Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/yTg_0pcrqKSeqUlvVRz6IohAaoI.roa
File: yTg_0pcrqKSeqUlvVRz6IohAaoI.roa (raw, json)
Hash identifier: 7Ksq+HIyekdJwWMYJN3Srj4/xC3dPsBqjLD9AIM1IZQ=
Subject key identifier: C9:38:3F:D2:97:2B:A8:A4:9E:A9:49:6F:55:1C:FA:22:88:40:6A:82
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 018413114E8E36B366F4A43B1B6DD383D7FA
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/yTg_0pcrqKSeqUlvVRz6IohAaoI.roa
Signing time: Wed 26 Oct 2022 06:53:32 +0000
ROA not before: Wed 26 Oct 2022 06:53:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31261
IP address blocks: 5.8.177.0/24 maxlen: 24
37.16.80.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:13:11:4e:8e:36:b3:66:f4:a4:3b:1b:6d:d3:83:d7:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Oct 26 06:53:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c9383fd2972ba8a49ea9496f551cfa2288406a82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:dc:5b:cb:88:6e:e0:b0:ce:d4:15:f2:70:fc:
8a:2d:e3:f6:42:09:c9:8d:47:53:b3:55:9f:5e:7f:
51:4d:d7:fb:5b:7d:de:bc:05:12:20:25:ac:53:7d:
f1:98:81:af:47:f4:0a:b2:d4:b8:1a:c8:3b:37:0e:
bb:c1:87:97:a3:1f:19:72:d5:db:e9:ba:58:61:4e:
fb:c3:be:36:04:12:bf:bf:05:20:6b:de:a4:98:3c:
ca:63:18:9e:e5:8c:dd:04:6a:43:53:e8:66:ef:7d:
6c:47:74:7a:7a:9b:d4:a3:84:4c:28:fb:16:4f:81:
f9:dd:19:8d:c6:6b:c8:7b:87:1a:98:fb:d8:7a:17:
74:03:69:c5:ac:27:d4:23:9a:2e:f9:06:c5:6d:aa:
b4:a8:3d:cb:a0:6d:e0:99:fe:8d:05:62:ca:c7:14:
54:35:f8:5d:76:78:ed:6a:57:22:d7:3a:22:ce:92:
03:89:bd:bd:19:2e:dd:30:fd:33:27:f5:90:88:4f:
14:63:ec:11:cf:e8:ba:ac:e8:ea:19:d1:ff:50:da:
54:96:1b:98:20:b8:3a:32:d5:c3:55:76:37:d3:0e:
f2:d3:e6:d1:0b:6f:0a:2f:5c:71:43:17:e3:05:cb:
b6:ee:7c:1c:22:01:19:5f:d9:0e:c8:00:cb:70:6b:
ec:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:38:3F:D2:97:2B:A8:A4:9E:A9:49:6F:55:1C:FA:22:88:40:6A:82
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/yTg_0pcrqKSeqUlvVRz6IohAaoI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.177.0/24
37.16.80.0/22
Signature Algorithm: sha256WithRSAEncryption
aa:7c:03:a3:e9:32:fb:db:c4:f6:5e:17:c6:68:42:8b:81:d5:
18:0f:fa:28:cd:48:9f:de:1b:0c:c3:9d:15:62:76:d1:c2:f2:
b0:eb:76:2e:76:94:82:9d:1b:5d:a0:94:83:59:a3:e6:38:05:
b5:cd:ba:83:cd:03:ad:96:d1:3c:19:47:68:b1:c7:35:0f:24:
b9:b7:11:00:eb:62:44:b6:31:1d:92:4c:45:75:c8:6e:c8:01:
6e:f8:eb:10:42:d3:c4:e0:d1:a4:f8:32:e8:35:e6:5a:5c:86:
00:ac:e2:53:a8:cd:2e:99:a3:c2:d5:54:57:bb:f0:51:9e:51:
76:5a:a8:d9:ac:34:3d:85:59:ea:e3:0f:18:23:3b:a6:26:5f:
8a:02:60:50:3e:f5:d9:fe:ed:43:fc:46:9c:1f:51:a5:ac:8c:
3b:af:0c:df:df:ff:16:23:b4:f9:b6:15:12:79:18:97:4f:20:
fa:d8:db:56:7d:25:4c:e1:83:86:34:70:f2:9a:80:96:e4:4b:
b4:fd:51:87:82:c2:af:25:c0:55:f0:fc:7a:fc:6b:e4:b5:a6:
b6:f6:94:cb:38:b2:c1:a2:bc:d1:46:2a:0f:3c:98:96:8a:bd:
ba:2c:90:d8:b6:2b:35:df:68:95:1d:87:92:e5:8b:42:3e:9b:
42:31:8c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:26 2024 by rpki-client on console-fra.rpki-client.org