Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/pYt52w4bHfcoDALIQIkGlTSiqic.roa
File: pYt52w4bHfcoDALIQIkGlTSiqic.roa (raw, json)
Hash identifier: viWcRvM9DhdYaoH8dAyt5Fhn5N3I/N0SM6JJYlbhp+Y=
Subject key identifier: A5:8B:79:DB:0E:1B:1D:F7:28:0C:02:C8:40:89:06:95:34:A2:AA:27
Certificate issuer: /CN=f0ff2c6229af763a99f5349a32510df4a4526143
Certificate serial: 272F7E7C
Authority key identifier: F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/pYt52w4bHfcoDALIQIkGlTSiqic.roa
Signing time: Sat 01 Jan 2022 07:54:09 +0000
ROA not before: Sat 01 Jan 2022 07:54:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197746
IP address blocks: 194.219.79.0/24 maxlen: 24
62.1.216.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 657423996 (0x272f7e7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0ff2c6229af763a99f5349a32510df4a4526143
Validity
Not Before: Jan 1 07:54:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a58b79db0e1b1df7280c02c84089069534a2aa27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9c:ec:a6:b3:f1:ce:99:a0:e9:44:26:44:83:
37:2a:c1:8a:18:ba:bd:68:d1:9e:45:df:dc:4f:3f:
56:3d:59:1e:dc:bc:c8:75:3f:b1:e9:c2:e5:e1:e8:
d2:b1:4e:c7:07:7a:5b:b4:1a:9a:86:f0:09:4c:e6:
fb:38:b6:9c:bc:a7:0c:27:c8:00:2c:4e:27:cf:4c:
5e:f0:75:1e:56:95:c4:82:87:b0:f4:da:07:0b:64:
20:dc:35:bf:95:5c:c1:c2:2a:e1:f6:d2:d9:ce:bf:
60:d8:fa:ff:8d:ed:c5:ad:5c:95:fe:4b:9e:48:6f:
2b:31:2f:cf:5e:d9:fe:18:f7:b8:44:e3:bd:37:2a:
f1:61:37:6a:31:e6:d2:63:62:a2:99:3c:7c:4b:ab:
ce:75:83:72:5f:88:d7:ca:d0:41:3f:c9:26:b3:9a:
3e:19:99:6c:84:7d:b2:d2:b4:c7:4f:d8:a9:67:cf:
0d:a7:12:7f:c4:e3:4f:9e:4c:80:7b:5a:ea:6a:61:
00:c8:6f:54:31:f4:bf:18:4b:48:9e:ec:c7:da:33:
6c:9a:47:14:a6:04:53:1f:4f:56:7f:7b:0e:73:17:
4a:23:cd:1a:07:01:70:86:81:37:af:d6:e7:ee:7f:
f8:cd:47:3e:c3:ff:ec:aa:cf:75:37:0e:3f:07:3a:
0c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:8B:79:DB:0E:1B:1D:F7:28:0C:02:C8:40:89:06:95:34:A2:AA:27
X509v3 Authority Key Identifier:
keyid:F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/pYt52w4bHfcoDALIQIkGlTSiqic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.1.216.0/24
194.219.79.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:32:da:62:de:4d:1c:84:48:5e:99:82:2a:c9:a3:4b:46:47:
9b:c0:83:09:f2:30:ed:5c:00:49:12:3d:f3:a0:f9:c0:51:ef:
a9:15:5c:a8:c3:60:62:b0:c5:84:b8:06:80:62:eb:75:7f:a4:
01:86:9e:9c:d1:14:bf:da:9e:4c:ca:35:40:e5:13:a9:e9:bd:
0b:27:07:66:d8:18:22:29:48:88:c3:a5:9b:b5:d7:97:be:4f:
6b:a0:15:63:0b:10:80:6d:59:fd:8d:77:e9:6a:63:d4:83:7b:
01:c4:ea:7f:e2:69:35:09:72:b0:d9:f0:47:a2:06:87:7a:ef:
ec:9c:b1:8b:29:29:44:aa:04:3a:8d:3f:38:fd:ad:15:43:bd:
2e:be:59:81:3e:dd:3e:f6:fd:ec:9a:94:b3:75:5c:56:b5:bf:
b0:7e:88:9b:b5:3d:69:a2:00:f7:32:27:bf:c7:61:04:43:da:
6f:be:08:4b:2a:e0:dd:fc:8d:89:eb:df:6f:22:eb:f4:a3:0a:
25:8f:7b:33:2e:3a:2c:1f:c7:25:49:62:af:b2:90:73:4b:65:
fa:f2:7f:30:c9:25:1b:11:14:d9:95:23:d8:62:b3:84:ba:e9:
d1:d7:81:06:c8:20:22:15:07:ec:dc:0d:fc:3a:8c:dc:ab:e3:
be:5b:6c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:32 2024 by rpki-client on console-ams.rpki-client.org