Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/yf8FU4am7ea2QsdMLdOsFxqz7_k.roa
File: yf8FU4am7ea2QsdMLdOsFxqz7_k.roa (raw, json)
Hash identifier: lFeh4sDbd5len6qf4TNxcRNoAustxKBQ3AXcEe9QCe4=
Subject key identifier: C9:FF:05:53:86:A6:ED:E6:B6:42:C7:4C:2D:D3:AC:17:1A:B3:EF:F9
Certificate issuer: /CN=60998d3c9d8bdc9c1dff8e319424412b6cdc1dd3
Certificate serial: 088A5BD9
Authority key identifier: 60:99:8D:3C:9D:8B:DC:9C:1D:FF:8E:31:94:24:41:2B:6C:DC:1D:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/yf8FU4am7ea2QsdMLdOsFxqz7_k.roa
Signing time: Tue 14 Jun 2022 15:22:44 +0000
ROA not before: Tue 14 Jun 2022 15:22:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 272719
IP address blocks: 192.40.69.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143285209 (0x88a5bd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60998d3c9d8bdc9c1dff8e319424412b6cdc1dd3
Validity
Not Before: Jun 14 15:22:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c9ff055386a6ede6b642c74c2dd3ac171ab3eff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:39:18:c2:90:0e:ea:4a:05:df:b7:87:3f:5e:
0d:49:f3:30:56:98:c1:3b:f0:ab:d1:ad:09:5f:a9:
bf:01:69:06:a0:ae:38:bd:35:eb:8b:72:a0:b2:5c:
8a:83:f4:50:2d:2f:4f:77:8e:76:2c:61:f3:4d:dd:
8c:77:1a:eb:2c:51:8f:c4:3f:4a:4a:ff:01:e4:96:
77:99:96:3c:72:95:e6:6c:ad:16:d9:61:ab:81:72:
eb:f9:80:4a:92:ca:f1:20:cb:1d:af:72:3f:f0:8c:
37:e6:d0:8e:78:70:37:22:9d:33:df:3a:35:a0:f7:
c5:99:41:5f:af:9d:c1:fb:9a:ce:9d:61:fa:e3:52:
e4:5a:81:d4:aa:32:e1:06:1f:4a:26:55:fb:fa:43:
7f:c8:f0:0e:b5:78:44:a5:50:18:4b:a1:ea:30:11:
b6:5d:32:b4:35:83:4a:dc:0d:6f:be:86:1e:68:03:
4a:64:c5:18:0c:e9:c8:1e:25:b1:36:32:a6:36:10:
8d:3c:3b:67:ec:8a:63:da:f6:4e:34:d8:9c:99:0e:
0b:89:6c:67:56:39:50:24:8a:24:e7:cb:dd:b9:c9:
ef:31:36:0a:a2:01:b2:50:60:b2:f5:9e:02:89:b0:
cc:4c:cc:63:16:8b:cd:44:4f:ab:cf:b5:41:80:91:
cd:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:FF:05:53:86:A6:ED:E6:B6:42:C7:4C:2D:D3:AC:17:1A:B3:EF:F9
X509v3 Authority Key Identifier:
keyid:60:99:8D:3C:9D:8B:DC:9C:1D:FF:8E:31:94:24:41:2B:6C:DC:1D:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/yf8FU4am7ea2QsdMLdOsFxqz7_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.40.69.0/24
Signature Algorithm: sha256WithRSAEncryption
57:40:b9:da:fd:d1:b0:90:fb:2a:35:05:9c:f9:c4:8e:a0:df:
d8:93:4e:b8:c9:44:62:84:30:18:10:7e:2f:31:e9:dd:67:e3:
fa:5b:c8:0c:24:72:48:65:3a:e5:d0:c9:a3:5a:c3:f3:1f:69:
