Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/YinjaWKhO-vq6o5ZmIWkF0uL_nM.roa
File: YinjaWKhO-vq6o5ZmIWkF0uL_nM.roa (raw, json)
Hash identifier: 4bKq/8wLwfGpkpzkm8JTXesx846itkCfRibIy9awnVw=
Subject key identifier: 62:29:E3:69:62:A1:3B:EB:EA:EA:8E:59:98:85:A4:17:4B:8B:FE:73
Certificate issuer: /CN=f7806ac35f2eac02cca046d650fb22befee68d43
Certificate serial: 0A33C9E0
Authority key identifier: F7:80:6A:C3:5F:2E:AC:02:CC:A0:46:D6:50:FB:22:BE:FE:E6:8D:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/94Bqw18urALMoEbWUPsivv7mjUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/YinjaWKhO-vq6o5ZmIWkF0uL_nM.roa
Signing time: Sat 01 Jan 2022 07:53:13 +0000
ROA not before: Sat 01 Jan 2022 07:53:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35472
IP address blocks: 193.218.44.0/22 maxlen: 22
193.218.48.0/20 maxlen: 20
193.218.64.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171166176 (0xa33c9e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7806ac35f2eac02cca046d650fb22befee68d43
Validity
Not Before: Jan 1 07:53:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6229e36962a13bebeaea8e599885a4174b8bfe73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ff:bc:3a:da:5e:8c:8d:c3:e2:b7:a1:43:0b:
2d:71:be:96:6c:64:d2:c1:86:88:aa:d3:94:4c:e8:
4d:78:34:b6:b6:6b:8e:35:a6:17:52:a9:aa:ca:82:
2b:ee:f3:1d:86:46:51:d4:78:01:a0:b4:d1:8b:2e:
61:9b:94:e8:9f:ce:e2:a5:c8:f0:c1:a9:f5:dd:5b:
fa:f8:43:ae:98:52:00:24:bb:49:a3:2c:75:bb:29:
b6:5a:e9:d6:23:e9:dc:b3:08:ff:c4:aa:2f:1e:bd:
f0:d6:3d:09:36:8a:96:c8:be:d5:01:5a:e5:f2:76:
92:e3:55:66:4a:9c:66:ad:8a:76:70:d6:a3:0b:cb:
6e:c0:c9:76:b4:23:5a:19:ec:c6:82:47:97:83:25:
89:69:20:d3:70:db:a6:85:c1:45:91:e0:c9:c6:17:
ab:20:8f:43:1b:22:83:17:20:18:24:b6:25:9f:31:
b9:da:85:bf:d2:50:83:0a:68:f6:75:db:01:82:ce:
ac:ad:1b:69:0c:25:dc:47:bf:d8:21:53:dc:02:9d:
5d:4c:ec:6a:f2:82:8a:9a:ef:be:29:c0:61:95:d1:
19:6f:0e:ec:b8:cd:40:d9:87:a3:d8:ac:2e:55:ba:
79:12:f8:d2:f5:6b:d2:47:da:ee:9e:35:7c:70:22:
75:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:29:E3:69:62:A1:3B:EB:EA:EA:8E:59:98:85:A4:17:4B:8B:FE:73
X509v3 Authority Key Identifier:
keyid:F7:80:6A:C3:5F:2E:AC:02:CC:A0:46:D6:50:FB:22:BE:FE:E6:8D:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94Bqw18urALMoEbWUPsivv7mjUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/YinjaWKhO-vq6o5ZmIWkF0uL_nM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/94Bqw18urALMoEbWUPsivv7mjUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.218.44.0-193.218.71.255
Signature Algorithm: sha256WithRSAEncryption
58:fc:8a:fa:53:91:91:b5:fc:c6:70:c9:58:7f:01:65:a8:e7:
60:6a:e5:6d:34:34:80:52:ef:ee:02:95:59:2c:b0:55:dc:1c:
33:c8:03:d0:57:1c:e0:87:bd:32:7e:09:67:20:89:b3:fa:c7:
3e:20:e7:3d:1c:c1:9f:7c:b1:fa:e7:9e:d5:30:47:9f:b5:6c:
7d:b4:a9:e3:98:df:0a:a9:98:2c:fd:1f:e7:56:11:7e:96:88:
14:aa:89:38:a5:b4:41:c9:5f:43:a0:60:cb:14:0e:7a:95:39:
58:d0:24:a6:c9:76:99:68:5b:65:52:d4:d1:ef:c1:a8:57:75:
9b:71:c6:4a:61:34:35:4f:7d:36:78:69:d0:63:fb:39:c2:1d:
08:18:69:25:a9:81:f6:5e:b0:f1:f3:dc:24:72:5c:da:23:d8:
2d:86:14:45:fe:ba:9f:fc:21:d0:8e:12:40:8d:c8:86:cc:0f:
01:c6:d8:92:6d:06:d4:af:20:93:23:c6:f9:10:02:2e:80:71:
1d:f1:6e:b5:2a:6d:23:10:2b:6b:8e:ce:26:eb:ef:60:3c:dd:
d0:6d:b5:bf:a3:49:92:48:af:a9:8a:fb:4d:49:c9:6a:0d:1d:
81:6e:7b:5e:1a:16:50:4f:83:61:4a:d8:48:cd:8a:36:83:98:
f7:4a:05:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:34 2023 by rpki-client on console-fra.rpki-client.org