Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/YR323_lQVph1d1GCxUhd9PHeECE.roa
File: YR323_lQVph1d1GCxUhd9PHeECE.roa (raw, json)
Hash identifier: VJbG2syPZiSTMGishsx1YqNuXJLwHYI2DDo+vvhofEM=
Subject key identifier: 61:1D:F6:DF:F9:50:56:98:75:77:51:82:C5:48:5D:F4:F1:DE:10:21
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 077A7B32
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/YR323_lQVph1d1GCxUhd9PHeECE.roa
Signing time: Sat 01 Jan 2022 05:04:21 +0000
ROA not before: Sat 01 Jan 2022 05:04:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211439
IP address blocks: 171.22.220.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125467442 (0x77a7b32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Jan 1 05:04:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=611df6dff950569875775182c5485df4f1de1021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c4:23:04:4f:53:cb:0b:3c:44:e8:2f:57:55:
ac:6f:f3:d2:7d:42:e2:c8:25:ff:50:40:9a:cc:ac:
e9:85:be:ef:46:5e:55:2e:f3:89:18:7e:00:57:cc:
f6:f2:c3:3f:92:e9:02:54:ae:a0:6c:43:90:a9:e9:
63:28:2a:ed:9b:89:e4:df:25:92:fe:3a:62:dd:c6:
ba:1b:63:f4:34:88:8a:78:42:b0:44:32:6e:68:bf:
26:3d:60:3f:10:c8:4b:1c:77:13:f4:d5:2f:df:6c:
1c:14:f0:1a:11:7c:cc:12:8f:52:01:77:3b:ed:c2:
70:d0:73:8c:2a:14:25:83:11:ac:39:df:5f:7c:a5:
a9:f3:2c:b4:ff:77:7b:27:34:a9:98:ec:dc:b3:2e:
c3:30:23:11:2d:95:c1:94:f7:47:03:b5:22:fb:8e:
c8:e4:6d:de:8e:93:4e:2d:2e:2d:48:88:98:fd:ad:
7a:f9:09:27:ca:9c:c3:50:a5:65:81:d1:f5:a3:e6:
62:56:a6:af:5f:0b:d8:64:c0:f0:63:1f:12:07:ef:
68:17:91:00:f7:6d:84:70:40:e5:b1:b3:80:e2:4c:
1e:45:c7:af:ab:74:06:41:5b:39:2f:ab:1d:87:25:
97:6a:b2:f0:48:75:c2:dd:e7:91:81:f1:ba:e2:19:
6d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:1D:F6:DF:F9:50:56:98:75:77:51:82:C5:48:5D:F4:F1:DE:10:21
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/YR323_lQVph1d1GCxUhd9PHeECE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.220.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:f3:21:67:a4:f7:8a:e5:cb:63:35:49:6e:73:5c:50:0a:fa:
bf:13:9d:da:26:c3:a3:95:91:9b:55:e7:8c:b8:15:55:b7:0d:
0f:b5:a8:11:df:59:fc:00:46:5a:ca:da:2f:1d:ec:0b:35:2c:
50:91:a4:bd:d0:f5:dc:5e:87:f4:fe:9a:b1:09:c9:44:7b:ce:
2c:ef:9e:ee:f7:7a:a1:65:52:83:d5:85:bc:61:94:0b:da:48:
a1:f3:8d:ab:77:73:9d:8d:4c:4e:56:d0:25:74:f5:c3:e6:e9:
65:7d:1d:e3:c2:36:17:82:1f:ff:23:89:29:3d:77:0e:65:95:
dc:ee:65:9a:49:c7:f8:04:c7:43:97:e8:6d:c0:57:89:61:31:
ba:84:d6:95:db:73:a9:e7:8f:e4:c8:86:e3:fe:4b:e6:b2:b9:
11:9a:f9:2b:ac:f4:77:dd:0d:09:18:4b:43:94:98:12:e8:b5:
43:08:5e:73:93:33:2c:13:b4:05:c4:13:83:bf:be:77:2b:71:
99:95:a6:57:46:f7:94:a2:ec:a0:fe:02:cc:ce:c1:27:df:e9:
2f:66:e3:ac:f4:7d:d9:49:d1:b0:81:58:e9:03:43:ec:07:05:
ed:44:d3:16:db:f2:f9:7b:a9:be:de:cc:b0:aa:80:8b:37:71:
85:9a:8f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:48 2024 by rpki-client on console-ams.rpki-client.org