Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/ypUjc8v_tctA7l3IzIYs59I7byY.roa
File: ypUjc8v_tctA7l3IzIYs59I7byY.roa (raw, json)
Hash identifier: qDPsjkITr0riMpQ+kUtnXENOJxuxwQYUVCV7AP3QZaA=
Subject key identifier: CA:95:23:73:CB:FF:B5:CB:40:EE:5D:C8:CC:86:2C:E7:D2:3B:6F:26
Certificate issuer: /CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
Certificate serial: 24DD363F
Authority key identifier: 79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/ypUjc8v_tctA7l3IzIYs59I7byY.roa
Signing time: Tue 22 Mar 2022 08:40:37 +0000
ROA not before: Tue 22 Mar 2022 08:40:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29509
IP address blocks: 80.250.87.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 618477119 (0x24dd363f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
Validity
Not Before: Mar 22 08:40:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ca952373cbffb5cb40ee5dc8cc862ce7d23b6f26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:07:72:77:24:35:cd:6c:84:65:04:4b:ca:a0:
1a:31:9c:b7:51:9b:da:53:4b:05:6b:40:aa:b9:0f:
59:8b:1d:aa:3c:31:19:7b:47:3e:d6:5f:1d:2c:e7:
90:d9:80:6a:bb:5c:8e:2f:c8:96:cd:b1:a8:a4:09:
c1:a9:78:56:dc:ff:f3:e4:69:2e:7c:e6:53:2b:98:
59:e0:df:d2:c7:10:34:52:9f:f0:df:15:8f:02:17:
6e:89:09:49:55:a2:f1:e6:80:23:00:53:f0:c3:87:
69:d9:97:ad:1f:da:7e:d0:7f:bc:dd:2d:2a:5c:1f:
09:fd:07:f6:a3:e0:05:69:58:72:77:79:2f:d2:74:
8b:4c:8e:11:cd:2c:ed:02:60:ea:37:f4:76:ea:e8:
3a:c7:f4:d9:97:e4:30:e4:72:11:3e:ce:33:b8:76:
82:33:2b:f6:d1:4f:07:55:74:f4:bd:05:2c:13:86:
8c:2e:5c:2e:16:7f:79:f5:74:a7:57:32:b7:4d:7b:
1b:ec:6f:7d:d1:ce:91:01:64:95:b9:2a:5c:7a:40:
77:a1:33:8c:a3:5b:5f:60:f1:43:84:b6:db:8c:b6:
65:b2:d5:6c:b2:89:97:00:be:5b:22:fa:74:03:e9:
55:0d:f9:55:04:a5:80:c8:7a:2f:ce:f9:a9:8c:ad:
c6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:95:23:73:CB:FF:B5:CB:40:EE:5D:C8:CC:86:2C:E7:D2:3B:6F:26
X509v3 Authority Key Identifier:
keyid:79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/ypUjc8v_tctA7l3IzIYs59I7byY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.250.87.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:b3:55:9b:93:38:d5:b5:0f:ed:83:8b:01:7f:0e:15:4c:e7:
df:f2:5e:3c:83:60:a1:22:10:3a:8d:ba:76:cc:90:4b:bb:3a:
23:19:09:58:3a:3d:95:23:84:47:16:81:2e:3e:d0:5c:c7:b6:
67:54:8b:52:84:84:43:0c:e2:d0:32:cb:a3:31:91:77:3e:f1:
bd:ca:fd:2a:73:0c:3e:96:f5:67:a3:c2:da:fc:ef:8c:91:c9:
84:18:3f:5a:2f:e5:6e:fb:22:55:6f:08:71:5f:8c:ad:10:1c:
b0:f9:38:91:43:29:54:45:6f:71:ea:5c:ee:47:b4:6f:55:d9:
63:88:16:8e:1f:29:56:e5:02:c6:b2:6f:cc:60:8b:9e:46:1d:
24:22:67:d9:7a:16:91:41:82:2f:8d:a5:68:8f:7a:ed:43:80:
80:47:50:b6:19:37:8f:9e:ff:86:5c:d4:00:9a:e5:5e:57:65:
6a:93:d9:f2:a8:8d:d5:11:8e:bc:9b:1a:12:14:ed:01:e5:6c:
3d:cc:88:88:a7:55:ac:fb:b6:b7:38:b9:ec:74:9b:b0:81:26:
56:f9:e9:58:89:74:cd:b5:b0:f5:7f:75:95:d5:50:5f:aa:b3:
9f:af:61:ef:1f:fc:49:16:3e:dc:e6:99:bb:f4:46:d5:13:9b:
41:97:bd:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:19 2024 by rpki-client on console-ams.rpki-client.org