Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/bYau_p-57gQdNtyxYowIx3eVZgI.roa
File: bYau_p-57gQdNtyxYowIx3eVZgI.roa (raw, json)
Hash identifier: ovu6k4EBcpUbY7L5TNKhv88bK86Ji2VJ0zfmfRjNd0w=
Subject key identifier: 6D:86:AE:FE:9F:B9:EE:04:1D:36:DC:B1:62:8C:08:C7:77:95:66:02
Certificate issuer: /CN=653f55629121b60fb19c97f99c75dd6f015dd6e8
Certificate serial: 3673CA2C
Authority key identifier: 65:3F:55:62:91:21:B6:0F:B1:9C:97:F9:9C:75:DD:6F:01:5D:D6:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/bYau_p-57gQdNtyxYowIx3eVZgI.roa
Signing time: Mon 27 Jun 2022 03:53:49 +0000
ROA not before: Mon 27 Jun 2022 03:53:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31742
IP address blocks: 195.153.124.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 913558060 (0x3673ca2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=653f55629121b60fb19c97f99c75dd6f015dd6e8
Validity
Not Before: Jun 27 03:53:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6d86aefe9fb9ee041d36dcb1628c08c777956602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:bc:4d:d8:76:3e:3b:02:8e:a6:d4:20:db:93:
f5:73:ef:97:f2:13:fb:91:7f:fc:18:07:85:0d:07:
ff:b7:8f:d2:fb:7f:23:06:85:c5:69:6a:0f:ef:57:
f6:5c:e0:4a:79:d3:02:2d:97:af:cb:73:f8:e1:8d:
0f:77:60:30:5a:6d:3f:51:c2:2c:1e:2e:fb:fe:92:
cb:dc:25:e8:4c:35:f3:8f:f3:e7:51:8c:a2:33:9d:
3b:fa:35:d1:6d:c9:4c:66:b3:3d:cd:c4:af:3c:7e:
ef:e2:2a:82:73:30:41:2b:3c:5d:31:1d:48:ea:9a:
75:28:ed:99:f6:14:6b:42:54:10:69:40:0b:65:24:
b2:7c:84:f1:69:3c:f7:87:5f:c6:3b:08:55:89:47:
7b:7e:b8:33:54:c0:24:1b:dc:90:db:db:48:26:d3:
6e:bb:8d:ad:69:86:a8:8f:1e:82:33:42:0f:99:33:
c7:d6:b8:d1:e5:79:46:a2:4b:e7:eb:7d:fe:35:59:
2b:cb:db:9d:dc:09:0e:0e:08:f9:8c:34:f3:57:10:
a8:cb:69:09:e4:57:07:c4:8a:98:e2:e0:99:1a:81:
05:04:88:26:81:3b:8b:6a:3d:d1:5b:8d:a7:5f:df:
4b:58:70:12:3f:6d:50:ac:ac:a8:6c:91:3e:53:13:
3d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:86:AE:FE:9F:B9:EE:04:1D:36:DC:B1:62:8C:08:C7:77:95:66:02
X509v3 Authority Key Identifier:
keyid:65:3F:55:62:91:21:B6:0F:B1:9C:97:F9:9C:75:DD:6F:01:5D:D6:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/bYau_p-57gQdNtyxYowIx3eVZgI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.153.124.0/24
Signature Algorithm: sha256WithRSAEncryption
88:3b:ef:88:f5:55:01:10:40:07:cf:bb:c4:ce:9a:0f:db:2f:
80:a3:6e:6f:0b:e7:da:a2:8e:49:2f:6c:8c:af:5e:fd:bd:0f:
d9:f8:86:37:97:2e:c2:22:63:3b:b5:ee:ab:bb:19:2f:eb:b2:
0e:3f:4c:2b:e6:53:96:50:1a:b4:d3:a7:1d:af:30:e3:6a:d4:
4d:57:9f:b2:11:a8:62:7e:de:e7:27:4c:df:77:0a:27:55:e8:
35:98:f4:b6:66:aa:9b:97:c2:d9:d2:a5:44:0d:84:b0:b1:24:
40:5b:c4:b2:4c:72:97:c1:ad:c0:f7:17:05:28:56:de:50:a8:
70:e4:1c:12:c2:b1:ca:77:88:1a:98:86:8e:8f:c1:05:a8:6f:
5c:b3:7d:03:59:4b:2e:f3:17:72:9e:7c:24:f6:fa:a8:a2:4f:
7c:fc:72:56:03:2d:45:9a:2b:68:30:bb:15:fb:7f:5b:d3:dd:
29:bd:e8:3e:de:c3:10:41:f2:c2:52:79:31:5f:3b:74:0e:5c:
77:3e:62:9e:99:cc:ad:3f:25:4b:5d:5b:d2:b1:83:f3:9c:78:
c6:5c:2b:ac:fe:96:ac:98:50:31:a4:21:e1:13:8f:a5:49:48:
cd:01:de:53:68:b3:ed:90:ab:ca:69:79:64:79:08:05:08:8a:
08:88:1d:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:15 2024 by rpki-client on console-fra.rpki-client.org