Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/414e5a-52f8-4845-b1bb-b9930510d0a0/1/ykX8SYguuHc74V_tYnFQrB5eQPU.roa
File: ykX8SYguuHc74V_tYnFQrB5eQPU.roa (raw, json)
Hash identifier: +ZiqCKer2gmpDIZUwb8QE0bZ2WHBMH5Li9gd+ENf7tc=
Subject key identifier: CA:45:FC:49:88:2E:B8:77:3B:E1:5F:ED:62:71:50:AC:1E:5E:40:F5
Certificate issuer: /CN=11c79e8a27cde9911bd7da63873c5cc558dbd531
Certificate serial: 042CA023
Authority key identifier: 11:C7:9E:8A:27:CD:E9:91:1B:D7:DA:63:87:3C:5C:C5:58:DB:D5:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EceeiifN6ZEb19pjhzxcxVjb1TE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/414e5a-52f8-4845-b1bb-b9930510d0a0/1/ykX8SYguuHc74V_tYnFQrB5eQPU.roa
Signing time: Sat 01 Jan 2022 08:03:48 +0000
ROA not before: Sat 01 Jan 2022 08:03:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212684
IP address blocks: 107.150.165.0/24 maxlen: 24
91.192.9.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70033443 (0x42ca023)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11c79e8a27cde9911bd7da63873c5cc558dbd531
Validity
Not Before: Jan 1 08:03:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ca45fc49882eb8773be15fed627150ac1e5e40f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:90:21:b4:bc:53:7f:42:88:aa:b1:84:1b:22:
87:cb:08:54:9b:bc:c9:63:40:91:9c:71:5a:25:ba:
67:71:21:91:a1:4e:4f:d3:5c:b0:54:2c:1c:13:04:
ac:06:84:c8:2b:c1:06:a1:51:65:74:9e:df:a1:cb:
b8:86:99:8c:d2:a4:94:03:15:1c:a5:b7:83:c7:40:
d1:ed:56:e7:37:13:b4:69:b3:a2:29:c6:f7:91:d0:
96:c5:5d:bb:70:45:28:23:bd:45:81:11:1d:ca:97:
79:cd:94:3e:02:77:5a:fb:fa:ca:36:b2:98:ac:c6:
f4:e8:ec:29:fc:84:a1:b0:0a:f1:23:0b:9b:84:e9:
82:04:6d:38:e8:eb:6e:de:4c:57:18:e6:c3:37:b6:
1d:47:ca:37:b4:0e:74:72:ac:9f:f4:01:cd:a0:cf:
7a:f2:62:d2:1d:30:25:d4:7b:df:86:6b:ea:f5:99:
31:6c:d2:bd:91:05:41:0d:07:e3:fe:5f:e9:94:5e:
ec:ba:7b:ab:e1:c1:49:2d:a1:cd:36:02:da:fc:82:
56:07:68:07:9d:d0:3b:73:6f:46:eb:65:2e:b3:78:
fa:66:6f:07:eb:22:49:83:7d:74:2c:e4:94:1c:55:
72:fc:d9:6c:0d:e1:58:8d:a8:71:22:4c:17:13:ab:
eb:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:45:FC:49:88:2E:B8:77:3B:E1:5F:ED:62:71:50:AC:1E:5E:40:F5
X509v3 Authority Key Identifier:
keyid:11:C7:9E:8A:27:CD:E9:91:1B:D7:DA:63:87:3C:5C:C5:58:DB:D5:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EceeiifN6ZEb19pjhzxcxVjb1TE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/414e5a-52f8-4845-b1bb-b9930510d0a0/1/ykX8SYguuHc74V_tYnFQrB5eQPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/414e5a-52f8-4845-b1bb-b9930510d0a0/1/EceeiifN6ZEb19pjhzxcxVjb1TE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.192.9.0/24
