Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/cc1d62-ae53-48b7-ac79-641d456283c4/1/Ky15PTU_CpYgGHXXAP_jCeUmfBE.roa
File: Ky15PTU_CpYgGHXXAP_jCeUmfBE.roa (raw, json)
Hash identifier: B6Ryb5LSnIh8C6fvvRZwPS8dWeuxawt7g9QhlM8cUbQ=
Subject key identifier: 2B:2D:79:3D:35:3F:0A:96:20:18:75:D7:00:FF:E3:09:E5:26:7C:11
Certificate issuer: /CN=a60e42d7cbafc9dd3205d247d662d85afdd9a186
Certificate serial: 054F0F85
Authority key identifier: A6:0E:42:D7:CB:AF:C9:DD:32:05:D2:47:D6:62:D8:5A:FD:D9:A1:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pg5C18uvyd0yBdJH1mLYWv3ZoYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/cc1d62-ae53-48b7-ac79-641d456283c4/1/Ky15PTU_CpYgGHXXAP_jCeUmfBE.roa
Signing time: Sat 01 Jan 2022 10:03:57 +0000
ROA not before: Sat 01 Jan 2022 10:03:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61172
IP address blocks: 194.146.32.0/24 maxlen: 24
194.146.35.0/24 maxlen: 24
194.146.33.0/24 maxlen: 24
194.146.34.0/24 maxlen: 24
2a0f:9545::/32 maxlen: 32
2a0f:9547::/32 maxlen: 32
2a0f:9541::/32 maxlen: 32
2a0f:9546::/32 maxlen: 32
2a0f:9544::/32 maxlen: 32
2a0f:9542::/32 maxlen: 32
2a0f:9540::/32 maxlen: 32
2a0f:9543::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89067397 (0x54f0f85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a60e42d7cbafc9dd3205d247d662d85afdd9a186
Validity
Not Before: Jan 1 10:03:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2b2d793d353f0a96201875d700ffe309e5267c11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:53:e1:85:86:a5:29:98:90:10:47:9d:5d:df:
de:4f:6c:f0:76:2c:10:4e:e2:77:ed:05:81:40:9d:
a0:7b:5a:14:9b:77:63:c5:81:34:a8:1e:39:5c:74:
48:10:b5:45:db:05:28:80:a2:68:31:e2:8f:1b:cb:
06:16:65:d9:92:18:56:91:96:15:3d:3f:46:8f:b3:
0b:f8:98:6f:e7:32:97:c7:aa:16:7c:40:87:5b:81:
ff:9e:20:db:81:a0:a7:55:13:0b:88:ac:da:e9:c1:
e4:aa:f2:d8:e1:28:79:ee:40:01:6e:36:82:8d:88:
48:1a:21:d6:15:52:fc:ee:b5:8c:d1:6c:e8:f0:a0:
b2:e6:08:b4:ee:47:43:04:80:48:07:2f:3f:98:e4:
e4:d1:1f:28:ea:df:a1:8d:6c:20:ee:3c:d7:de:a9:
32:5b:77:d5:33:6c:24:d2:47:9d:1f:76:a4:a0:ac:
63:94:15:f8:30:94:1f:ce:a0:c0:7c:a3:5f:46:f4:
20:18:c5:d4:1f:94:6f:bf:89:de:46:1d:8f:27:bf:
85:18:8b:7d:52:96:3b:4c:31:aa:a4:36:0f:4b:c4:
b9:27:7e:c3:7e:e9:0e:2d:2e:99:c7:f6:8c:20:31:
96:96:2d:32:7a:a8:ad:c2:98:c3:31:33:b9:ae:3e:
cd:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:2D:79:3D:35:3F:0A:96:20:18:75:D7:00:FF:E3:09:E5:26:7C:11
X509v3 Authority Key Identifier:
keyid:A6:0E:42:D7:CB:AF:C9:DD:32:05:D2:47:D6:62:D8:5A:FD:D9:A1:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pg5C18uvyd0yBdJH1mLYWv3ZoYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cc1d62-ae53-48b7-ac79-641d456283c4/1/Ky15PTU_CpYgGHXXAP_jCeUmfBE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cc1d62-ae53-48b7-ac79-641d456283c4/1/pg5C18uvyd0yBdJH1mLYWv3ZoYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.146.32.0/22
IPv6:
2a0f:9540::/29
Signature Algorithm: sha256WithRSAEncryption
8b:29:6d:2c:2d:43:2e:49:b9:e5:bf:6e:c7:37:35:7a:8d:51:
fb:9f:95:a1:a8:f0:80:00:21:de:13:fe:15:92:be:a6:13:50:
32:65:2b:58:25:08:d2:df:32:7e:82:33:40:f1:2c:f3:74:5b:
18:bc:cb:01:d9:fa:c0:98:18:6e:50:0b:f9:12:eb:1b:08:0a:
2a:3c:3b:66:05:cd:d2:26:a1:5b:a5:3c:01:19:e4:5e:af:37:
ea:68:2f:69:6c:fb:e8:c3:ef:f1:54:46:bd:1e:46:dc:d4:c9:
d5:c5:e5:24:aa:ba:9d:d5:21:5a:eb:07:73:f4:56:9a:71:a8:
44:54:91:a2:9d:8c:68:ff:c7:95:58:9b:7c:d2:96:2a:68:ed:
91:32:ff:ad:85:e2:92:7b:4f:14:e8:6d:27:d3:95:6b:70:06:
c7:23:b9:06:3e:b7:d5:d8:1d:2f:20:1d:89:e1:18:da:3d:6a:
65:52:63:1f:9f:c8:4e:a1:5e:b7:b7:91:7b:77:8e:34:f0:fc:
95:65:08:bb:2e:78:99:ec:ae:7c:97:4c:bf:e8:d8:21:f1:c3:
41:0d:f5:43:3d:2b:81:56:6c:e1:99:5f:76:f8:ca:55:8b:d8:
64:67:cf:7b:6b:4b:10:3f:89:1b:58:26:0c:df:e0:b0:90:2b:
64:7a:ff:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:46 2023 by rpki-client on console-ams.rpki-client.org