Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/ylhW0U9HfCTGEPHCi_ipwfTRSks.roa
File: ylhW0U9HfCTGEPHCi_ipwfTRSks.roa (raw, json)
Hash identifier: V2Tt0Hwg+ORFdVbcw/DAuC/XWfO/00T95vuwWNzgk7Y=
Subject key identifier: CA:58:56:D1:4F:47:7C:24:C6:10:F1:C2:8B:F8:A9:C1:F4:D1:4A:4B
Certificate issuer: /CN=60998d3c9d8bdc9c1dff8e319424412b6cdc1dd3
Certificate serial: 0841FDB5
Authority key identifier: 60:99:8D:3C:9D:8B:DC:9C:1D:FF:8E:31:94:24:41:2B:6C:DC:1D:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/ylhW0U9HfCTGEPHCi_ipwfTRSks.roa
Signing time: Mon 16 May 2022 16:58:21 +0000
ROA not before: Mon 16 May 2022 16:58:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30823
IP address blocks: 212.11.64.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138542517 (0x841fdb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60998d3c9d8bdc9c1dff8e319424412b6cdc1dd3
Validity
Not Before: May 16 16:58:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ca5856d14f477c24c610f1c28bf8a9c1f4d14a4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d8:22:2b:f6:7f:c4:0c:bd:1b:49:a8:73:8b:
d0:1b:dd:ae:e0:24:8f:43:33:d3:40:ba:02:8e:91:
4c:4d:3c:aa:1f:5e:77:9c:6a:08:9c:d2:3c:52:f4:
23:10:2f:52:39:04:19:ac:fc:bc:49:9f:b0:6b:db:
19:05:9e:60:cd:c8:b6:6a:f8:ac:11:a8:3d:fb:b5:
dc:fc:39:b0:c8:dc:6e:bb:bd:47:1f:e5:cb:d0:5f:
a7:35:13:96:e6:c5:00:9d:93:63:9c:c1:8d:3a:28:
0f:b6:95:e8:7f:a3:0c:f9:46:4f:2c:55:a5:fe:81:
92:3e:c6:2f:59:44:d5:70:cd:d9:98:68:2a:f8:6f:
b7:e8:ad:09:2f:d8:ec:88:c3:e9:b0:e9:1d:6e:df:
e5:1a:b4:32:88:9f:e6:6a:38:e5:87:37:50:13:01:
90:5f:1d:3a:2a:f2:4a:a4:d8:d6:2d:82:83:54:21:
79:94:7e:70:13:e2:2b:08:24:21:43:78:74:e5:71:
63:ce:10:6e:cb:1e:e4:a2:3e:0d:02:6d:ed:ef:7a:
23:e8:f1:73:7b:5b:39:d1:b7:3f:59:d9:c8:68:71:
52:90:54:ec:1c:48:93:24:89:eb:65:e7:fd:80:88:
4f:80:c2:98:82:44:7d:2b:4f:50:c7:d3:67:8d:85:
42:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:58:56:D1:4F:47:7C:24:C6:10:F1:C2:8B:F8:A9:C1:F4:D1:4A:4B
X509v3 Authority Key Identifier:
keyid:60:99:8D:3C:9D:8B:DC:9C:1D:FF:8E:31:94:24:41:2B:6C:DC:1D:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/ylhW0U9HfCTGEPHCi_ipwfTRSks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.11.64.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:de:d7:60:a4:ef:f8:b8:6d:e0:aa:93:cb:92:a7:a4:35:72:
08:f4:bb:ca:fb:df:e7:c3:c2:4c:e0:33:87:08:54:26:2c:83:
66:d9:d7:bc:c3:fe:5d:87:ac:40:49:3c:90:2f:65:32:e7:7d:
3c:84:2b:2d:7a:ce:cf:65:5a:f0:83:2d:a0:40:d9:38:2a:b6:
bb:ce:fb:2f:d2:85:1d:16:0d:5e:f0:2d:7e:30:a2:a4:14:34:
17:42:72:78:4d:58:82:9c:d9:d6:c7:eb:54:f7:ad:29:8d:51:
bd:6d:13:2a:ce:41:6c:f9:0b:c0:61:3b:76:46:ad:e4:a6:d9:
35:47:d9:74:81:61:13:2b:f3:39:f9:88:e4:34:6d:ea:76:b9:
78:66:ae:64:b7:a3:45:3d:1a:79:00:a9:d1:82:a2:74:3a:e4:
04:33:f7:98:47:11:66:4c:22:8a:7a:0a:57:ba:9c:5b:64:fd:
32:bc:7d:64:7b:37:79:de:d5:50:a5:70:e9:a8:de:fb:66:2d:
48:cf:94:77:5f:12:6c:fd:c4:f4:5b:da:7e:6e:94:85:a2:50:
3b:4d:52:f5:75:03:55:ce:c4:d1:d4:ff:00:55:be:e4:47:7f:
73:27:51:2f:79:43:8a:00:58:a0:ca:74:d1:f7:e0:8d:be:74:
33:bf:ca:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:06 2024 by rpki-client on console-ams.rpki-client.org