Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/y6Jm3MMvCHtTs9WTpiSYYzanxnQ.roa
File: y6Jm3MMvCHtTs9WTpiSYYzanxnQ.roa (raw, json)
Hash identifier: oHXYgvrPnNzhaLtf/g2dv0TlU87WLeo5FSTnwaXIdSs=
Subject key identifier: CB:A2:66:DC:C3:2F:08:7B:53:B3:D5:93:A6:24:98:63:36:A7:C6:74
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0183134EA276D61D82C0D6BC1FEDB16B5D80
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/y6Jm3MMvCHtTs9WTpiSYYzanxnQ.roa
Signing time: Tue 06 Sep 2022 14:57:43 +0000
ROA not before: Tue 06 Sep 2022 14:57:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206425
IP address blocks: 185.106.92.0/24 maxlen: 24
194.36.177.0/24 maxlen: 24
82.115.222.0/24 maxlen: 24
82.115.222.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:13:4e:a2:76:d6:1d:82:c0:d6:bc:1f:ed:b1:6b:5d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Sep 6 14:57:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cba266dcc32f087b53b3d593a624986336a7c674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:4a:15:b4:19:b8:60:0f:98:f1:11:d8:87:37:
b1:3e:b9:25:b5:ca:a6:35:75:c1:87:75:2f:1e:b6:
d3:d8:ae:33:77:4f:9f:59:b0:bd:8e:8f:c3:a9:16:
65:37:8d:d7:25:6c:8d:58:c6:5f:73:18:cb:3c:c5:
18:b5:9e:b0:13:cc:32:d6:65:23:c7:b0:11:bd:f8:
55:ba:d8:e7:e4:32:2d:a5:2e:1c:3b:c1:a3:68:b2:
b1:b8:95:5d:b2:c8:a1:cc:9c:61:fb:37:46:c5:15:
16:83:1e:0e:3c:19:10:9d:68:54:b8:03:84:d7:9f:
12:73:23:77:84:5d:f3:2f:66:e3:b2:81:f9:ea:e3:
fd:23:1e:19:6f:8d:89:31:1f:01:7b:d4:b4:e0:54:
6f:d0:73:29:75:0f:f5:db:58:03:98:18:b6:56:3b:
9d:d3:af:a7:86:96:d5:9c:d4:cd:16:f1:ed:5b:ae:
86:6e:03:fa:a2:09:91:47:d8:c8:df:c4:85:46:c4:
d2:02:58:15:83:92:f6:bb:45:94:bc:8b:98:ab:53:
83:1e:a0:49:e7:fd:a4:14:26:96:94:54:80:40:6a:
c6:08:7f:08:9e:de:66:42:ac:02:4d:08:4e:80:79:
e7:be:8e:95:17:5f:fb:c2:34:23:f3:1c:c1:c1:b7:
72:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:A2:66:DC:C3:2F:08:7B:53:B3:D5:93:A6:24:98:63:36:A7:C6:74
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/y6Jm3MMvCHtTs9WTpiSYYzanxnQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.222.0/23
185.106.92.0/24
194.36.177.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:67:95:24:fa:35:58:4e:96:77:e8:d8:3f:ba:b7:e7:f1:45:
76:35:a2:16:38:1f:84:48:e4:24:9a:6a:49:a5:19:d0:c2:71:
39:a3:66:93:b9:8d:4e:f0:d5:76:94:d8:56:ce:3b:85:2a:a8:
ac:67:79:a1:30:72:20:c9:25:12:9a:97:db:f1:e7:cd:9d:10:
48:4e:1c:f4:73:d6:31:24:f9:46:b0:87:7e:07:78:d9:69:ec:
d2:72:88:a0:c8:b2:86:48:1d:28:59:af:5d:16:ae:33:78:61:
b5:6c:8b:62:7a:e2:5f:b4:5b:52:e4:e8:34:c4:12:e6:a6:8f:
73:0a:40:36:36:40:21:9f:5d:b1:c8:3b:a4:dd:22:fb:5c:f5:
f2:45:47:28:de:54:50:c2:62:48:49:ae:a2:dd:5f:b7:8c:35:
f1:b4:96:05:2a:9e:be:84:75:94:79:89:6c:01:58:94:20:20:
47:0f:2f:6a:06:57:b5:d3:44:70:7a:a5:12:7d:5b:9f:d8:12:
6a:9f:d3:50:9c:64:31:20:22:02:6f:50:ea:be:c9:c4:dc:03:
95:0c:fe:2e:68:bb:01:de:d1:6a:17:8e:f0:ff:10:b0:81:e1:
79:31:ef:50:30:3b:d4:62:87:82:30:bd:c1:b4:70:4f:b0:a5:
9a:c6:e9:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:32 2023 by rpki-client on console-ams.rpki-client.org