Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/SsY9AyIT7on4rkddWwejUttpFpY.roa
File: SsY9AyIT7on4rkddWwejUttpFpY.roa (raw, json)
Hash identifier: TzYAOIAgOMY6y3HG1kpKZB/njxcIqoQnPHKDBFVIqFw=
Subject key identifier: 4A:C6:3D:03:22:13:EE:89:F8:AE:47:5D:5B:07:A3:52:DB:69:16:96
Certificate issuer: /CN=552ad3a0b4b74e85af54f58ad75a3026b7df7181
Certificate serial: 0E0E52A8
Authority key identifier: 55:2A:D3:A0:B4:B7:4E:85:AF:54:F5:8A:D7:5A:30:26:B7:DF:71:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VSrToLS3ToWvVPWK11owJrffcYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/SsY9AyIT7on4rkddWwejUttpFpY.roa
Signing time: Sat 01 Jan 2022 14:08:28 +0000
ROA not before: Sat 01 Jan 2022 14:08:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15426
IP address blocks: 89.255.17.0/24 maxlen: 24
217.67.239.0/24 maxlen: 24
185.157.61.0/24 maxlen: 24
185.157.63.0/24 maxlen: 24
185.157.60.0/24 maxlen: 24
185.157.62.0/24 maxlen: 24
2a03:1a00::/32 maxlen: 32
2a0a:1880::/29 maxlen: 29
2a07:a380::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 235819688 (0xe0e52a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=552ad3a0b4b74e85af54f58ad75a3026b7df7181
Validity
Not Before: Jan 1 14:08:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4ac63d032213ee89f8ae475d5b07a352db691696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:68:2a:c0:80:c5:67:5e:4a:63:39:17:27:c9:
ab:fd:06:47:32:ce:b2:4c:9e:1e:0c:63:46:18:73:
33:98:10:53:ac:df:a3:72:bf:83:5b:ec:04:bb:54:
ac:5d:f6:0e:25:12:ec:ad:9c:21:76:3c:28:9e:24:
c6:85:e6:cf:0d:0a:4f:95:b9:b2:38:39:1f:30:64:
43:d2:c3:9e:90:34:2f:ac:d9:af:61:79:43:61:08:
ab:9d:17:bf:66:64:96:dd:32:d7:ca:e6:4e:fc:d0:
11:4e:45:21:61:8d:67:cd:45:fe:41:67:da:b7:ba:
bb:0b:a8:8a:83:db:5f:e1:ac:56:98:af:e9:3d:87:
7f:1f:bb:71:fd:d8:a5:a9:26:e7:3a:87:46:cd:4e:
26:e6:d6:f4:f7:ee:71:f1:ee:df:76:15:0b:fd:e9:
d9:62:a5:41:2b:ff:29:d4:13:7c:b5:c2:d3:12:60:
7b:ee:46:85:fb:73:20:b9:6d:50:44:4c:b4:95:00:
62:23:ae:ef:32:3d:6f:f0:fd:4c:7b:67:11:60:09:
39:60:7b:7c:17:34:9c:79:48:c2:b1:fa:bf:3b:7b:
bc:4b:32:3b:e0:ce:ca:20:2f:31:a5:42:7f:31:e7:
1a:93:69:9a:02:4e:71:75:22:22:3e:cf:5c:f0:a3:
61:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:C6:3D:03:22:13:EE:89:F8:AE:47:5D:5B:07:A3:52:DB:69:16:96
X509v3 Authority Key Identifier:
keyid:55:2A:D3:A0:B4:B7:4E:85:AF:54:F5:8A:D7:5A:30:26:B7:DF:71:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSrToLS3ToWvVPWK11owJrffcYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/SsY9AyIT7on4rkddWwejUttpFpY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.255.17.0/24
185.157.60.0/22
217.67.239.0/24
IPv6:
2a03:1a00::/32
2a07:a380::/29
2a0a:1880::/29
Signature Algorithm: sha256WithRSAEncryption
40:63:70:da:07:3e:e8:ec:1f:c8:52:4f:e3:e8:aa:2d:db:33:
9e:6d:8b:b2:d4:e4:16:c9:7d:bc:f7:a7:af:9f:52:78:5f:c9:
39:93:9b:55:7d:05:48:27:4b:26:6e:a1:3c:e2:42:dc:4c:a6:
04:f3:87:8b:74:44:65:8d:c4:a1:3c:d2:b4:84:5b:d2:09:8a:
7b:42:70:cd:e7:e8:77:5f:1e:28:bf:52:ba:79:6d:b2:65:36:
9e:c0:96:78:ac:c0:b6:a1:e8:8d:ad:51:a2:b6:d1:da:e8:97:
93:37:2d:d2:62:b8:19:af:7d:b7:5f:77:8b:7e:c3:aa:78:59:
f2:c1:9a:d3:f4:d7:f9:e5:ec:03:e3:04:e1:18:c0:44:d8:02:
1c:c5:5f:71:bb:84:07:83:c5:31:97:20:b0:94:7f:e5:ce:68:
0d:41:0e:78:bd:db:ce:e9:6d:16:d8:73:7d:b6:0d:50:50:d7:
7b:d3:30:dc:0d:f0:3d:f7:a5:23:de:b8:db:a0:12:ee:dd:90:
9b:d4:a2:9c:b5:62:fb:35:70:46:83:66:05:e3:73:b0:33:72:
9c:30:65:bc:33:63:0a:1a:b3:e1:7b:5a:94:56:0f:1f:be:f0:
db:08:fe:f2:a4:0a:ec:fe:f8:e8:e9:1c:fb:79:d1:08:07:3d:
30:72:f1:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:51 2023 by rpki-client on console-ams.rpki-client.org