cd:87:af:c9:89:b4:8e:11:19:c4:17:82:1f:c5:47:ff:d8:b8:
8e:b8:87:e2:e9:39:3a:8a:6a:fa:b0:e9:cf:83:83:2c:6c:48:
2e:f5:b2:ff:57:c8:ef:fd:1a:a2:a5:81:cd:01:69:fa:b8:8d:
36:be:ae:53:b9:d7:fe:20:04:da:42:34:c5:ab:41:a8:85:a9:
97:1e:e6:48:18:3b:8a:fb:f0:69:13:6c:2f:8b:31:76:40:6b:
e3:7e:02:03:2a:aa:1c:9d:ca:9c:84:3b:5f:e3:74:02:29:e6:
d0:33:f8:5d:04:07:b5:04:09:a9:56:0f:ef:73:8c:82:f3:21:
69:1b:95:c5:ba:3e:00:b7:8d:7d:da:c7:b3:cd:31:ef:c2:61:
dd:5b:c2:4c:d2:46:9a:79:c5:35:a8:24:2c:d9:64:7f:83:1e:
8b:ec:35:3f:8d:80:37:b0:fd:6a:a9:f9:aa:74:35:d4:60:5f:
e6:24:86:23:32:38:15:04:b1:64:e3:85:f5:ca:29:df:89:e1:
6d:12:8e:7d
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECIpb2TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
MDk5OGQzYzlkOGJkYzljMWRmZjhlMzE5NDI0NDEyYjZjZGMxZGQzMB4XDTIyMDYx
NDE1MjI0NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzlmZjA1NTM4NmE2
ZWRlNmI2NDJjNzRjMmRkM2FjMTcxYWIzZWZmOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAM45GMKQDupKBd+3hz9eDUnzMFaYwTvwq9GtCV+pvwFpBqCu
OL0164tyoLJcioP0UC0vT3eOdixh803djHca6yxRj8Q/Skr/AeSWd5mWPHKV5myt
Ftlhq4Fy6/mASpLK8SDLHa9yP/CMN+bQjnhwNyKdM986NaD3xZlBX6+dwfuazp1h
+uNS5FqB1Koy4QYfSiZV+/pDf8jwDrV4RKVQGEuh6jARtl0ytDWDStwNb76GHmgD
SmTFGAzpyB4lsTYypjYQjTw7Z+yKY9r2TjTYnJkOC4lsZ1Y5UCSKJOfL3bnJ7zE2
CqIBslBgsvWeAomwzEzMYxaLzURPq8+1QYCRzf0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTJ/wVThqbt5rZCx0wt06wXGrPv+TAfBgNVHSMEGDAWgBRgmY08nYvcnB3/
jjGUJEErbNwd0zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1lKbU5QSjJMM0p3ZF80NHhsQ1JCSzJ6Y0hkTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWMvNzc5YWU5LTdkMjItNDI1Mi04YzViLTBlYTRkNTMxYjc5My8x
L3lmOEZVNGFtN2VhMlFzZE1MZE9zRnhxejdfay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWMv
Nzc5YWU5LTdkMjItNDI1Mi04YzViLTBlYTRkNTMxYjc5My8xL1lKbU5QSjJMM0p3
ZF80NHhsQ1JCSzJ6Y0hkTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMAoRTANBgkqhkiG9w0BAQsFAAOC
AQEAV0C52v3RsJD7KjUFnPnEjqDf2JNOuMlEYoQwGBB+LzHp3Wfj+lvIDCRySGU6
5dDJo1rD8x9pzYevyYm0jhEZxBeCH8VH/9i4jriH4uk5Oopq+rDpz4ODLGxILvWy
/1fI7/0aoqWBzQFp+riNNr6uU7nX/iAE2kI0xatBqIWplx7mSBg7ivvwaRNsL4sx
dkBr434CAyqqHJ3KnIQ7X+N0Ainm0DP4XQQHtQQJqVYP73OMgvMhaRuVxbo+ALeN
fdrHs80x78Jh3VvCTNJGmnnFNagkLNlkf4Mei+w1P42AN7D9aqn5qnQ11GBf5iSG
IzI4FQSxZOOF9cop34nhbRKOfQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:06 2024 by rpki-client on console-ams.rpki-client.org