Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/58bc3b-7f2e-422b-b3a0-ab6fe6868a45/1/YmrhQ-NskjnDdnfyz2FVdj3aZ34.roa
File: YmrhQ-NskjnDdnfyz2FVdj3aZ34.roa (raw, json)
Hash identifier: x2MWtlJsis+DRvjOF5EcD18z89GwY0XRo0oVipc3yUc=
Subject key identifier: 62:6A:E1:43:E3:6C:92:39:C3:76:77:F2:CF:61:55:76:3D:DA:67:7E
Certificate issuer: /CN=1212f3d60b208cff09d05e49c6be4b16e8acd768
Certificate serial: 0182F34A81CB2D889034D572155645205543
Authority key identifier: 12:12:F3:D6:0B:20:8C:FF:09:D0:5E:49:C6:BE:4B:16:E8:AC:D7:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EhLz1gsgjP8J0F5Jxr5LFuis12g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/58bc3b-7f2e-422b-b3a0-ab6fe6868a45/1/YmrhQ-NskjnDdnfyz2FVdj3aZ34.roa
Signing time: Wed 31 Aug 2022 09:45:22 +0000
ROA not before: Wed 31 Aug 2022 09:45:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212598
IP address blocks: 188.93.137.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:f3:4a:81:cb:2d:88:90:34:d5:72:15:56:45:20:55:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1212f3d60b208cff09d05e49c6be4b16e8acd768
Validity
Not Before: Aug 31 09:45:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=626ae143e36c9239c37677f2cf6155763dda677e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:dd:f8:ad:97:50:96:9d:4d:5d:f2:3a:d2:a3:
6d:a0:7d:29:55:d4:8c:98:e9:51:d2:b1:9c:3c:24:
f4:f6:e2:b3:89:7b:f6:f2:54:8a:65:20:d2:52:91:
7b:4f:8d:0b:57:9d:06:f7:99:d7:ed:ca:6e:06:6d:
7c:68:dc:14:99:f8:ed:b0:c5:33:93:14:fc:f7:59:
d3:9f:82:a8:7d:05:36:44:6a:19:36:e9:d2:98:7d:
31:d5:a7:4d:34:26:47:f1:f5:db:e2:d6:82:f6:97:
ba:7e:87:40:24:5c:5c:63:f9:ec:57:a8:8b:f4:f8:
8d:5f:3f:a2:74:30:0a:ea:a2:e7:64:d8:51:ef:fe:
74:77:43:a3:39:f2:ca:c4:82:35:4f:90:d7:93:a2:
ab:1f:89:d0:3d:92:ed:58:ed:d9:4b:80:e9:8a:64:
43:f0:2b:2d:5d:c4:4f:28:ed:db:f1:15:fa:8d:60:
d0:d5:10:6a:e0:2b:9a:75:97:65:5b:23:14:a3:a9:
b5:27:d2:b4:5a:14:55:fb:2b:6e:e9:23:1e:2c:5e:
cc:d3:53:23:92:ce:51:ec:d7:2f:db:38:94:01:5a:
ec:62:43:ac:0d:d1:7b:6c:ea:40:d1:9c:d1:a5:fa:
25:c8:c6:0a:6f:cd:5e:3e:6f:25:b4:50:7d:94:86:
bc:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:6A:E1:43:E3:6C:92:39:C3:76:77:F2:CF:61:55:76:3D:DA:67:7E
X509v3 Authority Key Identifier:
keyid:12:12:F3:D6:0B:20:8C:FF:09:D0:5E:49:C6:BE:4B:16:E8:AC:D7:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhLz1gsgjP8J0F5Jxr5LFuis12g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/58bc3b-7f2e-422b-b3a0-ab6fe6868a45/1/YmrhQ-NskjnDdnfyz2FVdj3aZ34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/58bc3b-7f2e-422b-b3a0-ab6fe6868a45/1/EhLz1gsgjP8J0F5Jxr5LFuis12g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.93.137.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:f4:cb:e5:03:24:3e:d4:dd:78:95:8c:97:c7:90:91:bd:de:
6f:b5:2c:02:d3:da:7a:14:db:f2:ba:f8:36:7b:ac:c1:91:7c:
bc:18:61:b1:9b:62:cb:ba:28:5d:e8:c7:42:6d:b2:86:39:0d:
60:b6:d7:11:ce:c9:03:13:65:9e:0b:08:16:d8:6a:df:db:56:
d9:ed:d4:42:06:90:52:cf:ce:12:e7:bb:19:9d:ac:88:fd:58:
c2:da:59:96:9d:59:71:ee:3b:13:a9:dd:ed:ab:02:37:8e:68:
9e:5b:d0:58:18:e9:2d:0b:f0:7c:31:8c:57:28:de:6f:99:78:
c7:85:26:7e:0d:e4:8d:c7:44:21:d5:5c:b1:87:f2:ab:16:25:
4b:70:39:ff:eb:25:c5:6b:9c:c9:38:6c:1e:1d:76:7f:6b:d2:
ca:fb:62:65:bf:8c:5c:f8:a0:17:6c:cf:ad:a7:8f:bb:23:d2:
26:92:43:0f:eb:4e:30:aa:08:e4:72:05:b3:67:3c:1d:df:da:
8f:61:cc:4d:b5:24:fc:38:a6:0a:9e:4b:93:3a:b0:e0:ff:6f:
f3:86:cb:82:88:cf:c1:c9:a1:51:ce:98:61:83:04:b4:77:f7:
29:16:d5:82:fd:91:aa:51:3b:7b:4e:2a:c8:8a:4e:48:05:3a:
77:b5:ff:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:28 2023 by rpki-client on console-ams.rpki-client.org