Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/Y-lkKb03iEUoJnznGHvfzbD2GSc.roa
File: Y-lkKb03iEUoJnznGHvfzbD2GSc.roa (raw, json)
Hash identifier: T6aDYndlRv0iMi5c804WEbY4P4HX/96LIvuMhByE6Mg=
Subject key identifier: 63:E9:64:29:BD:37:88:45:28:26:7C:E7:18:7B:DF:CD:B0:F6:19:27
Certificate issuer: /CN=c3c0591e2eb49d0559e6fce7ee2aa81f0f59ba6f
Certificate serial: 1445878E
Authority key identifier: C3:C0:59:1E:2E:B4:9D:05:59:E6:FC:E7:EE:2A:A8:1F:0F:59:BA:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8BZHi60nQVZ5vzn7iqoHw9Zum8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/Y-lkKb03iEUoJnznGHvfzbD2GSc.roa
Signing time: Sat 01 Jan 2022 15:01:57 +0000
ROA not before: Sat 01 Jan 2022 15:01:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9009
IP address blocks: 89.35.57.0/24 maxlen: 24
185.122.223.0/24 maxlen: 24
89.42.31.0/24 maxlen: 24
93.119.178.0/24 maxlen: 24
93.119.179.0/24 maxlen: 24
93.119.181.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 340101006 (0x1445878e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c0591e2eb49d0559e6fce7ee2aa81f0f59ba6f
Validity
Not Before: Jan 1 15:01:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=63e96429bd37884528267ce7187bdfcdb0f61927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:48:c7:6b:e2:3f:99:13:04:35:16:97:ba:2b:
60:b1:8e:9f:2e:1a:18:38:d2:5b:7f:5f:fa:62:b8:
58:fa:63:37:08:fa:58:8a:3a:bd:a0:57:e8:e8:5c:
a2:36:44:3e:cb:75:5c:d7:ee:53:9e:8f:f9:83:20:
39:a1:17:ad:81:23:54:2e:bd:09:fb:ea:16:4c:cc:
a4:17:ff:7c:74:ef:73:a7:ce:e5:84:1a:54:88:87:
98:7a:45:6f:80:65:1d:a5:82:fa:75:bc:6b:f8:bf:
c5:2a:7b:43:46:95:73:2b:98:d8:ef:ea:7e:e9:b8:
8b:62:a0:7d:fe:9a:f8:5a:a1:14:3d:5f:a9:a3:b1:
52:0f:1d:e4:c3:9f:4a:12:4e:65:51:9b:08:e0:95:
59:27:db:86:ce:7d:fe:d4:c9:fe:72:50:ce:ed:af:
47:c1:b4:ae:30:ef:d1:d9:a1:06:61:7c:a2:d5:d6:
5e:f6:59:44:cd:8d:99:fc:68:66:22:9c:df:59:6a:
0b:83:54:18:21:1c:e9:f3:dd:6c:1c:e9:bf:59:63:
31:97:26:e8:07:f4:14:ac:20:ca:f1:9e:79:d5:f7:
97:d5:f4:dd:8f:a0:eb:e2:f8:85:28:a7:8f:39:55:
40:40:3d:ec:92:9b:25:32:aa:ae:36:35:b8:35:9d:
41:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:E9:64:29:BD:37:88:45:28:26:7C:E7:18:7B:DF:CD:B0:F6:19:27
X509v3 Authority Key Identifier:
keyid:C3:C0:59:1E:2E:B4:9D:05:59:E6:FC:E7:EE:2A:A8:1F:0F:59:BA:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8BZHi60nQVZ5vzn7iqoHw9Zum8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/Y-lkKb03iEUoJnznGHvfzbD2GSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.57.0/24
89.42.31.0/24
93.119.178.0/23
93.119.181.0/24
185.122.223.0/24
Signature Algorithm: sha256WithRSAEncryption
62:10:2f:85:09:ee:f9:74:66:f7:f8:cc:83:14:ae:da:8e:8b:
9a:16:6f:09:e0:0d:b5:4a:e0:da:e9:0c:7e:57:cc:db:00:69:
32:f7:4b:39:0f:fa:7c:0c:3f:f0:85:f1:a4:0d:10:85:09:1b:
17:ab:f8:37:4d:0a:50:ff:3e:e1:cb:e5:cb:76:a4:b0:c0:f6:
60:9f:03:d2:19:1f:0d:a5:83:64:3a:2f:95:d5:c8:be:9e:7c:
d9:6d:6a:a8:16:6f:f4:8f:53:50:2a:33:b0:16:1f:b0:ae:95:
20:ac:e3:01:62:37:60:e8:59:16:74:2d:86:b0:b3:97:6a:5e:
c1:d7:0e:40:ec:51:5a:f9:63:c7:53:fd:74:80:1e:e1:34:10:
a5:be:b4:f9:42:33:02:ba:03:74:42:2b:10:f9:28:be:a6:50:
c4:2e:5f:c0:d8:6c:0a:3f:1f:22:48:04:57:e4:26:b3:ee:53:
c2:34:95:93:68:9f:73:53:41:09:39:83:22:56:90:96:47:ce:
c1:5d:0c:95:d5:7d:2f:cd:ce:0b:d6:83:25:a3:4c:4b:df:62:
b9:25:5f:9a:22:ac:98:54:22:13:61:f1:83:38:9f:e5:c6:af:
c8:ed:3e:b1:c9:f7:4e:4e:13:da:c0:8b:1d:70:ef:b5:af:c7:
7d:ef:75:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:41 2023 by rpki-client on console-fra.rpki-client.org