Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/yBloyY6F9RE_daMuc5INC8DsB7w.roa
File: yBloyY6F9RE_daMuc5INC8DsB7w.roa (raw, json)
Hash identifier: cVUIOopI8XJ2e6oLeaQB2LSSUsVvrGzfWMUmA4QVG10=
Subject key identifier: C8:19:68:C9:8E:85:F5:11:3F:75:A3:2E:73:92:0D:0B:C0:EC:07:BC
Certificate issuer: /CN=ebf760c05773c15d73676450344668fefb723447
Certificate serial: 0CF3FD27
Authority key identifier: EB:F7:60:C0:57:73:C1:5D:73:67:64:50:34:46:68:FE:FB:72:34:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/yBloyY6F9RE_daMuc5INC8DsB7w.roa
Signing time: Mon 17 Jan 2022 08:50:47 +0000
ROA not before: Mon 17 Jan 2022 08:50:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50597
IP address blocks: 85.194.198.0/24 maxlen: 24
85.194.197.0/24 maxlen: 24
85.194.199.0/24 maxlen: 24
85.194.196.0/22 maxlen: 22
85.194.196.0/24 maxlen: 24
37.98.226.0/24 maxlen: 24
37.98.225.0/24 maxlen: 24
37.98.224.0/24 maxlen: 24
37.98.224.0/21 maxlen: 21
37.98.228.0/24 maxlen: 24
37.98.227.0/24 maxlen: 24
37.98.230.0/24 maxlen: 24
37.98.229.0/24 maxlen: 24
37.98.231.0/24 maxlen: 24
109.205.112.0/24 maxlen: 24
109.205.115.0/24 maxlen: 24
109.205.118.0/24 maxlen: 24
109.205.114.0/23 maxlen: 23
109.205.114.0/24 maxlen: 24
109.205.117.0/24 maxlen: 24
109.205.116.0/24 maxlen: 24
109.205.112.0/21 maxlen: 21
109.205.113.0/24 maxlen: 24
185.76.32.0/24 maxlen: 24
185.76.32.0/22 maxlen: 22
185.76.34.0/24 maxlen: 24
185.76.33.0/24 maxlen: 24
185.76.35.0/24 maxlen: 24
109.205.119.0/24 maxlen: 24
85.113.91.0/24 maxlen: 24
85.113.90.0/23 maxlen: 23
85.113.90.0/24 maxlen: 24
2a05:55c1:e::/48 maxlen: 48
2a05:55c1:4::/48 maxlen: 48
2a05:55c1:6::/48 maxlen: 48
2a05:55c1:1::/48 maxlen: 48
2a05:55c0::/29 maxlen: 29
2a05:55c1:3::/48 maxlen: 48
2a05:55c1:5::/48 maxlen: 48
2a05:55c1:2::/48 maxlen: 48
2a05:55c1:7::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 217316647 (0xcf3fd27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebf760c05773c15d73676450344668fefb723447
Validity
Not Before: Jan 17 08:50:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c81968c98e85f5113f75a32e73920d0bc0ec07bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e7:75:1d:0e:b5:bc:5a:79:3e:1f:b1:f0:91:
4a:29:06:e9:04:e4:d7:90:fa:a1:42:e9:7c:2c:43:
3f:60:31:e5:39:b2:97:1d:b7:32:31:aa:5e:d7:ca:
3f:2a:c8:42:b1:e7:52:74:9b:3a:f2:3f:0a:e2:2c:
37:9a:5c:64:49:98:33:eb:bb:a5:ae:4a:dc:52:df:
2f:22:8e:79:1f:c9:6c:59:d8:f1:1b:95:1c:eb:27:
a9:cd:b2:d3:98:aa:6c:55:df:a6:d6:a7:4b:6e:c7:
0c:0d:dd:d0:49:0e:19:cc:1a:bd:a9:fa:73:29:5b:
62:ca:66:55:56:33:2b:21:63:99:29:72:dd:df:df:
9b:a3:15:68:95:d9:eb:8a:8a:a6:b3:33:a3:3b:33:
9d:38:ad:19:f4:de:0c:6e:45:2e:80:57:45:3b:32:
4d:94:e5:66:7a:ed:ab:c6:43:5b:40:bd:bd:a3:5a:
9c:d2:53:88:43:06:57:92:2d:b3:3c:9a:5d:06:59:
f8:c7:46:79:78:60:ca:01:5e:8d:e1:95:ca:4c:44:
c3:ab:1b:52:57:af:5e:cc:77:ef:e9:a3:bf:e2:a7:
e8:ca:e5:82:14:bd:04:e5:ab:d4:4c:47:8e:e8:50:
67:07:c3:ed:9c:a6:8e:01:a5:9c:3f:d5:bd:75:f1:
4c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:19:68:C9:8E:85:F5:11:3F:75:A3:2E:73:92:0D:0B:C0:EC:07:BC
X509v3 Authority Key Identifier:
keyid:EB:F7:60:C0:57:73:C1:5D:73:67:64:50:34:46:68:FE:FB:72:34:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/yBloyY6F9RE_daMuc5INC8DsB7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.98.224.0/21
85.113.90.0/23
85.194.196.0/22
109.205.112.0/21
185.76.32.0/22
IPv6:
2a05:55c0::/29
Signature Algorithm: sha256WithRSAEncryption
78:b8:bf:44:66:2e:75:fe:2e:82:c2:65:19:e3:f9:28:cf:93:
8f:55:d2:9c:b1:b5:5a:52:75:ba:6c:45:77:a4:27:5c:e8:48:
fa:12:a6:c1:b4:cf:57:ea:57:ef:81:84:56:9b:f7:08:a1:12:
8d:70:ce:13:a2:dc:4d:16:99:11:d8:ab:0a:fe:7d:61:f7:32:
a0:94:28:d0:65:95:d6:28:57:df:5e:bd:28:db:5a:0d:d7:7a:
ab:82:06:12:9c:62:6e:43:d3:2c:f0:d3:a9:c9:9c:f5:00:f6:
06:06:9e:b8:1f:8e:3a:f6:eb:f7:28:6e:c1:eb:a5:46:f9:5a:
72:12:0e:61:be:1b:93:82:fc:36:77:d5:bd:16:42:a3:9c:a0:
a1:67:95:7c:e3:eb:83:5a:a7:42:d2:4f:bb:80:82:4c:b4:91:
a1:fe:ea:a0:88:3e:42:c0:f0:a3:f6:36:47:88:af:12:01:bb:
d0:b8:0b:f4:7b:79:97:42:3a:5d:8c:d5:9e:07:0a:65:c2:97:
85:6c:8f:7a:d3:8d:4f:87:9c:c2:aa:d3:62:75:53:be:f4:c1:
00:2b:d3:4a:b5:12:ac:fc:7b:1d:8e:2b:be:8c:44:76:88:3e:
8f:d8:c2:6a:0d:ac:f7:f9:25:f8:98:d3:30:f3:82:3a:c9:30:
7d:76:81:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:57 2023 by rpki-client on console-ams.rpki-client.org