Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/YD9OgGiuxsK4z7Fm32NsPvMowOY.roa
File: YD9OgGiuxsK4z7Fm32NsPvMowOY.roa (raw, json)
Hash identifier: UuA9z4yjxhBthYhJq6p8qlSZZoSHFlNWhOndxi9Ao28=
Subject key identifier: 60:3F:4E:80:68:AE:C6:C2:B8:CF:B1:66:DF:63:6C:3E:F3:28:C0:E6
Certificate issuer: /CN=2c754ae473d9c154b804b70ed31881e025d926aa
Certificate serial: 01836066DE72A01CCE83CCCEE0AB6CEB65A1
Authority key identifier: 2C:75:4A:E4:73:D9:C1:54:B8:04:B7:0E:D3:18:81:E0:25:D9:26:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHVK5HPZwVS4BLcO0xiB4CXZJqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/YD9OgGiuxsK4z7Fm32NsPvMowOY.roa
Signing time: Wed 21 Sep 2022 14:14:57 +0000
ROA not before: Wed 21 Sep 2022 14:14:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200020
IP address blocks: 185.213.3.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:60:66:de:72:a0:1c:ce:83:cc:ce:e0:ab:6c:eb:65:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c754ae473d9c154b804b70ed31881e025d926aa
Validity
Not Before: Sep 21 14:14:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=603f4e8068aec6c2b8cfb166df636c3ef328c0e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b7:5f:ca:2a:02:6b:f8:d1:e5:65:71:c9:0d:
3d:f7:9c:e3:f5:34:84:df:26:4d:69:ee:90:4b:b2:
c8:85:d1:74:ec:7e:6e:14:b7:b0:c0:2c:57:aa:f5:
29:26:b7:3e:bc:1c:a8:fe:be:7d:6e:2a:28:df:01:
27:aa:a9:90:c6:a3:48:7b:8b:b0:2c:92:98:4d:da:
4a:50:2d:8d:39:df:7d:37:dd:b0:40:9f:15:34:1d:
96:8b:67:df:87:c2:13:d2:4b:cf:ac:12:38:88:55:
c1:53:cd:fb:d2:63:e8:86:46:ec:ee:63:08:98:60:
83:39:55:63:24:6c:d6:b3:66:13:7e:ef:49:d8:9a:
1b:3e:24:7e:49:0f:fe:70:c2:6a:fc:3b:b0:87:2d:
f5:cd:3d:03:4f:b0:4c:39:63:97:b1:ab:11:49:37:
90:ea:f7:7b:32:27:ee:35:93:5e:ce:09:8d:f4:c9:
ab:24:1b:2e:ba:44:9a:c4:63:88:12:cc:18:11:19:
65:b5:bc:f5:19:69:0d:f5:98:9d:84:a4:33:80:b1:
c3:3a:98:df:5d:bf:de:02:cd:5a:45:e8:95:58:42:
87:ac:88:5f:5e:3d:96:eb:5d:e5:3f:82:03:c4:95:
30:e2:20:b6:61:13:8c:e0:96:ff:ae:70:ab:49:55:
0c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:3F:4E:80:68:AE:C6:C2:B8:CF:B1:66:DF:63:6C:3E:F3:28:C0:E6
X509v3 Authority Key Identifier:
keyid:2C:75:4A:E4:73:D9:C1:54:B8:04:B7:0E:D3:18:81:E0:25:D9:26:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHVK5HPZwVS4BLcO0xiB4CXZJqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/YD9OgGiuxsK4z7Fm32NsPvMowOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.3.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:75:24:3b:94:0c:63:8a:8f:f2:56:d0:4d:67:be:27:ac:8a:
0c:00:ad:ce:53:87:00:4b:c3:96:db:34:55:1d:4c:83:16:2e:
94:ed:e1:84:30:a2:b4:d6:a6:9d:d4:4a:4c:39:cb:7b:24:ab:
41:9d:6f:bb:8c:da:e3:73:42:c1:1f:69:1a:04:8c:ca:34:cf:
b7:63:ad:0a:06:fd:98:9a:4f:2d:21:70:7d:e8:68:2c:56:48:
ff:ea:86:df:7e:a3:55:60:0a:3d:6e:67:32:10:67:b4:06:ac:
f7:e0:7b:05:49:62:f2:0b:df:42:30:7c:1b:44:57:be:c3:06:
df:2f:9e:48:3f:01:14:eb:5d:5f:59:83:15:06:0a:2b:b3:b1:
e2:57:d6:68:f1:6d:4f:55:ba:ad:00:ca:b3:15:1c:52:92:f1:
32:72:76:7e:af:f6:0c:16:95:da:4c:05:88:54:79:e1:10:1d:
59:75:19:37:17:47:e2:f2:32:78:bb:af:36:2c:6a:b9:f7:3c:
dc:d5:29:84:99:b3:d2:72:6d:e0:ff:90:fb:8f:f0:ae:c8:05:
78:4f:47:84:d2:2b:01:98:4c:49:69:77:e1:6a:63:6b:c4:82:
41:e4:00:32:d9:60:ff:4d:30:23:45:65:f7:c0:8d:da:70:24:
cc:98:26:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:01:28 2025 by rpki-client