Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/yjcugePpY-5x7Wpqs78h2n3-Q04.roa
File: yjcugePpY-5x7Wpqs78h2n3-Q04.roa (raw, json)
Hash identifier: dXGlyddeudI8TYAHDF+ZlvDyLvXRGry5sB4KaDnd8D4=
Subject key identifier: CA:37:2E:81:E3:E9:63:EE:71:ED:6A:6A:B3:BF:21:DA:7D:FE:43:4E
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 37A4E164
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/yjcugePpY-5x7Wpqs78h2n3-Q04.roa
Signing time: Sat 01 Jan 2022 08:55:48 +0000
ROA not before: Sat 01 Jan 2022 08:55:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51235
IP address blocks: 81.12.56.0/23 maxlen: 23
87.107.139.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 933552484 (0x37a4e164)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Jan 1 08:55:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ca372e81e3e963ee71ed6a6ab3bf21da7dfe434e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:18:64:0a:4e:db:48:57:7f:76:09:ea:0a:6b:
8a:e2:a0:db:5a:1c:3e:b0:a5:2b:52:ef:db:00:4e:
b0:f6:d0:eb:dd:4f:ed:e2:61:9a:96:47:d4:7b:dc:
1f:c0:58:7a:b7:c2:26:ce:e3:8d:61:bf:72:28:f3:
26:9e:77:9a:53:a4:ce:70:e5:d1:7b:bb:f3:b0:41:
ad:76:6a:49:11:c5:ac:78:fc:1f:47:6e:c2:ae:48:
3e:54:db:9d:a3:85:c8:7e:2d:0f:69:f9:53:19:37:
70:f3:a1:3c:f8:3c:94:8d:52:1c:43:c8:69:26:83:
e4:35:3c:34:ac:ca:9b:3a:bc:0d:11:72:a9:09:11:
ec:78:8a:37:a2:3b:b9:59:9e:55:6f:ee:f9:d7:96:
f4:8f:4b:e9:cf:5f:6d:3b:5c:6f:8e:51:30:8f:f5:
e3:96:d6:af:15:2b:06:53:05:93:f3:1e:2d:b5:ad:
81:4f:1f:e8:c0:4b:46:27:9c:6e:47:b8:48:58:24:
93:ff:19:eb:cc:f8:2b:1c:24:5b:e0:be:f7:70:57:
11:38:68:0c:28:2e:e5:3f:92:a2:60:38:54:2e:64:
4e:d2:8f:db:a6:cb:e9:83:aa:e6:c4:87:26:c6:94:
97:34:2e:5d:62:8e:4c:ab:7e:d5:96:a0:9e:f0:ed:
41:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:37:2E:81:E3:E9:63:EE:71:ED:6A:6A:B3:BF:21:DA:7D:FE:43:4E
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/yjcugePpY-5x7Wpqs78h2n3-Q04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.12.56.0/23
87.107.139.0/24
Signature Algorithm: sha256WithRSAEncryption
16:88:2b:7a:3f:b7:92:f7:78:07:f2:30:50:30:c2:78:16:7c:
aa:c3:72:16:a6:dd:a1:b0:9e:7b:df:21:d1:48:99:d3:7a:dd:
79:ff:92:60:90:c7:96:05:96:17:64:58:f0:84:be:3e:82:83:
25:cf:03:06:ea:db:82:37:ce:89:6a:e2:77:04:5d:ad:5b:d7:
df:6c:d7:d9:23:fc:49:2c:64:54:dd:2b:46:be:03:79:0c:37:
fd:ec:19:45:23:7f:98:85:90:d9:cd:8d:c7:eb:27:46:21:d2:
e4:24:93:91:29:3c:c7:02:14:d9:7a:ac:f1:dd:2f:93:9d:2f:
14:55:67:08:28:ae:29:00:e4:3f:b2:22:0b:c4:ff:fc:70:19:
30:31:ef:1e:84:2d:95:6b:36:d7:04:bd:d3:72:22:f0:80:a6:
20:29:d1:ee:29:8b:11:77:10:4e:c7:f2:46:41:2a:cb:b2:f4:
d9:ce:62:ed:2e:41:9f:71:e5:05:ca:b2:e0:39:1e:97:29:fc:
b3:80:53:51:61:98:0c:27:28:31:b5:0c:75:fd:56:3b:ba:92:
dc:df:10:0f:d4:85:55:29:94:a2:5a:7d:24:39:38:d7:12:09:
b4:0a:da:18:b0:9e:60:b8:b6:8a:11:9c:11:c4:61:e5:ca:12:
39:69:c7:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:33 2023 by rpki-client on console-ams.rpki-client.org