Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/YjQopON8832ULx_EUc7MtIhTl_g.roa
File: YjQopON8832ULx_EUc7MtIhTl_g.roa (raw, json)
Hash identifier: 6UuaG/hrIyyeQoEtGxzneE6MIKHtILpBzwvdR0V3+bM=
Subject key identifier: 62:34:28:A4:E3:7C:F3:7D:94:2F:1F:C4:51:CE:CC:B4:88:53:97:F8
Certificate issuer: /CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff
Certificate serial: 19AD268E
Authority key identifier: CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/YjQopON8832ULx_EUc7MtIhTl_g.roa
Signing time: Sat 01 Jan 2022 05:52:41 +0000
ROA not before: Sat 01 Jan 2022 05:52:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209679
IP address blocks: 92.255.55.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 430777998 (0x19ad268e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff
Validity
Not Before: Jan 1 05:52:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=623428a4e37cf37d942f1fc451ceccb4885397f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:28:70:93:86:e0:f6:72:2e:41:62:13:38:47:
e1:cb:13:69:2b:62:22:d3:29:7d:6b:b2:da:69:6f:
b7:04:5b:61:3f:13:13:25:86:dd:0e:83:ab:c5:f4:
78:fd:85:0b:9f:46:89:3a:49:9f:93:4b:31:c3:e8:
b6:03:06:a6:85:ad:45:a5:a6:99:dc:20:ec:f5:af:
3a:32:74:d5:1b:1c:b0:a7:b1:8f:58:43:13:eb:73:
3e:10:f4:3c:bb:f1:92:7b:99:09:48:73:90:fc:89:
4f:ee:ff:89:7d:14:69:7f:b4:18:9c:46:e7:c5:94:
d1:e8:da:90:a0:ed:ac:8a:ad:21:cb:13:44:40:2f:
9d:c9:2d:07:d9:d6:ef:f5:6e:76:ec:b0:0c:56:6e:
cb:b8:e7:8b:ba:cb:1f:c9:f4:0b:51:dc:01:80:d9:
3c:95:88:39:82:71:a1:d3:99:ca:be:50:12:ad:16:
c0:73:b3:87:5c:50:80:58:f2:3b:0b:be:40:f4:45:
e1:3f:de:5a:92:34:c7:b7:9e:31:af:55:a4:51:ff:
dd:6a:69:5b:20:40:13:e9:fe:a4:31:eb:05:26:fd:
97:29:c6:48:7e:46:a7:ae:4f:a7:10:a7:d8:1c:75:
c2:ff:a9:9d:e3:ac:2f:ad:bf:35:06:4e:a3:58:5e:
71:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:34:28:A4:E3:7C:F3:7D:94:2F:1F:C4:51:CE:CC:B4:88:53:97:F8
X509v3 Authority Key Identifier:
keyid:CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/YjQopON8832ULx_EUc7MtIhTl_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.255.55.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:f5:c8:f4:e8:62:05:3c:8c:4b:1b:95:b3:75:33:33:9c:e2:
50:fc:d5:52:0d:bd:27:12:b5:12:fc:a6:52:d5:ba:15:ee:ae:
08:8a:6d:ca:6a:b9:38:34:a8:02:aa:3b:2d:cb:a7:7b:7d:23:
5a:f1:b8:80:1a:d3:c9:a7:05:30:d8:3a:93:45:f9:54:4c:28:
3c:ab:8a:0e:93:f7:16:f9:f2:a2:d5:20:18:bd:50:30:be:fe:
ea:69:ac:22:44:f2:0f:5a:06:d9:b2:1e:0a:92:53:58:97:77:
11:da:0f:b6:e4:ec:57:3a:55:a9:7f:57:b3:fa:44:87:8d:f5:
2f:2c:69:28:d8:59:e9:b7:4d:2d:70:18:7d:36:2e:18:a0:ef:
3b:f0:45:f0:d9:73:73:79:2f:14:d3:f7:9e:51:49:09:ba:59:
e9:db:32:c8:07:5c:c8:98:16:66:71:b3:6c:71:57:42:b7:5f:
b2:28:e5:92:0b:3b:3e:f5:0c:bf:b4:bd:22:a2:df:39:7a:b1:
ed:32:49:24:bd:23:8c:51:73:af:35:40:21:55:65:9a:45:0f:
6b:03:3a:f7:61:0e:04:81:b8:6a:66:17:ad:98:19:d0:6f:7b:
4e:64:46:cd:8d:c4:92:ea:80:f6:17:59:6e:12:b5:41:db:cf:
ed:b4:69:39
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEGa0mjjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
ZDgzMTNlNDFlNjQ2YTA5Y2QwMWUyZTZmNDczOWQzYmQyMzZjNGZmMB4XDTIyMDEw
MTA1NTI0MVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjIzNDI4YTRlMzdj
ZjM3ZDk0MmYxZmM0NTFjZWNjYjQ4ODUzOTdmODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKsocJOG4PZyLkFiEzhH4csTaStiItMpfWuy2mlvtwRbYT8T
EyWG3Q6Dq8X0eP2FC59GiTpJn5NLMcPotgMGpoWtRaWmmdwg7PWvOjJ01RscsKex
j1hDE+tzPhD0PLvxknuZCUhzkPyJT+7/iX0UaX+0GJxG58WU0ejakKDtrIqtIcsT
REAvncktB9nW7/VuduywDFZuy7jni7rLH8n0C1HcAYDZPJWIOYJxodOZyr5QEq0W
wHOzh1xQgFjyOwu+QPRF4T/eWpI0x7eeMa9VpFH/3WppWyBAE+n+pDHrBSb9lynG
SH5Gp65PpxCn2Bx1wv+pneOsL62/NQZOo1hecY0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRiNCik43zzfZQvH8RRzsy0iFOX+DAfBgNVHSMEGDAWgBTNgxPkHmRqCc0B
4ub0c5070jbE/zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3pZTVQ1QjVrYWduTkFlTG05SE9kTzlJMnhQOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYmUvMzQ2NWYzLTAzYzItNGVhYS1hNjc0LTg4NjJiNTE3MzE3Yy8x
L1lqUW9wT044ODMyVUx4X0VVYzdNdEloVGxfZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmUv
MzQ2NWYzLTAzYzItNGVhYS1hNjc0LTg4NjJiNTE3MzE3Yy8xL3pZTVQ1QjVrYWdu
TkFlTG05SE9kTzlJMnhQOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFz/NzANBgkqhkiG9w0BAQsFAAOC
AQEAbPXI9OhiBTyMSxuVs3UzM5ziUPzVUg29JxK1EvymUtW6Fe6uCIptymq5ODSo
Aqo7Lcune30jWvG4gBrTyacFMNg6k0X5VEwoPKuKDpP3FvnyotUgGL1QML7+6mms
IkTyD1oG2bIeCpJTWJd3EdoPtuTsVzpVqX9Xs/pEh431LyxpKNhZ6bdNLXAYfTYu
GKDvO/BF8Nlzc3kvFNP3nlFJCbpZ6dsyyAdcyJgWZnGzbHFXQrdfsijlkgs7PvUM
v7S9IqLfOXqx7TJJJL0jjFFzrzVAIVVlmkUPawM692EOBIG4amYXrZgZ0G97TmRG
zY3EkuqA9hdZbhK1QdvP7bRpOQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:02 2024 by rpki-client on console-fra.rpki-client.org