Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/yaG4zNT-G6-36MnE4e72l5LyIyI.roa
File: yaG4zNT-G6-36MnE4e72l5LyIyI.roa (raw, json)
Hash identifier: UGgnAkySDYUewpFodmgK29dRu6KvdF3GDjEGQNslhYw=
Subject key identifier: C9:A1:B8:CC:D4:FE:1B:AF:B7:E8:C9:C4:E1:EE:F6:97:92:F2:23:22
Certificate issuer: /CN=cc39e6be40d80128896ccd131f65a55ad98a40af
Certificate serial: 0821C93F
Authority key identifier: CC:39:E6:BE:40:D8:01:28:89:6C:CD:13:1F:65:A5:5A:D9:8A:40:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zDnmvkDYASiJbM0TH2WlWtmKQK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/yaG4zNT-G6-36MnE4e72l5LyIyI.roa
Signing time: Sat 01 Jan 2022 08:00:39 +0000
ROA not before: Sat 01 Jan 2022 08:00:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209014
IP address blocks: 185.245.58.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136431935 (0x821c93f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc39e6be40d80128896ccd131f65a55ad98a40af
Validity
Not Before: Jan 1 08:00:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c9a1b8ccd4fe1bafb7e8c9c4e1eef69792f22322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:97:83:15:ae:6b:ec:29:d2:bb:c5:b9:dc:7a:
05:ee:20:51:1f:6e:7a:d7:81:da:ae:b1:a0:4b:e1:
7c:af:54:1c:ab:79:5b:55:72:57:64:55:c8:5e:c5:
e7:ff:51:cf:f5:0e:8d:ae:9f:59:b5:23:ea:06:68:
33:a4:6b:d3:31:f4:e8:a4:78:99:e8:83:3e:ab:66:
6f:97:2e:45:f3:d6:5d:7c:07:54:24:ee:94:fd:fe:
6b:bf:9e:3c:84:11:df:3f:49:85:a7:46:ff:b7:48:
09:47:13:7e:e4:fd:85:25:25:d1:61:ad:3b:7c:1a:
64:d5:21:88:bb:85:06:d4:7a:3f:a4:29:a6:83:bf:
03:00:13:ba:75:b9:92:4f:bb:19:b1:cf:a0:15:59:
7c:5e:a0:bf:d4:84:de:74:0a:df:29:d1:bd:db:f8:
f1:bc:2a:bb:10:d0:e0:0f:e8:ff:86:d1:e7:33:08:
32:81:4b:88:30:b2:fe:39:32:df:1d:e3:dd:f8:14:
2f:b8:b4:31:26:4c:4c:33:a5:20:d1:51:d6:8a:63:
b0:73:84:e0:2e:71:e7:c6:d6:e5:0e:2e:d1:79:33:
15:c6:63:f6:f5:03:63:97:25:c4:cd:a8:fe:82:bd:
5f:a1:47:57:b7:1c:ff:08:23:3b:61:e2:03:f5:55:
e1:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:A1:B8:CC:D4:FE:1B:AF:B7:E8:C9:C4:E1:EE:F6:97:92:F2:23:22
X509v3 Authority Key Identifier:
keyid:CC:39:E6:BE:40:D8:01:28:89:6C:CD:13:1F:65:A5:5A:D9:8A:40:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zDnmvkDYASiJbM0TH2WlWtmKQK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/yaG4zNT-G6-36MnE4e72l5LyIyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.245.58.0/23
Signature Algorithm: sha256WithRSAEncryption
a9:45:61:e0:ea:4e:d9:ec:f9:16:d8:7f:77:d0:67:58:36:83:
cd:5c:9f:43:95:77:3a:7e:1a:ec:02:9f:10:44:06:ea:dc:e8:
dd:91:64:6e:ab:86:2c:0d:2d:3e:5e:ba:2c:82:76:0a:fe:99:
bb:c6:32:22:a5:65:f6:91:4b:13:94:85:3a:25:43:e4:9a:12:
1b:d2:6e:36:0d:cf:3f:f5:7e:c8:33:10:c9:09:a8:ca:1d:fd:
90:d1:08:cd:63:74:fc:a9:2c:cd:d0:21:3b:a8:81:20:79:5a:
3c:06:98:e7:3e:4e:07:ab:39:30:16:c0:7c:10:46:4b:ab:20:
42:3c:1d:ab:3e:fa:bc:ff:fe:98:2d:c3:ef:7b:cc:b6:ff:36:
69:a7:61:a2:cc:ab:c9:12:d8:fe:1f:82:01:f3:71:77:6c:50:
97:25:5d:79:c2:07:39:e2:9e:a8:00:e6:80:fe:b7:22:09:30:
67:fb:63:d7:5f:f4:54:1e:4b:ed:14:32:b0:24:fe:cc:99:f0:
a4:25:b5:75:b7:ae:fe:5a:6e:19:e0:31:e8:6f:73:ed:ca:ce:
52:f1:f0:28:4e:65:59:89:eb:9d:ff:55:48:f4:3e:45:c2:66:
e6:81:9a:90:28:f6:a9:23:cc:db:fc:ff:40:92:c3:57:ee:d9:
0a:48:2a:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:06 2024 by rpki-client on console-fra.rpki-client.org