Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/YiG7L85QItZe7crAbw_KP5TqJbc.roa
File: YiG7L85QItZe7crAbw_KP5TqJbc.roa (raw, json)
Hash identifier: klZ+Jyzia7JpT/DxBlVMgZynApg83X8UDvNIofxOu34=
Subject key identifier: 62:21:BB:2F:CE:50:22:D6:5E:ED:CA:C0:6F:0F:CA:3F:94:EA:25:B7
Certificate issuer: /CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed
Certificate serial: 02E2CC55
Authority key identifier: B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/YiG7L85QItZe7crAbw_KP5TqJbc.roa
Signing time: Sat 01 Jan 2022 15:59:45 +0000
ROA not before: Sat 01 Jan 2022 15:59:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34665
IP address blocks: 45.143.202.0/24 maxlen: 24
92.63.202.0/24 maxlen: 24
185.156.75.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48417877 (0x2e2cc55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed
Validity
Not Before: Jan 1 15:59:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6221bb2fce5022d65eedcac06f0fca3f94ea25b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:16:61:6e:32:51:9b:ab:4b:e3:19:cf:37:9f:
48:a8:5d:77:90:6f:e3:6e:03:bd:c1:ab:b1:84:e5:
ed:71:f9:19:39:06:36:12:3c:97:50:f9:67:53:5a:
2b:cd:92:92:e3:01:53:8d:2d:6c:28:47:fd:45:b5:
74:e8:95:5f:b4:21:77:06:12:42:bf:d2:3a:ee:a2:
84:cb:b2:99:28:04:8a:bf:e4:55:77:79:8a:16:27:
9e:dc:10:05:25:3f:9f:a0:71:69:b6:77:79:73:4e:
d4:b3:77:d3:5c:91:68:a0:14:81:5b:19:31:e5:e5:
89:52:11:98:53:0b:8c:17:ef:72:19:e4:a8:e5:9c:
75:97:90:63:bc:a7:40:03:1c:78:54:90:2d:37:35:
b9:14:6b:66:cf:8f:66:04:7b:13:42:eb:e7:4c:f6:
f6:28:9a:7d:c9:8e:8f:e4:ed:f7:1a:c2:32:08:af:
fe:ce:f5:13:34:27:77:ca:6c:f1:55:30:12:ca:6a:
9b:a4:d4:4a:d0:13:a5:8a:2b:9a:06:ab:05:43:a4:
d8:e1:4c:08:9b:e1:54:a2:26:d7:d8:c4:7a:f3:60:
cc:8a:19:9a:1b:bc:a2:fe:4e:35:f9:cd:e7:bf:11:
fa:1d:32:1b:19:7d:d1:5b:76:1c:d7:3f:2b:d7:31:
cc:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:21:BB:2F:CE:50:22:D6:5E:ED:CA:C0:6F:0F:CA:3F:94:EA:25:B7
X509v3 Authority Key Identifier:
keyid:B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/YiG7L85QItZe7crAbw_KP5TqJbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.202.0/24
92.63.202.0/24
185.156.75.0/24
Signature Algorithm: sha256WithRSAEncryption
18:1c:4a:87:72:35:8a:ff:46:55:96:1a:9e:bb:06:88:d6:59:
67:be:9f:7a:c2:09:ba:8e:54:c5:84:14:fd:a5:b2:93:2f:98:
4e:4e:81:63:9a:c3:a9:d7:e3:b5:08:6b:d0:3c:a8:2d:09:83:
a9:5f:e7:89:72:29:c5:b3:fa:17:c2:c4:67:b2:3a:b1:c5:f7:
65:03:f5:8c:9e:b3:e8:8d:f5:c9:d8:96:5e:3c:e5:72:3e:50:
5d:59:d4:17:59:89:97:0a:0b:37:ff:95:b5:29:1a:1f:06:8f:
2d:46:88:f2:73:2c:70:c0:c5:a6:ce:7b:45:e0:df:ea:d6:3e:
5e:b4:35:6a:90:74:ba:96:8b:53:ee:e3:9d:d9:f2:1c:a0:03:
15:f7:b4:88:68:2b:24:49:a3:fc:50:c8:4e:36:10:f3:99:e3:
bc:92:94:8c:16:8b:b0:3f:08:e7:06:b4:3e:e1:1c:46:37:bf:
0a:97:d2:3b:2f:f7:3e:eb:26:fd:a1:33:c3:54:19:f6:96:9a:
dc:12:21:ea:21:db:76:68:56:d5:23:3d:ef:b1:87:6e:9f:01:
5e:a5:0a:d0:22:b1:a4:cd:d6:16:ce:ec:df:0f:0a:8d:b3:6f:
fd:33:50:fb:84:70:9b:9d:d0:d9:50:de:f4:0f:0e:89:07:0e:
8e:fb:d6:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:01 2023 by rpki-client on console-ams.rpki-client.org