Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/ymf6TTdEAOrUxEUxcZbcijshBQY.roa
File: ymf6TTdEAOrUxEUxcZbcijshBQY.roa (raw, json)
Hash identifier: fGvg2Ygg3cHmARNk4Gi+oe74rZ/Yvti/R1JWqdETpdU=
Subject key identifier: CA:67:FA:4D:37:44:00:EA:D4:C4:45:31:71:96:DC:8A:3B:21:05:06
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 0AE34370
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/ymf6TTdEAOrUxEUxcZbcijshBQY.roa
Signing time: Fri 21 Jan 2022 12:37:08 +0000
ROA not before: Fri 21 Jan 2022 12:37:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209850
IP address blocks: 151.237.68.0/24 maxlen: 24
151.237.71.0/24 maxlen: 24
151.237.69.0/24 maxlen: 24
151.237.70.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 182666096 (0xae34370)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 21 12:37:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ca67fa4d374400ead4c445317196dc8a3b210506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:4f:20:70:3a:00:ba:57:f5:4f:ea:ac:cd:27:
60:4f:05:30:31:4c:58:cd:75:61:83:f3:40:a7:34:
f2:02:ba:93:d4:09:21:88:87:7b:ab:25:f3:fd:f5:
c3:dc:de:9b:82:08:31:e5:80:54:6a:cb:44:9f:b4:
47:a6:60:14:e0:c7:b7:0c:da:63:af:86:4d:d3:d6:
68:9e:e3:29:d8:4f:44:1b:df:dd:eb:dc:bc:20:6b:
2a:9e:38:c8:17:59:4d:46:7e:81:b7:58:60:b0:41:
42:b5:90:4b:97:d7:a5:60:2b:68:4f:de:76:5e:9a:
21:42:f9:a1:91:af:e6:c3:d2:f9:15:68:4b:02:90:
38:38:6a:31:22:28:a9:41:75:e3:8a:01:5b:8c:a8:
27:b8:34:85:a3:d0:e9:36:a9:35:e9:00:0a:0a:4d:
c7:18:c3:48:d4:6e:b9:17:3c:21:11:80:22:5d:3b:
b2:ff:3a:53:63:1a:7b:c0:2a:c1:5b:a2:c5:fd:1b:
73:3f:fe:b6:78:89:8c:5e:65:a4:7a:d1:7e:70:99:
91:d7:12:5b:50:f3:3c:67:86:fc:17:63:8f:fb:7b:
4a:38:8c:e5:c2:fd:22:6c:f3:ca:96:ae:cc:b1:f1:
b4:f3:86:be:6b:ca:87:52:fc:73:24:95:06:2b:77:
66:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:67:FA:4D:37:44:00:EA:D4:C4:45:31:71:96:DC:8A:3B:21:05:06
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/ymf6TTdEAOrUxEUxcZbcijshBQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.237.68.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:78:83:86:97:78:66:59:c9:6e:eb:e0:e9:df:38:20:2d:f7:
a4:09:4e:30:5d:1b:0e:5c:f5:df:06:f1:5c:1e:a5:0e:80:62:
cc:16:a8:f9:51:d8:dc:a9:88:c5:a7:ef:34:cc:cb:a0:28:0a:
22:bc:08:ef:e4:bb:8d:70:45:2f:fa:e7:5c:6d:ea:2d:e3:e1:
4a:3b:6d:6b:e8:49:c7:36:6b:44:09:70:83:c3:02:59:d0:0a:
db:63:22:9c:a6:bc:fd:bd:a3:7f:70:d8:4e:7f:14:2d:7f:3f:
10:10:4b:6d:2e:4e:9f:18:77:10:b8:19:1b:d4:bd:d1:57:dd:
9a:b0:71:02:cd:35:35:f8:5a:fd:43:14:70:7c:68:c9:8d:be:
49:4b:d5:0d:ba:ba:ef:ac:f0:93:f4:65:a5:31:e9:d7:70:1b:
04:af:30:75:df:e6:d2:cb:bd:38:c9:5c:9f:b1:e8:7b:c6:26:
b1:ad:37:ec:db:b2:9b:4c:c4:5a:55:23:19:9b:9b:59:ca:10:
8e:72:e3:4c:f8:e0:50:fa:55:1c:45:ce:78:6a:f7:37:99:bd:
57:a2:7b:0f:68:45:ed:ac:a9:63:75:19:2b:dd:fa:9c:0d:7d:
db:c5:fc:25:18:e8:27:d2:b3:9d:99:ce:1d:b1:ca:d0:71:5f:
de:61:17:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:41 2024 by rpki-client on console-ams.rpki-client.org