYv
MzNhNzMzLWVmMDUtNGFmMC04NTM1LTE5NmQ2NjZkMmIyYi8xL0VSaFB0bEE2ZGda
WC1RSnc0bmFqX0xVTGpvOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAt
BggrBgEFBQcBBwEB/wQeMBwwGgQCAAEwFAMEAMFu0DAMAwQBwW7SAwQDwW7QMA0G
CSqGSIb3DQEBCwUAA4IBAQCYNUlhiaqhgrfOSlDv9XQDip9lq/yLQxbQuAY6cTlV
58aO7Xk1wCLXUfHw9C3yhCBYQOyx+CPXdJ2BsXXIjDGGtSwxNMIjL0LT87NYYgBT
EuoGeKmYtmtXVKKfzN8tsA/egFYB2dKSnbSAaiQ1TKomgMy0b1mesgTQdR7530nE
tnZmxXv6rR+tW9OrM1eIBB9DpfBiW27kYacduZNrxCE4VcjJuqNo98ZxzY7+rUTi
m//Kd2AOpDpUKn5b5/zBrbVgPgURHQtvw5UWSL2zQsKG/xVTsaJz5D41CZIzPJTU
vdteAo1sTxThRbeR5LvoRhbXvKcbn3E53PRLmJCWlcPS
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:28 2024 by rpki-client on console-ams.rpki-client.org