Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/yBMyBrmrMD2HfS4GVw4Siv88Tx0.roa
File: yBMyBrmrMD2HfS4GVw4Siv88Tx0.roa (raw, json)
Hash identifier: DC3jUWt19u8QOGa56XcWDoBasvktnUAfVk9kWxZkMuY=
Subject key identifier: C8:13:32:06:B9:AB:30:3D:87:7D:2E:06:57:0E:12:8A:FF:3C:4F:1D
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 01850C434431FD678250E8C58739B446BF9C
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/yBMyBrmrMD2HfS4GVw4Siv88Tx0.roa
Signing time: Tue 13 Dec 2022 16:13:33 +0000
ROA not before: Tue 13 Dec 2022 16:13:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59831
IP address blocks: 217.78.235.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:0c:43:44:31:fd:67:82:50:e8:c5:87:39:b4:46:bf:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Dec 13 16:13:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c8133206b9ab303d877d2e06570e128aff3c4f1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:72:b6:73:88:5e:c2:f8:e4:38:33:e0:2a:5c:
ee:47:99:e9:2d:4b:79:b7:da:df:62:f5:ab:e6:07:
ee:2a:7a:6f:77:3a:6b:7d:3d:48:bd:30:0f:a0:0e:
38:44:75:55:b7:6e:2e:50:1d:33:41:cb:6e:a6:fa:
5e:0f:0b:f6:ad:fb:78:33:aa:67:9e:c3:5a:f3:91:
cb:06:72:86:d3:a5:09:31:36:25:2b:ab:3e:eb:54:
49:d1:dd:58:65:51:c8:f2:8e:f9:7a:16:01:bc:3c:
7d:b1:a9:82:ab:ee:c7:b1:77:db:a0:63:e1:02:f1:
3f:14:a3:a9:ec:d3:04:0d:eb:9b:d1:bd:bb:ad:31:
58:36:0a:f6:ce:97:9c:07:75:28:30:c2:d3:b3:ea:
b7:46:14:cc:1e:82:0d:42:86:8b:2c:75:49:50:ca:
61:b3:de:15:28:51:84:f5:f4:78:cb:f0:9a:22:57:
5e:b4:e3:fb:23:79:a2:b4:14:e5:34:82:27:3b:1c:
38:81:bb:ea:c5:a4:f5:20:33:d1:20:e3:41:1f:ff:
7a:08:dc:02:0f:bd:31:4b:c2:bb:db:e1:9d:ad:51:
53:84:8a:8c:74:12:4d:8a:1c:c9:ca:6d:39:78:f2:
c6:35:65:f7:43:4d:94:eb:d1:e0:ff:b6:95:3e:b3:
59:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:13:32:06:B9:AB:30:3D:87:7D:2E:06:57:0E:12:8A:FF:3C:4F:1D
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/yBMyBrmrMD2HfS4GVw4Siv88Tx0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.78.235.0/24
Signature Algorithm: sha256WithRSAEncryption
88:3f:d0:b0:61:75:5e:15:0b:b6:fd:29:67:68:90:b5:10:66:
b6:b3:b6:d8:ac:fd:29:24:d3:8b:f3:9b:d3:0d:a9:21:be:36:
1d:30:b5:c1:ef:9f:9f:ff:e2:9e:07:4c:a9:7a:e0:3d:f7:80:
b8:15:43:c3:ed:7a:c2:34:a7:aa:fd:f9:5d:93:7d:b8:f6:5c:
82:60:99:83:ed:e4:fd:f7:99:98:d6:b5:47:30:b8:60:2a:31:
4b:95:5c:d4:a3:9f:ba:fc:29:8e:c9:8d:00:02:ed:a2:d8:c9:
d7:a3:b6:43:6e:85:d4:f3:fc:7c:b4:2d:50:5f:54:e0:c0:96:
37:7a:a9:2f:3c:14:74:fb:d6:ee:43:0a:d1:24:65:db:ce:c1:
c9:91:64:b6:19:7a:65:b2:14:ad:9f:a7:44:62:18:00:54:4b:
2e:89:57:82:68:4e:d7:2f:f2:d1:63:8e:49:2e:f8:14:31:e7:
78:00:53:89:a0:a5:f8:ad:58:be:5d:01:3e:83:f2:a4:0c:2e:
74:09:03:44:e5:05:f8:8e:41:6e:17:75:4d:a0:3e:21:00:1b:
94:57:d0:56:57:64:1f:23:42:88:98:17:c7:de:4c:0a:bb:3a:
f0:55:8f:3e:e8:13:7f:67:a0:1d:2a:31:48:4e:e2:07:8b:6c:
d2:85:d4:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:39 2024 by rpki-client on console-ams.rpki-client.org