Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/YoBGXWtClKJdazWj-WLXSIDzciE.roa
File: YoBGXWtClKJdazWj-WLXSIDzciE.roa (raw, json)
Hash identifier: BpIB2SLEt03z7tnTub50xfGVkmqUJ9qnzF1tGlNe0iw=
Subject key identifier: 62:80:46:5D:6B:42:94:A2:5D:6B:35:A3:F9:62:D7:48:80:F3:72:21
Certificate issuer: /CN=d894365b28a082834a751a97771b791124524dec
Certificate serial: 01828CDDDBF0DFDA5498DCDAD04F7B28AD85
Authority key identifier: D8:94:36:5B:28:A0:82:83:4A:75:1A:97:77:1B:79:11:24:52:4D:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JQ2WyiggoNKdRqXdxt5ESRSTew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/YoBGXWtClKJdazWj-WLXSIDzciE.roa
Signing time: Thu 11 Aug 2022 12:25:26 +0000
ROA not before: Thu 11 Aug 2022 12:25:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41107
IP address blocks: 91.108.160.0/21 maxlen: 21
185.31.152.0/22 maxlen: 22
109.68.196.0/22 maxlen: 22
159.253.160.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:8c:dd:db:f0:df:da:54:98:dc:da:d0:4f:7b:28:ad:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d894365b28a082834a751a97771b791124524dec
Validity
Not Before: Aug 11 12:25:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6280465d6b4294a25d6b35a3f962d74880f37221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:78:b7:9f:65:af:d6:d8:12:ee:96:37:70:75:
08:b3:03:ca:f3:77:ed:92:8f:28:9b:2f:5b:78:28:
2b:ed:08:e9:1f:db:10:d4:55:98:92:6e:b8:5d:c7:
5f:d2:86:87:4d:86:89:19:04:3b:c0:70:58:a4:a6:
3c:de:f4:35:ef:35:9f:67:7f:52:65:70:aa:0e:db:
9e:82:3a:6c:3b:42:82:a5:d3:91:1d:38:64:d7:72:
13:11:57:45:5e:d0:3f:85:cb:76:65:1c:6a:34:0b:
9e:40:58:3e:9c:39:6b:b7:2c:a5:62:90:22:82:32:
7e:d3:2e:23:38:a6:f0:fc:b8:6e:97:64:0f:32:a2:
41:2c:ea:62:68:26:f9:b2:4c:0c:57:6c:81:38:ac:
ad:a9:89:fa:1a:56:fb:d1:cd:78:8b:0b:86:d7:2f:
1f:fd:ca:50:1a:9b:96:ae:67:2b:5e:3c:5e:7a:39:
a3:1f:77:5d:37:21:28:60:e5:7a:5e:24:cf:12:82:
9a:e0:10:1e:d5:6d:75:4a:48:1a:f8:cb:37:23:c1:
6d:38:e1:0e:c7:0e:78:e9:de:50:f0:0e:2d:25:ca:
70:0e:9f:fe:12:89:87:f4:12:63:65:f5:04:0b:06:
51:1d:5f:bc:f5:31:53:92:99:45:8d:1f:2e:2a:ac:
0b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:80:46:5D:6B:42:94:A2:5D:6B:35:A3:F9:62:D7:48:80:F3:72:21
X509v3 Authority Key Identifier:
keyid:D8:94:36:5B:28:A0:82:83:4A:75:1A:97:77:1B:79:11:24:52:4D:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JQ2WyiggoNKdRqXdxt5ESRSTew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/YoBGXWtClKJdazWj-WLXSIDzciE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.160.0/21
109.68.196.0/22
159.253.160.0/21
185.31.152.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:f1:e9:5d:0f:c3:0c:c5:88:58:2e:66:53:a8:e3:3b:19:ba:
4c:ea:1e:84:ea:d4:42:93:43:d3:f8:d9:76:9f:da:b0:11:27:
91:b3:a2:d6:d7:6b:9e:b3:ff:44:77:ee:ca:0f:88:20:12:55:
42:12:2e:5a:fd:70:7d:b8:c6:5a:27:fc:94:f7:56:1d:d5:36:
9f:4e:13:42:5d:90:80:44:99:c5:4d:29:43:3b:17:20:9e:70:
84:08:14:0b:fd:be:9e:f9:3d:97:89:9b:0d:c8:a6:67:64:cd:
b5:85:74:1d:6e:9f:15:d9:5b:1a:e9:cd:20:1d:e4:82:30:57:
d6:51:0f:b3:7d:92:dd:d6:fd:48:59:f4:8b:ff:9f:5d:bb:99:
93:bd:bf:41:dc:53:00:15:81:e3:46:73:7c:15:1e:93:8e:c9:
63:98:ec:be:07:63:e4:30:e7:9d:41:4c:cd:37:4a:18:d8:14:
a5:ae:28:50:f8:a5:86:f1:66:26:2a:25:30:c7:0c:7f:91:ab:
bd:df:d0:25:d3:6f:86:66:89:54:1f:ca:ed:94:05:cf:1e:ad:
f0:00:21:8a:13:c7:ed:c1:8e:28:69:bf:f5:f2:66:36:37:bb:
53:4d:d9:51:c8:17:a5:45:31:65:c5:ba:c8:e9:d7:86:fc:96:
3f:32:e7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:35 2023 by rpki-client on console-ams.rpki-client.org