107.150.165.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:5d:b3:70:f1:9f:03:18:11:be:7d:76:a3:69:a7:1c:26:0f:
f3:cf:6f:4a:bc:cb:76:fb:3b:25:26:a3:9b:fb:06:e8:a8:72:
ba:ec:88:de:99:45:90:96:3c:2f:8c:d1:4c:37:9e:0a:5f:85:
5b:4b:38:e9:d7:4e:29:49:1b:d2:9e:3f:25:93:46:07:8a:20:
bb:ca:a3:eb:86:b1:2b:57:47:bd:46:7e:46:c5:88:55:39:31:
ce:cc:a2:d2:ce:bf:8e:6f:20:3b:e8:1c:12:18:b4:be:6a:60:
57:03:32:e6:2a:3b:95:c3:9a:b9:14:c0:b8:d9:11:f6:a0:d3:
36:a0:f9:8f:f6:ea:b7:eb:f2:99:e4:9d:99:09:b0:37:44:a1:
a2:46:44:9e:37:ca:7f:42:53:af:a2:53:3d:56:ee:86:f4:0f:
7c:95:12:fb:e7:13:98:15:d7:07:09:a4:92:01:ff:46:0f:2c:
6a:84:cc:70:dc:aa:c0:c3:fd:98:0b:79:55:ba:69:57:75:3a:
25:72:71:e5:cc:3e:8f:a8:6c:61:6c:fa:50:c1:66:5f:71:ea:
4e:8e:57:cd:4c:82:cb:bd:76:df:e2:b0:a8:4d:89:2e:1f:b9:
bb:bd:69:9b:a8:c5:82:58:0f:4b:1e:06:80:d9:99:2f:5c:49:
4d:44:2d:e0
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEBCygIzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
MWM3OWU4YTI3Y2RlOTkxMWJkN2RhNjM4NzNjNWNjNTU4ZGJkNTMxMB4XDTIyMDEw
MTA4MDM0OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoY2E0NWZjNDk4ODJl
Yjg3NzNiZTE1ZmVkNjI3MTUwYWMxZTVlNDBmNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMeQIbS8U39CiKqxhBsih8sIVJu8yWNAkZxxWiW6Z3EhkaFO
T9NcsFQsHBMErAaEyCvBBqFRZXSe36HLuIaZjNKklAMVHKW3g8dA0e1W5zcTtGmz
oinG95HQlsVdu3BFKCO9RYERHcqXec2UPgJ3Wvv6yjaymKzG9OjsKfyEobAK8SML
m4TpggRtOOjrbt5MVxjmwze2HUfKN7QOdHKsn/QBzaDPevJi0h0wJdR734Zr6vWZ
MWzSvZEFQQ0H4/5f6ZRe7Lp7q+HBSS2hzTYC2vyCVgdoB53QO3NvRutlLrN4+mZv
B+siSYN9dCzklBxVcvzZbA3hWI2ocSJMFxOr6yMCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBTKRfxJiC64dzvhX+1icVCsHl5A9TAfBgNVHSMEGDAWgBQRx56KJ83pkRvX
2mOHPFzFWNvVMTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0VjZWVpaWZONlpFYjE5cGpoenhjeFZqYjFURS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvY2EvNDE0ZTVhLTUyZjgtNDg0NS1iMWJiLWI5OTMwNTEwZDBhMC8x
L3lrWDhTWWd1dUhjNzRWX3RZbkZRckI1ZVFQVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2Ev
NDE0ZTVhLTUyZjgtNDg0NS1iMWJiLWI5OTMwNTEwZDBhMC8xL0VjZWVpaWZONlpF
YjE5cGpoenhjeFZqYjFURS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAFvACQMEAGuWpTANBgkqhkiG9w0B
AQsFAAOCAQEAXF2zcPGfAxgRvn12o2mnHCYP889vSrzLdvs7JSajm/sG6KhyuuyI
3plFkJY8L4zRTDeeCl+FW0s46ddOKUkb0p4/JZNGB4ogu8qj64axK1dHvUZ+RsWI
VTkxzsyi0s6/jm8gO+gcEhi0vmpgVwMy5io7lcOauRTAuNkR9qDTNqD5j/bqt+vy
meSdmQmwN0ShokZEnjfKf0JTr6JTPVbuhvQPfJUS++cTmBXXBwmkkgH/Rg8saoTM
cNyqwMP9mAt5VbppV3U6JXJx5cw+j6hsYWz6UMFmX3HqTo5XzUyCy7123+KwqE2J
Lh+5u71pm6jFglgPSx4GgNmZL1xJTUQt4A==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:58 2023 by rpki-client on console-fra.rpki-client.org