Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/YIzU1_UQH3SYzNgMOSFCmEBSZkA.roa
File: YIzU1_UQH3SYzNgMOSFCmEBSZkA.roa (raw, json)
Hash identifier: pKrkt+QM5IDku0DpJ1pZRSuHkGx6kNlHm8GA5GYkowo=
Subject key identifier: 60:8C:D4:D7:F5:10:1F:74:98:CC:D8:0C:39:21:42:98:40:52:66:40
Certificate issuer: /CN=db83f54f45131d9207c215a098a2a6bcd6ff050b
Certificate serial: 4F05F9
Authority key identifier: DB:83:F5:4F:45:13:1D:92:07:C2:15:A0:98:A2:A6:BC:D6:FF:05:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/24P1T0UTHZIHwhWgmKKmvNb_BQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/YIzU1_UQH3SYzNgMOSFCmEBSZkA.roa
Signing time: Fri 20 May 2022 11:57:48 +0000
ROA not before: Fri 20 May 2022 11:57:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6461
IP address blocks: 193.34.72.0/23 maxlen: 23
193.34.74.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5178873 (0x4f05f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db83f54f45131d9207c215a098a2a6bcd6ff050b
Validity
Not Before: May 20 11:57:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=608cd4d7f5101f7498ccd80c3921429840526640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bd:ad:f0:b4:0b:33:7c:82:ed:d8:2b:24:92:
e6:63:a1:9c:4d:e6:6f:fc:8f:34:0a:08:c8:fa:65:
87:86:c5:8b:29:42:ff:5f:27:ad:67:d3:5a:3c:8c:
78:4f:b8:ee:04:a2:12:8e:95:bc:0b:6d:f6:94:2d:
f0:a4:b9:72:e9:2c:bb:57:04:a9:0c:ff:bd:e1:c0:
5d:56:e7:2c:70:6e:0e:9f:88:a1:d1:84:70:02:ea:
4f:e8:31:aa:41:d3:b0:73:c8:8d:6c:bb:1d:c9:42:
19:e7:73:47:de:47:81:a3:bd:2f:49:ea:a6:57:93:
15:8a:7f:14:63:56:49:91:2b:db:4d:e6:53:b9:8d:
33:e4:ea:d5:fd:8a:a9:7f:33:2e:7f:3b:ed:e8:e6:
35:35:37:e7:d7:22:f5:90:8d:7c:82:0b:6c:e5:fd:
d4:65:43:b2:6a:a6:3e:56:b8:4a:9b:70:c8:55:b4:
b1:af:ae:e6:1c:68:95:a4:e5:64:17:6d:81:a2:e3:
4d:24:e9:9b:58:48:a6:3d:e6:19:71:07:3b:93:c0:
b1:e4:75:8c:69:17:99:ce:68:66:d3:82:3f:c0:6f:
6b:98:7b:0f:c2:5b:56:0f:95:38:f4:e4:1d:fd:4a:
07:89:c4:f1:9f:35:cd:ae:39:86:51:76:5b:90:4e:
0f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:8C:D4:D7:F5:10:1F:74:98:CC:D8:0C:39:21:42:98:40:52:66:40
X509v3 Authority Key Identifier:
keyid:DB:83:F5:4F:45:13:1D:92:07:C2:15:A0:98:A2:A6:BC:D6:FF:05:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/24P1T0UTHZIHwhWgmKKmvNb_BQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/YIzU1_UQH3SYzNgMOSFCmEBSZkA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.34.72.0/22
Signature Algorithm: sha256WithRSAEncryption
9c:a9:df:95:a3:e2:83:ad:f0:7a:05:0d:76:6d:8c:64:13:c8:
f3:92:8a:01:c1:8d:a8:6a:a3:c2:69:c9:2e:66:17:00:bd:b8:
fa:07:aa:02:cc:6b:96:11:27:17:a4:41:c1:c9:9c:6c:fb:2a:
1e:71:45:5f:86:92:05:ed:d7:e9:4a:44:4d:d8:7e:1c:7d:a8:
e5:88:b1:5f:f2:db:1a:16:8a:88:ae:d0:11:62:a7:96:20:9e:
8b:99:88:f2:85:2e:8f:7c:f8:a2:d5:c2:f5:0e:66:de:33:fe:
f1:15:56:50:80:8a:24:02:e7:94:41:02:9b:7d:1a:8d:09:0c:
a4:b8:c1:39:d8:64:52:b6:72:7a:cf:58:fa:94:43:de:33:2f:
0a:31:88:53:f2:d0:5e:bc:48:1b:09:d6:82:05:84:f8:5a:fc:
23:f6:6c:c0:a4:05:d0:80:35:3e:44:72:20:b5:40:55:ad:e6:
27:82:c7:45:23:4e:7a:b8:90:d5:e7:39:ea:87:0a:53:3e:f0:
57:15:a4:eb:51:e6:d6:6d:19:18:01:4e:6f:a3:ab:a9:57:bb:
c0:7d:cb:7c:bb:01:ee:fc:da:4a:f3:57:c2:15:b8:72:aa:43:
94:3f:4d:1d:dd:d7:59:fa:23:f0:08:7d:79:84:00:1e:73:98:
44:91:c9:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:06 2024 by rpki-client on console-fra.rpki-client.org