Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/ynTgBjaEanGJSQP5EgGmtQG-8Q4.roa
File: ynTgBjaEanGJSQP5EgGmtQG-8Q4.roa (raw, json)
Hash identifier: 7qp2fK1BzNEMZbtL7koyvduJWodWyCTessy4seivyjg=
Subject key identifier: CA:74:E0:06:36:84:6A:71:89:49:03:F9:12:01:A6:B5:01:BE:F1:0E
Certificate issuer: /CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Certificate serial: 3512B917
Authority key identifier: 92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/ynTgBjaEanGJSQP5EgGmtQG-8Q4.roa
Signing time: Sat 01 Jan 2022 05:58:42 +0000
ROA not before: Sat 01 Jan 2022 05:58:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60178
IP address blocks: 87.236.214.0/24 maxlen: 24
87.236.213.0/24 maxlen: 24
79.143.86.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 890419479 (0x3512b917)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Validity
Not Before: Jan 1 05:58:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ca74e00636846a71894903f91201a6b501bef10e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b0:33:d6:32:68:d2:a7:0d:4c:d9:4a:3a:af:
b6:b4:f4:ee:28:88:44:b1:52:d0:17:6d:f0:f7:b3:
a5:61:ea:5e:2c:d5:18:f4:8f:09:cc:01:15:ce:3b:
46:32:ff:1d:6d:93:7d:c9:eb:f0:46:e3:cb:e4:97:
74:7c:50:bd:6e:88:e0:8b:d6:f3:cc:d0:7f:e0:9d:
20:2f:70:6b:2d:90:50:31:83:f9:32:19:a0:3d:aa:
d9:fd:b3:e4:1e:99:8f:c5:3f:b6:49:04:81:d4:0d:
c8:05:52:8b:04:16:83:5c:79:6c:10:4e:50:dc:8a:
b3:de:92:37:0f:5d:50:2b:fd:34:03:44:86:7d:4c:
71:1b:5f:4f:bf:db:02:06:97:c1:b6:1b:92:2e:c6:
87:d9:65:0e:5d:93:5d:42:da:55:cc:7c:32:97:a3:
0f:ae:39:73:2f:b7:91:f8:96:46:ad:76:ef:20:9a:
0e:fe:b5:4e:2e:66:52:4c:46:f6:60:9a:f7:fb:1b:
e5:2e:56:12:28:e7:0d:e7:18:62:1f:d1:b7:cb:5c:
82:2f:7b:70:db:2c:6c:ff:95:90:f7:6e:0a:d7:37:
29:f7:23:05:78:88:f6:f5:94:23:db:54:f6:b1:91:
30:79:78:79:ba:97:bf:a2:d1:40:f1:f7:f7:80:c4:
c4:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:74:E0:06:36:84:6A:71:89:49:03:F9:12:01:A6:B5:01:BE:F1:0E
X509v3 Authority Key Identifier:
keyid:92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/ynTgBjaEanGJSQP5EgGmtQG-8Q4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.143.86.0/24
87.236.213.0-87.236.214.255
Signature Algorithm: sha256WithRSAEncryption
7f:e9:89:b9:d9:6a:dd:61:42:8b:b1:63:cf:8b:72:33:58:0d:
3b:93:02:3d:d5:4e:f4:e4:5e:0b:88:a6:b1:39:07:b8:f2:f4:
d1:62:a5:56:ae:1b:a0:38:ce:b2:e1:f9:47:9e:9a:d3:75:20:
3f:16:ab:76:23:7f:88:d9:de:89:d8:aa:71:ff:78:67:1c:41:
d1:c0:84:4c:a5:01:c7:54:be:29:73:0c:88:0e:a5:f1:d3:b5:
6c:aa:d6:ad:d2:5e:cd:83:7d:fe:ed:0d:23:0f:4e:1a:53:f2:
f5:9d:9e:7d:3f:01:42:0b:ef:30:4b:a7:47:c7:df:2e:30:87:
85:39:78:17:7f:98:8a:53:7e:75:07:02:e1:fa:92:6c:53:96:
af:e1:85:df:bc:81:ff:92:b6:89:e2:c7:9e:fd:a6:25:d3:03:
68:b4:ca:6a:0e:42:49:1a:d8:b7:8d:67:df:e6:d8:95:69:14:
e5:31:40:8a:0b:2c:8c:fb:b2:0d:c0:d2:50:b9:14:3e:0e:41:
05:4e:4a:e9:95:d8:0f:48:0f:6a:57:bf:7d:35:4c:c6:b7:ca:
50:42:96:fd:8a:7d:de:f6:a7:d7:e0:9f:ca:44:cc:d9:c2:c6:
c1:4e:76:ea:bd:9e:c1:cd:70:7e:15:ee:90:71:d7:3c:53:22:
52:f7:08:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:43 2024 by rpki-client on console-fra.rpki-client.org