Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/YYuI4_oaKHSY0s-05TdFrVQad0Y.roa
File: YYuI4_oaKHSY0s-05TdFrVQad0Y.roa (raw, json)
Hash identifier: ySznTdHq28aSxgq9eRVZKo/jpFdn2nzKfUSszjqX70w=
Subject key identifier: 61:8B:88:E3:FA:1A:28:74:98:D2:CF:B4:E5:37:45:AD:54:1A:77:46
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 427E1F37
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/YYuI4_oaKHSY0s-05TdFrVQad0Y.roa
Signing time: Sat 01 Jan 2022 14:03:21 +0000
ROA not before: Sat 01 Jan 2022 14:03:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197308
IP address blocks: 192.121.252.0/24 maxlen: 24
192.36.169.0/24 maxlen: 24
192.36.199.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1115561783 (0x427e1f37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 14:03:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=618b88e3fa1a287498d2cfb4e53745ad541a7746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:cb:2c:a9:4f:04:d4:da:e0:44:01:f9:d1:1e:
06:8f:fb:1c:2b:96:89:46:42:ed:e1:b0:e4:75:ed:
cc:55:17:e5:3b:ee:54:fa:da:1f:fa:39:18:7d:21:
c8:c6:f1:46:23:ef:de:27:89:9b:ae:52:01:df:7a:
fb:8a:b0:0c:6d:01:1a:ef:8b:a8:72:fe:56:4c:5b:
a9:b6:21:b4:1e:16:ea:aa:03:b7:9d:ee:15:6e:18:
07:31:24:0f:59:8f:98:63:71:e0:26:84:77:bb:4e:
63:39:21:b7:b7:e0:1a:aa:26:03:29:4c:1c:74:32:
5e:ae:7b:a2:d5:68:7f:b0:47:21:f9:4b:9b:01:e9:
66:ba:b2:7c:8f:b8:f4:dd:6b:66:c7:b8:87:91:89:
70:59:23:94:44:1e:3b:cf:63:66:e8:1a:c0:b9:a2:
aa:0b:44:79:4b:df:ee:88:b9:f9:e6:41:9f:96:8e:
31:d3:6a:e3:8f:56:ec:7a:fc:24:af:e5:40:14:f6:
9f:cd:4a:53:6e:5d:c8:13:26:4c:ca:4b:8e:fd:56:
36:22:e4:ee:ea:d6:5d:d5:64:22:b7:0b:7d:dd:6d:
c6:f5:81:4d:fa:61:4f:d1:8c:49:7c:d8:91:71:98:
d2:16:3c:94:4b:b0:22:22:e0:0d:c9:44:0c:0f:b2:
ba:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:8B:88:E3:FA:1A:28:74:98:D2:CF:B4:E5:37:45:AD:54:1A:77:46
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/YYuI4_oaKHSY0s-05TdFrVQad0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.169.0/24
192.36.199.0/24
192.121.252.0/24
Signature Algorithm: sha256WithRSAEncryption
45:19:02:4f:56:d9:6b:b2:5b:c0:32:bc:3e:88:f0:ee:60:8f:
cb:a5:c7:7b:a8:1c:9f:a8:2b:2a:0a:a1:2c:3b:11:c9:13:b2:
51:5c:68:68:55:90:52:f1:42:57:b9:62:c8:14:55:de:c8:4c:
3b:58:30:19:91:d6:e9:f7:cf:e2:ca:ff:d0:81:a6:62:93:9b:
ca:1b:ab:d1:f5:e8:1b:15:54:d2:58:62:0e:8d:40:60:df:e0:
46:25:5e:3d:cf:b1:05:e7:af:d8:ac:93:af:61:9f:27:27:c0:
1c:36:fe:57:28:0b:db:2d:8f:70:6a:cd:f3:a8:1b:95:ea:da:
f0:9d:3c:26:7e:14:ce:67:c9:e3:68:95:26:2d:67:64:03:66:
64:20:9d:fa:20:47:34:47:82:4e:c4:e6:13:2d:22:b5:2b:6f:
0b:4c:9f:13:5f:d2:18:48:d0:ea:a8:2a:44:4c:c3:da:c4:89:
6b:53:eb:ed:5d:ad:11:b5:80:b6:2c:60:0c:b6:5c:72:aa:d4:
55:d5:9a:a7:dd:33:dd:e6:67:0c:d6:f3:1a:40:71:9f:0e:14:
f4:0c:38:87:1e:b1:5f:9c:43:3e:b6:28:59:0c:ae:79:9f:6d:
bf:7c:bc:b8:31:4b:eb:7e:db:b2:72:33:f4:1c:6d:ed:c5:9b:
2c:24:8e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:38 2023 by rpki-client on console-ams.rpki-client.org