Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/0eecef-ae8f-4bf9-ab5e-524764a40e22/1/YZY4e_tgtqXJfLd0dslzBohjQEc.roa
File: YZY4e_tgtqXJfLd0dslzBohjQEc.roa (raw, json)
Hash identifier: FbewQeiBhTBqeIK1CiZSM/1tvPdf5k6pLnwGePGpwFY=
Subject key identifier: 61:96:38:7B:FB:60:B6:A5:C9:7C:B7:74:76:C9:73:06:88:63:40:47
Certificate issuer: /CN=c815d5c0cd2146baafe8aa6b8b9aa7ceb6e4175a
Certificate serial: ECA6
Authority key identifier: C8:15:D5:C0:CD:21:46:BA:AF:E8:AA:6B:8B:9A:A7:CE:B6:E4:17:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yBXVwM0hRrqv6Kpri5qnzrbkF1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/0eecef-ae8f-4bf9-ab5e-524764a40e22/1/YZY4e_tgtqXJfLd0dslzBohjQEc.roa
Signing time: Sat 19 Feb 2022 09:23:21 +0000
ROA not before: Sat 19 Feb 2022 09:23:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201463
IP address blocks: 194.55.42.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60582 (0xeca6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c815d5c0cd2146baafe8aa6b8b9aa7ceb6e4175a
Validity
Not Before: Feb 19 09:23:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6196387bfb60b6a5c97cb77476c9730688634047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1c:98:bd:e0:39:f9:83:10:39:c9:86:90:24:
6e:bd:3c:fd:88:de:75:bd:61:9f:c0:f2:39:53:f7:
5a:f2:35:db:a4:74:7a:0f:14:b1:cf:a1:e2:05:05:
c4:c1:ce:b4:ee:6f:e7:c5:43:09:98:cb:bc:9b:4e:
6f:53:5e:cc:79:1c:e2:51:0a:8e:08:8a:e1:ea:68:
df:5b:70:21:df:0d:8f:88:cb:86:ed:13:02:a6:86:
b9:36:6b:a2:4c:02:6d:69:71:d0:92:23:bd:31:4e:
d6:12:8f:4d:45:4e:97:0e:83:49:ba:aa:13:ce:4b:
64:63:8e:1d:1b:78:bd:17:0f:e2:1a:af:ce:ca:69:
f7:cd:a7:8c:6a:40:56:81:8e:55:04:81:22:d3:06:
09:50:9c:8e:37:e8:45:17:c6:82:11:d7:0c:d8:26:
10:90:14:af:49:c4:19:ed:d4:4d:70:30:03:43:26:
61:fd:47:75:9e:7d:27:a9:1b:ff:e8:67:ff:6b:f7:
d1:26:8a:65:76:8b:3c:03:be:c1:f0:08:70:6e:03:
9d:07:99:6f:f5:89:d1:e9:78:86:de:7c:74:93:b3:
bb:81:f3:e8:f7:d3:89:b9:14:e0:14:2c:eb:a3:9f:
2a:e3:0d:6e:4e:16:ef:a6:76:66:10:e0:fb:7a:e5:
63:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:96:38:7B:FB:60:B6:A5:C9:7C:B7:74:76:C9:73:06:88:63:40:47
X509v3 Authority Key Identifier:
keyid:C8:15:D5:C0:CD:21:46:BA:AF:E8:AA:6B:8B:9A:A7:CE:B6:E4:17:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBXVwM0hRrqv6Kpri5qnzrbkF1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0eecef-ae8f-4bf9-ab5e-524764a40e22/1/YZY4e_tgtqXJfLd0dslzBohjQEc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0eecef-ae8f-4bf9-ab5e-524764a40e22/1/yBXVwM0hRrqv6Kpri5qnzrbkF1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.55.42.0/24
