Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/YeOhiW40bLbgK_YSlCcNqS_p95E.roa
File: YeOhiW40bLbgK_YSlCcNqS_p95E.roa (raw, json)
Hash identifier: JRp1GcpK1+z0y0jbsxdVbYLoQAA9WTCZc0nEObgq0c4=
Subject key identifier: 61:E3:A1:89:6E:34:6C:B6:E0:2B:F6:12:94:27:0D:A9:2F:E9:F7:91
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018210C2FC58020BD95D4CF3A2FD7BEE0B11
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/YeOhiW40bLbgK_YSlCcNqS_p95E.roa
Signing time: Mon 18 Jul 2022 10:03:10 +0000
ROA not before: Mon 18 Jul 2022 10:03:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210558
IP address blocks: 45.92.1.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:10:c2:fc:58:02:0b:d9:5d:4c:f3:a2:fd:7b:ee:0b:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jul 18 10:03:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=61e3a1896e346cb6e02bf61294270da92fe9f791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:36:41:aa:a2:0e:7a:1e:85:ab:b6:0c:9a:e9:
30:94:4b:eb:b1:92:a6:b6:57:fe:9c:b0:41:00:1d:
b7:3a:c5:80:c3:fb:6d:39:ac:7d:3d:46:57:a1:2e:
cf:0c:1e:30:e4:ba:c2:3b:08:46:6b:78:74:13:c1:
77:a9:9f:c5:55:b7:bc:89:2e:ef:42:00:8e:c2:d3:
c1:a2:47:d3:ff:4d:24:61:8a:3e:cd:63:31:b7:30:
58:6b:82:e8:2b:a1:af:17:18:e6:4c:f7:37:e1:4f:
89:e8:18:9c:9b:3d:ee:46:96:8f:95:d1:e7:e8:fd:
27:95:8a:b2:fa:72:30:99:5e:8d:3c:2d:5b:22:6f:
8b:81:22:53:b8:0c:f5:8f:8b:40:e7:d1:1e:9b:ba:
b6:e2:e5:d5:12:18:5b:15:53:ae:5a:42:2d:1a:01:
17:d0:77:cb:8d:13:bd:a5:06:54:65:c0:55:48:17:
c4:f4:18:79:70:51:68:3d:66:bf:2a:37:a4:d1:be:
3d:47:2b:3f:51:dd:a8:66:80:9e:6e:ee:d6:4c:3d:
3c:b5:e6:1c:87:aa:82:88:31:0c:b5:6d:7b:c9:f5:
c9:b7:91:76:1f:43:f3:5d:39:ff:25:04:36:b9:db:
c8:76:3f:90:26:b1:26:d9:44:d6:96:e2:e6:38:b2:
f1:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:E3:A1:89:6E:34:6C:B6:E0:2B:F6:12:94:27:0D:A9:2F:E9:F7:91
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/YeOhiW40bLbgK_YSlCcNqS_p95E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.1.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:5d:58:68:e1:b3:23:d0:59:98:ba:9a:27:c3:b8:98:d8:96:
8d:b0:33:7b:09:5b:d0:b8:6a:ee:1b:4a:a0:f8:b6:63:9c:8c:
f4:70:3c:49:e0:66:67:f5:4d:36:c8:f6:01:f6:5b:22:b8:32:
25:80:58:77:96:47:89:0e:8e:dc:53:0c:89:16:80:45:b6:72:
f2:9a:46:3a:9d:a4:8e:ef:cb:20:dc:a7:b8:08:97:d9:d7:c1:
34:ea:9e:20:25:d5:a7:a2:6f:18:42:59:46:08:8d:6e:40:dd:
52:ac:48:13:13:0d:e5:20:d6:37:61:6d:e8:e9:d1:04:6b:81:
b8:be:70:2d:26:1a:30:80:1f:d0:de:a2:61:3e:be:af:31:5f:
f1:a3:77:28:da:5e:b4:9b:19:d4:bb:e2:d6:b8:9f:69:a1:4e:
03:b1:c2:e3:bc:06:f4:11:22:82:e5:55:df:6a:f4:c5:88:c1:
c1:6f:3d:a5:36:0e:0f:29:9b:78:d1:d3:f7:c1:72:65:db:0c:
ff:bb:e3:aa:b9:7d:21:ae:ce:e1:3b:ae:d6:cb:71:e1:d1:ec:
1e:3f:a4:e3:a3:31:d7:d7:81:8d:38:f3:c1:9b:70:9e:54:48:
43:d5:7a:85:06:6f:a1:1c:0d:65:e0:80:3a:ae:fd:70:f0:e8:
83:02:40:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:02 2023 by rpki-client on console-fra.rpki-client.org