Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/yFKP0j6Q82MWmEiXkiF2d6Lp5I8.roa
File: yFKP0j6Q82MWmEiXkiF2d6Lp5I8.roa (raw, json)
Hash identifier: qTQthZutPPr4F3euR+27crI0VHudeZQI1Z0GeN7x8EM=
Subject key identifier: C8:52:8F:D2:3E:90:F3:63:16:98:48:97:92:21:76:77:A2:E9:E4:8F
Certificate issuer: /CN=63495a4cecbeafb3eadf6ed0349bb0b96da464ee
Certificate serial: 0132B9
Authority key identifier: 63:49:5A:4C:EC:BE:AF:B3:EA:DF:6E:D0:34:9B:B0:B9:6D:A4:64:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0laTOy-r7Pq327QNJuwuW2kZO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/yFKP0j6Q82MWmEiXkiF2d6Lp5I8.roa
Signing time: Fri 27 May 2022 09:43:13 +0000
ROA not before: Fri 27 May 2022 09:43:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6908
IP address blocks: 185.215.36.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78521 (0x132b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63495a4cecbeafb3eadf6ed0349bb0b96da464ee
Validity
Not Before: May 27 09:43:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c8528fd23e90f3631698489792217677a2e9e48f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:56:87:33:4f:06:1f:da:52:ee:2e:0c:c8:ca:
88:02:50:e0:1a:6a:f4:f3:7d:64:95:57:2b:63:a0:
ed:75:99:14:52:84:d7:e1:d6:70:d2:bd:41:a4:5a:
e5:ab:19:70:58:e4:8e:de:05:bb:78:15:fe:20:7d:
20:1b:d6:de:7b:9c:8e:7e:ca:68:7c:fa:91:fe:d2:
a6:d3:2e:89:91:c7:6c:58:02:bf:25:ca:35:f8:66:
24:ac:57:a8:fe:83:ec:25:3c:cb:54:2e:e3:5b:f2:
fc:31:fc:ec:5e:26:d1:0e:bc:78:4b:a2:c0:b1:02:
5f:af:ea:3f:c0:10:d9:c5:e6:bc:5d:91:5b:4b:3d:
b4:2d:be:80:3b:c9:28:62:8d:7b:dc:b5:d7:fd:70:
1c:a9:24:61:d8:45:73:56:8d:f9:1b:18:e9:60:89:
91:b4:b1:40:b1:2c:9a:90:be:df:12:4d:53:1a:87:
30:6f:c0:2c:cd:d6:2f:a6:cf:35:38:62:d1:ca:e2:
70:43:eb:c2:9c:5c:9f:fe:82:c5:07:5b:06:62:bb:
e7:ce:60:b2:14:39:fd:2a:a0:48:ff:1f:cd:d6:af:
ac:40:ed:88:aa:3d:71:d4:63:e8:df:92:67:52:64:
4d:40:01:c4:52:27:38:b8:39:94:b0:91:eb:3d:17:
a3:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:52:8F:D2:3E:90:F3:63:16:98:48:97:92:21:76:77:A2:E9:E4:8F
X509v3 Authority Key Identifier:
keyid:63:49:5A:4C:EC:BE:AF:B3:EA:DF:6E:D0:34:9B:B0:B9:6D:A4:64:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0laTOy-r7Pq327QNJuwuW2kZO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/yFKP0j6Q82MWmEiXkiF2d6Lp5I8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.215.36.0/22
Signature Algorithm: sha256WithRSAEncryption
61:6e:dc:18:56:e5:9d:14:00:86:be:63:2b:96:70:05:11:a9:
31:fd:32:32:9b:65:a2:68:ed:ac:59:6d:35:27:83:c9:d1:dc:
d3:7c:ce:96:53:b4:22:b0:3f:e8:56:42:60:51:64:92:05:8f:
62:cf:26:d4:4f:e4:b0:50:51:f0:dc:e7:f5:20:2d:f5:27:91:
96:50:d3:46:0a:04:77:bc:74:13:9f:18:63:a5:54:37:66:94:
a4:9d:25:78:ec:e7:d8:ea:4b:26:a9:e6:aa:25:33:ab:31:f9:
bf:4e:e5:1b:33:d7:1e:c9:41:9f:4a:61:ef:7d:9d:e3:0b:11:
a7:69:78:f7:7e:55:1f:7c:4d:73:1d:aa:79:11:d7:b8:47:9d:
d5:71:12:67:27:dc:2c:0a:bd:b7:6c:23:62:ec:00:64:2a:74:
5a:8e:d8:4a:13:fa:01:0c:7f:f1:e3:2b:87:5f:5d:ad:cf:0b:
6f:ea:30:99:48:2f:e5:39:9d:22:f6:19:ea:84:2b:10:a8:87:
26:cb:d4:58:bb:8c:a0:aa:7f:25:2f:be:b9:59:5b:fe:59:75:
9e:80:98:08:8a:07:7d:cc:a7:b7:d0:86:a2:c7:9b:2c:b8:f6:
9c:61:b8:79:6f:75:75:57:80:73:bb:97:6a:83:63:29:97:63:
57:16:b8:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:07:37 2025 by rpki-client