Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/YkGWl_2yggh1P8qEloWJxN3kOgw.roa
File: YkGWl_2yggh1P8qEloWJxN3kOgw.roa (raw, json)
Hash identifier: eCZcVaiqEwSEN2e6WiHvzk8HEZl/GsMJpKJ4af1dNME=
Subject key identifier: 62:41:96:97:FD:B2:82:08:75:3F:CA:84:96:85:89:C4:DD:E4:3A:0C
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0559569E
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/YkGWl_2yggh1P8qEloWJxN3kOgw.roa
Signing time: Fri 24 Jun 2022 19:51:39 +0000
ROA not before: Fri 24 Jun 2022 19:51:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205090
IP address blocks: 185.112.81.0/24 maxlen: 24
185.112.102.0/24 maxlen: 24
185.117.117.0/24 maxlen: 24
185.112.101.0/24 maxlen: 24
185.112.103.0/24 maxlen: 24
45.9.73.0/24 maxlen: 24
45.9.75.0/24 maxlen: 24
193.162.143.0/24 maxlen: 24
185.105.90.0/24 maxlen: 24
185.105.88.0/24 maxlen: 24
185.105.91.0/24 maxlen: 24
185.105.89.0/24 maxlen: 24
185.221.162.0/24 maxlen: 24
45.95.202.0/24 maxlen: 24
185.102.139.0/24 maxlen: 24
45.95.203.0/24 maxlen: 24
45.90.216.0/24 maxlen: 24
45.90.218.0/24 maxlen: 24
45.90.217.0/24 maxlen: 24
45.90.219.0/24 maxlen: 24
84.252.73.0/24 maxlen: 24
84.252.75.0/24 maxlen: 24
84.252.74.0/24 maxlen: 24
185.128.105.0/24 maxlen: 24
45.89.65.0/24 maxlen: 24
85.209.2.0/24 maxlen: 24
185.103.109.0/24 maxlen: 24
185.128.107.0/24 maxlen: 24
185.128.106.0/24 maxlen: 24
193.168.227.0/24 maxlen: 24
185.217.198.0/24 maxlen: 24
185.217.199.0/24 maxlen: 24
185.104.251.0/24 maxlen: 24
2a0e:d603::/32 maxlen: 32
2a09:5302::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89740958 (0x559569e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jun 24 19:51:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62419697fdb28208753fca84968589c4dde43a0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b0:18:e9:83:19:bf:01:1b:32:9f:48:8f:31:
dd:bf:61:05:09:47:b9:af:1b:58:61:fe:af:c0:50:
2a:a5:82:59:34:74:dc:a6:43:ac:b7:12:2e:17:61:
5b:5b:6f:16:4f:41:33:34:f8:53:1d:63:b1:9f:24:
c9:80:82:26:46:7e:b9:12:6b:ad:7a:80:7d:9d:01:
7d:a8:36:29:24:6b:57:f3:a8:f3:18:3d:bb:fa:de:
f2:2e:a0:35:3f:06:39:ed:49:e8:7a:4d:a2:9f:07:
f7:57:71:8b:ac:8b:c3:c6:d4:48:6f:f5:8c:70:22:
7f:67:b4:32:a3:48:70:86:07:7c:d5:cf:84:8a:84:
a3:b3:5d:4e:d3:6a:ab:dd:b9:94:50:ea:74:39:a3:
a5:e5:5c:0b:ef:e7:53:f1:04:3d:52:3d:fa:5f:4f:
75:3c:f5:04:e9:46:9b:10:98:f7:9b:a8:c5:1d:2a:
39:b5:ef:61:85:7a:b9:35:64:7f:e9:51:8a:26:15:
fd:7d:34:5b:2f:fd:ed:a7:72:01:93:b4:e5:5f:f7:
98:b9:b9:37:f6:38:06:9e:93:df:df:e4:b0:a6:84:
63:68:81:52:4d:ed:6a:0d:67:c1:8d:a8:05:a7:27:
71:f3:4b:5e:e1:63:4d:97:41:4b:4d:b0:e5:9a:99:
96:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:41:96:97:FD:B2:82:08:75:3F:CA:84:96:85:89:C4:DD:E4:3A:0C
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/YkGWl_2yggh1P8qEloWJxN3kOgw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.73.0/24
45.9.75.0/24
45.89.65.0/24
45.90.216.0/22
45.95.202.0/23
84.252.73.0-84.252.75.255
85.209.2.0/24
185.102.139.0/24
185.103.109.0/24
185.104.251.0/24
185.105.88.0/22
185.112.81.0/24
185.112.101.0-185.112.103.255
185.117.117.0/24
185.128.105.0-185.128.107.255
185.217.198.0/23
185.221.162.0/24
193.162.143.0/24
193.168.227.0/24
IPv6:
2a09:5302::/32
2a0e:d603::/32
Signature Algorithm: sha256WithRSAEncryption
77:d7:b9:a6:17:41:ac:a1:b0:36:3d:86:ad:06:86:5f:aa:86:
19:2d:a0:7a:f7:7c:fd:53:7a:51:d9:96:6f:4a:cd:ef:b9:2e:
ad:ce:c4:22:77:c0:11:9b:8f:25:99:69:6a:86:cd:9e:29:32:
ab:3a:dd:ed:4f:65:fc:ff:07:52:d7:1b:d2:46:5a:b6:d7:dd:
69:8e:fc:d2:a7:87:34:c9:03:c4:a1:e4:04:2f:e9:06:81:12:
8a:1f:e4:20:a3:ce:ca:08:4d:6b:e6:85:01:5f:08:90:7d:51:
fe:4e:5c:2e:b5:c1:9b:3a:0e:43:12:12:55:10:25:8e:5b:1b:
36:38:82:08:63:7a:7a:f5:88:0a:8d:d4:bb:77:2a:a9:80:4d:
ba:4a:2e:83:4e:3b:00:df:d9:00:79:9b:1a:f4:aa:fe:d5:a8:
e0:49:52:28:a3:9d:78:be:27:b6:fa:81:51:1d:00:05:cd:fb:
fc:c8:2e:33:f0:58:cc:0d:fa:7e:1f:2f:a3:33:28:38:79:4e:
a7:00:a9:5d:c8:38:1d:57:44:75:68:5b:3a:3a:6c:de:c9:65:
7e:5a:3f:71:f8:5d:2f:27:60:7e:6f:60:07:d3:16:35:18:98:
7d:a1:fc:d1:d5:3b:46:8a:e3:c3:dd:4f:d4:7b:7f:2e:c3:89:
a7:eb:97:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:08 2024 by rpki-client on console-fra.rpki-client.org