Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/jyhKLYAROiy_IiBjz-rOPg6Uk7M.roa
File: jyhKLYAROiy_IiBjz-rOPg6Uk7M.roa (raw, json)
Hash identifier: FLqnX/F2XiKonYklMYPHEHR2v2HW0r9S1OFv/8jjKG0=
Subject key identifier: 8F:28:4A:2D:80:11:3A:2C:BF:22:20:63:CF:EA:CE:3E:0E:94:93:B3
Certificate issuer: /CN=a0639adf1e0b84b9ff64e4f8ebe638ebbf5d27b9
Certificate serial: 082D3157
Authority key identifier: A0:63:9A:DF:1E:0B:84:B9:FF:64:E4:F8:EB:E6:38:EB:BF:5D:27:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oGOa3x4LhLn_ZOT46-Y4679dJ7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/jyhKLYAROiy_IiBjz-rOPg6Uk7M.roa
Signing time: Thu 09 Jun 2022 09:14:02 +0000
ROA not before: Thu 09 Jun 2022 09:14:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21263
IP address blocks: 185.124.224.0/22 maxlen: 24
146.255.112.0/22 maxlen: 24
185.16.72.0/22 maxlen: 24
217.24.192.0/20 maxlen: 24
185.162.220.0/22 maxlen: 24
217.31.208.0/20 maxlen: 24
185.198.140.0/22 maxlen: 24
212.62.192.0/19 maxlen: 24
45.155.112.0/22 maxlen: 24
81.27.112.0/20 maxlen: 24
185.231.72.0/22 maxlen: 24
161.51.240.0/21 maxlen: 24
217.11.144.0/20 maxlen: 24
2a02:590::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137179479 (0x82d3157)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0639adf1e0b84b9ff64e4f8ebe638ebbf5d27b9
Validity
Not Before: Jun 9 09:14:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8f284a2d80113a2cbf222063cfeace3e0e9493b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:bd:fa:ee:0f:15:ed:3f:79:33:69:5b:c9:38:
47:86:36:70:d7:2c:f6:c6:5e:9e:e5:cc:91:8e:57:
f9:95:76:e9:85:09:b1:87:28:e4:68:5a:27:0c:59:
95:f1:11:82:c9:37:b8:7b:0e:7a:fa:34:0e:0c:63:
dc:c3:56:df:00:b1:97:8e:e7:46:dd:77:ed:1b:b1:
24:e8:91:93:9e:1b:d6:c1:48:f9:bf:cb:05:ff:47:
f4:29:c6:aa:97:15:44:ef:2c:e6:63:5c:51:e2:19:
70:98:f5:bf:5c:0c:c4:32:bf:5b:dd:6c:ea:ea:a3:
0f:18:1d:96:d7:b1:3e:06:bb:ee:4d:e3:91:11:ff:
1f:54:cc:8d:7b:b1:ae:d7:86:b7:63:2e:2c:9e:24:
0b:40:5c:d1:46:88:c4:0a:cc:49:f2:7e:db:79:8c:
9f:7f:8b:71:d1:15:4f:97:ed:c9:e3:14:66:27:8c:
64:e9:d3:0d:0d:03:4a:ab:01:d4:83:2f:ad:15:a5:
fa:04:75:38:ae:90:93:1c:13:fc:db:0c:5d:c7:a9:
1f:84:e3:54:ee:e5:e0:8d:8c:b3:1b:0a:33:28:c7:
5c:8e:e8:30:30:09:b0:66:19:36:ae:85:f6:3c:90:
48:ed:7f:65:90:97:ed:81:e1:60:b5:4c:62:ac:e8:
32:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:28:4A:2D:80:11:3A:2C:BF:22:20:63:CF:EA:CE:3E:0E:94:93:B3
X509v3 Authority Key Identifier:
keyid:A0:63:9A:DF:1E:0B:84:B9:FF:64:E4:F8:EB:E6:38:EB:BF:5D:27:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oGOa3x4LhLn_ZOT46-Y4679dJ7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/jyhKLYAROiy_IiBjz-rOPg6Uk7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.112.0/22
81.27.112.0/20
146.255.112.0/22
161.51.240.0/21
185.16.72.0/22
185.124.224.0/22
185.162.220.0/22
185.198.140.0/22
185.231.72.0/22
212.62.192.0/19
217.11.144.0/20
217.24.192.0/20
217.31.208.0/20
IPv6:
2a02:590::/29
Signature Algorithm: sha256WithRSAEncryption
12:85:a5:ad:09:fd:f2:37:bb:7d:ce:9c:72:dc:a3:d6:5e:d6:
f1:54:bc:28:b5:32:04:3d:20:7e:ca:22:cb:08:8a:ad:d5:9a:
92:12:52:66:3d:21:5f:24:7f:78:24:ad:5e:ed:e3:55:18:c3:
b6:0b:e8:09:23:2c:18:10:0b:12:c7:c6:99:08:43:1a:4c:6b:
15:e3:1d:f4:8e:e9:de:84:95:af:48:3c:ff:73:7b:1e:8a:82:
33:7d:fa:8d:b7:07:53:a4:0e:56:e1:f8:0a:a9:71:65:04:d2:
b9:af:19:bd:c2:74:b2:46:f0:ab:03:26:b8:e1:55:28:2a:a5:
aa:6c:a6:96:33:e4:46:d6:9b:9b:e6:48:7a:d6:44:f2:8f:bd:
2e:d0:10:68:e8:58:cb:3e:7f:d8:c9:00:75:20:64:ad:c7:9e:
3f:87:23:6b:a2:1f:5d:ce:99:6d:15:0b:c6:7d:8e:e3:1b:f8:
c1:1f:61:f8:32:30:9b:3e:e8:b5:ae:8f:1e:a0:20:b9:22:69:
56:ca:ad:cb:f4:5a:5c:71:2e:03:70:88:b3:76:8f:63:0b:43:
6d:48:5e:da:9e:79:7a:69:ea:5f:41:0c:50:05:97:47:37:8a:
08:5f:09:7d:64:ee:d6:55:17:b2:59:94:f7:e5:08:39:40:57:
40:07:9a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:49 2024 by rpki-client on console-fra.rpki-client.org