Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/ymcWsxSijIQItXF8B9VPzLGwdjI.roa
File: ymcWsxSijIQItXF8B9VPzLGwdjI.roa (raw, json)
Hash identifier: qvoyNEU6XqdK/H3SXhs+x3i7u4bVYEs4IqQgrHmlduo=
Subject key identifier: CA:67:16:B3:14:A2:8C:84:08:B5:71:7C:07:D5:4F:CC:B1:B0:76:32
Certificate issuer: /CN=424feffb576e411de511871dc1e0bd7a20e2c4d7
Certificate serial: 02C85772
Authority key identifier: 42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/ymcWsxSijIQItXF8B9VPzLGwdjI.roa
Signing time: Sat 01 Jan 2022 16:05:45 +0000
ROA not before: Sat 01 Jan 2022 16:05:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7922
IP address blocks: 45.92.232.0/22 maxlen: 24
45.147.32.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46684018 (0x2c85772)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=424feffb576e411de511871dc1e0bd7a20e2c4d7
Validity
Not Before: Jan 1 16:05:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ca6716b314a28c8408b5717c07d54fccb1b07632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:cd:31:61:d8:79:52:07:fa:7e:0c:ad:06:ed:
22:c2:24:d3:a0:e2:97:34:c5:22:3b:93:8b:36:fa:
94:df:11:67:97:f7:53:78:7c:48:cb:1e:3b:0e:01:
fe:ac:57:ab:51:de:e8:3a:c9:43:d7:35:32:ff:c0:
41:fc:f9:bb:44:55:61:20:c3:a7:71:62:dd:32:4d:
54:77:94:8c:9a:b8:5a:2d:f3:25:1f:04:9b:da:95:
19:e4:42:85:04:7d:64:3c:2d:f3:9e:6a:55:1f:03:
70:62:f4:f8:1e:5d:09:dd:f9:0b:f1:23:77:38:df:
18:22:d2:e7:82:b2:1c:bf:f1:ae:f7:8e:30:8f:57:
42:0d:b8:30:ea:67:86:94:17:1e:db:5f:2d:e4:fa:
46:37:98:49:3a:32:8a:ae:ef:f6:30:7c:fd:b1:d3:
56:a4:2f:e7:6f:6a:21:56:b2:93:4d:3a:33:e1:91:
05:f4:ec:d6:25:bb:ef:9b:3a:e3:5a:62:24:a8:7b:
0a:6b:5a:32:c3:71:86:17:c2:1d:af:53:1a:d7:50:
19:76:e7:8a:85:a3:a9:e7:ff:92:29:ac:99:09:c2:
cc:d9:1d:13:8b:32:77:6a:46:bb:f0:1a:d1:68:b5:
0d:d7:b7:50:65:00:aa:3c:f6:58:48:4b:4e:b2:53:
24:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:67:16:B3:14:A2:8C:84:08:B5:71:7C:07:D5:4F:CC:B1:B0:76:32
X509v3 Authority Key Identifier:
keyid:42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/ymcWsxSijIQItXF8B9VPzLGwdjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.232.0/22
45.147.32.0/22
Signature Algorithm: sha256WithRSAEncryption
af:4f:12:90:21:8e:03:75:a3:27:5f:75:97:22:4b:7c:28:15:
2c:50:7c:e9:71:73:1e:8b:4b:c4:6e:8c:02:0e:b7:a0:38:70:
da:7c:3c:45:34:31:5a:9a:d6:f2:47:85:b8:1b:47:eb:2d:02:
d1:eb:4a:71:7b:7e:ab:d1:6b:d5:56:15:1f:ee:fd:a7:40:9d:
01:8c:3a:e3:f1:6d:24:d0:98:4c:7f:5d:69:01:4f:df:68:e5:
73:f1:62:c5:ce:b5:4b:cd:a6:f5:a3:c0:81:0b:98:85:12:ca:
ac:5e:17:b5:f7:84:c3:14:74:74:b4:05:95:89:2d:12:be:b3:
43:c1:22:31:2f:0b:9a:77:35:9e:1e:17:76:41:5b:74:ca:32:
95:f2:7a:67:1e:28:25:48:87:0d:4e:f5:f8:24:56:52:9a:22:
ce:2a:bd:ba:a5:b0:96:e2:c6:53:41:b8:b7:4e:c3:9f:f0:03:
a3:f0:9a:60:f4:c5:11:28:6c:1c:c9:5f:ea:79:b0:d9:dd:dc:
6b:ee:9a:96:88:32:e2:6b:28:89:2c:32:12:e6:69:8f:2d:9b:
2a:15:78:5c:7c:5f:92:ab:ec:8c:b5:56:3c:d0:8b:4c:3b:f4:
c3:0c:b8:78:c1:62:71:95:38:45:20:f7:b4:b8:bf:f2:5d:91:
38:b9:0a:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:48 2023 by rpki-client on console-ams.rpki-client.org