Signature Algorithm: sha256WithRSAEncryption
65:9c:d0:17:c2:94:0c:8b:b3:f9:11:2f:1e:4e:94:8d:e9:03:
62:2c:c8:cf:b9:24:02:d1:84:ca:8c:f5:d3:88:69:48:43:10:
f5:d5:c7:e8:51:8f:66:ac:55:f6:61:a6:9c:11:18:b1:77:f8:
06:55:2c:21:13:7e:b3:7a:42:4a:54:eb:0a:f6:11:b8:40:d2:
fb:b8:f9:6d:31:03:15:80:cd:75:76:e3:ee:ce:9d:0f:61:f4:
f5:af:37:df:7b:30:4d:ad:da:c0:70:25:b4:01:ca:15:56:08:
49:86:6f:80:e4:f4:39:c4:6b:16:6c:4d:69:5d:5f:41:25:5d:
61:12:23:49:42:e2:3f:f1:44:41:33:7d:de:75:66:d6:c2:6a:
a3:a0:d7:75:74:48:17:63:21:26:1d:ef:b7:ea:92:b0:af:40:
f8:f0:d8:66:97:02:d2:68:dc:a7:7d:8e:76:8b:4c:5c:90:7c:
53:e9:2d:44:38:84:93:a9:d7:e3:3b:06:6c:4a:c4:b3:64:74:
60:08:08:7a:17:2a:5b:c0:21:3f:1c:06:e9:f2:77:47:4a:d7:
28:a3:cd:97:2a:35:90:3f:cb:b3:1f:b7:d1:6b:10:e8:ff:8b:
8c:c4:89:96:60:5e:3c:bd:63:42:98:51:c2:a4:7b:70:c4:21:
19:22:50:be
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDAOymMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGM4
MTVkNWMwY2QyMTQ2YmFhZmU4YWE2YjhiOWFhN2NlYjZlNDE3NWEwHhcNMjIwMjE5
MDkyMzIxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg2MTk2Mzg3YmZiNjBi
NmE1Yzk3Y2I3NzQ3NmM5NzMwNjg4NjM0MDQ3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAzByYveA5+YMQOcmGkCRuvTz9iN51vWGfwPI5U/da8jXbpHR6
DxSxz6HiBQXEwc607m/nxUMJmMu8m05vU17MeRziUQqOCIrh6mjfW3Ah3w2PiMuG
7RMCpoa5NmuiTAJtaXHQkiO9MU7WEo9NRU6XDoNJuqoTzktkY44dG3i9Fw/iGq/O
ymn3zaeMakBWgY5VBIEi0wYJUJyON+hFF8aCEdcM2CYQkBSvScQZ7dRNcDADQyZh
/Ud1nn0nqRv/6Gf/a/fRJopldos8A77B8AhwbgOdB5lv9YnR6XiG3nx0k7O7gfPo
99OJuRTgFCzro58q4w1uThbvpnZmEOD7euVjdQIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFGGWOHv7YLalyXy3dHbJcwaIY0BHMB8GA1UdIwQYMBaAFMgV1cDNIUa6r+iq
a4uap8625BdaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
eUJYVndNMGhScnF2Nktwcmk1cW56cmJrRjFvLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9lNy8wZWVjZWYtYWU4Zi00YmY5LWFiNWUtNTI0NzY0YTQwZTIyLzEv
WVpZNGVfdGd0cVhKZkxkMGRzbHpCb2hqUUVjLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8w
ZWVjZWYtYWU4Zi00YmY5LWFiNWUtNTI0NzY0YTQwZTIyLzEveUJYVndNMGhScnF2
Nktwcmk1cW56cmJrRjFvLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjcqMA0GCSqGSIb3DQEBCwUAA4IB
AQBlnNAXwpQMi7P5ES8eTpSN6QNiLMjPuSQC0YTKjPXTiGlIQxD11cfoUY9mrFX2
YaacERixd/gGVSwhE36zekJKVOsK9hG4QNL7uPltMQMVgM11duPuzp0PYfT1rzff
ezBNrdrAcCW0AcoVVghJhm+A5PQ5xGsWbE1pXV9BJV1hEiNJQuI/8URBM33edWbW
wmqjoNd1dEgXYyEmHe+36pKwr0D48NhmlwLSaNynfY52i0xckHxT6S1EOISTqdfj
OwZsSsSzZHRgCAh6FypbwCE/HAbp8ndHStcoo82XKjWQP8uzH7fRaxDo/4uMxImW
YF48vWNCmFHCpHtwxCEZIlC+
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:48 2024 by rpki-client on console-fra.rpki-client.org