Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/YeZ2YK5jMsZSPmpY7qVbmQThuzA.roa
File: YeZ2YK5jMsZSPmpY7qVbmQThuzA.roa (raw, json)
Hash identifier: A+O2oQOVpfC8kzzQuWMVU4UiUAwgLD2Y/gRfHGqHTLo=
Subject key identifier: 61:E6:76:60:AE:63:32:C6:52:3E:6A:58:EE:A5:5B:99:04:E1:BB:30
Certificate issuer: /CN=e180ebbbca0f890de353891421a83dd5b653d940
Certificate serial: 16F9FA79
Authority key identifier: E1:80:EB:BB:CA:0F:89:0D:E3:53:89:14:21:A8:3D:D5:B6:53:D9:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/YeZ2YK5jMsZSPmpY7qVbmQThuzA.roa
Signing time: Fri 15 Apr 2022 10:46:31 +0000
ROA not before: Fri 15 Apr 2022 10:46:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 194.67.69.0/24 maxlen: 24
194.67.95.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 385481337 (0x16f9fa79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e180ebbbca0f890de353891421a83dd5b653d940
Validity
Not Before: Apr 15 10:46:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=61e67660ae6332c6523e6a58eea55b9904e1bb30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:10:3f:4f:3c:0c:81:8e:7d:01:7a:52:34:c1:
19:cb:0a:2d:c6:eb:de:0d:66:73:2b:8a:f5:38:28:
ec:3f:fb:92:aa:9e:85:ce:85:2d:cf:40:6b:25:3b:
4e:43:54:37:5e:5f:2c:53:6b:7b:8a:87:a0:a4:09:
9d:cf:05:a4:4d:4b:c7:a2:d7:d7:01:9b:fb:b8:b9:
2b:ec:9e:ae:11:04:ac:80:62:16:4e:d7:66:bd:aa:
a3:f2:0b:58:f7:e0:b2:b4:14:45:0c:01:c0:ab:88:
2f:ec:84:20:a5:ab:62:80:dc:e8:11:d7:89:46:6d:
69:a0:4d:30:2e:af:68:c1:5d:00:27:f1:f7:0c:36:
d1:de:47:28:57:c7:fc:e3:d2:c4:b9:dd:08:07:89:
85:b8:cb:ed:9d:78:8f:da:4b:c5:97:47:16:20:71:
a8:94:d8:25:20:7c:0e:7f:05:b0:d7:af:ed:02:8f:
ef:07:9e:11:45:c1:6d:2e:61:c7:0a:de:55:cb:22:
94:99:eb:33:24:80:58:2b:84:a7:cd:db:00:05:4c:
26:f5:4e:a4:1f:88:fc:45:2a:f0:32:d1:24:60:cb:
98:20:75:7a:88:19:31:9f:8b:66:72:6e:da:e0:15:
ab:94:75:00:6d:e2:60:4d:61:7f:eb:6f:f8:a1:76:
69:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:E6:76:60:AE:63:32:C6:52:3E:6A:58:EE:A5:5B:99:04:E1:BB:30
X509v3 Authority Key Identifier:
keyid:E1:80:EB:BB:CA:0F:89:0D:E3:53:89:14:21:A8:3D:D5:B6:53:D9:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/YeZ2YK5jMsZSPmpY7qVbmQThuzA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.67.69.0/24
194.67.95.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:2f:09:64:f9:4e:f4:94:98:d5:65:60:cb:f4:de:0c:af:86:
1a:c8:35:c3:aa:a0:8b:30:a3:5c:89:d6:53:ad:31:c1:b2:53:
d6:88:f7:16:af:08:a9:2f:03:f4:b0:a8:32:85:46:a2:e8:cc:
93:24:05:b5:c7:b7:60:dd:17:8a:75:49:69:ba:7b:64:e4:0d:
0f:5a:d0:e2:be:82:43:31:15:9c:8b:a7:a7:99:ed:e2:65:8e:
fc:10:1e:09:54:c0:06:c1:aa:18:ac:73:7b:a1:c3:f5:86:ba:
93:e5:eb:b3:6f:0f:cb:ae:03:b0:6b:6a:35:91:f7:78:9b:09:
c5:2f:28:2f:bc:0b:c9:b3:68:48:d5:f2:38:6f:ea:dd:d6:8d:
c8:bd:1b:f5:16:33:03:fc:43:9d:7c:33:cc:50:93:a3:b8:7e:
06:2f:29:6a:c3:e4:36:e1:62:6b:dd:aa:33:31:64:1e:19:c0:
34:d6:14:38:bf:af:bd:a2:02:8b:00:49:bc:0a:7d:33:01:b0:
82:f6:5a:2d:1c:e9:4d:32:1c:52:b5:98:1b:62:8b:f5:cb:e3:
59:fe:b8:28:7b:ec:6b:c0:a2:68:15:c3:1d:ba:83:86:db:e3:
3f:6c:b5:79:35:c8:ce:f8:74:98:54:26:51:f6:e1:50:75:d5:
fa:62:c1:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:32 2023 by rpki-client on console-ams.rpki-client.org