Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/973136-09ab-4c83-8f3c-04534ebce35e/1/YmOPP3DPuGY8urxy_rBL5_DBIBc.roa
File: YmOPP3DPuGY8urxy_rBL5_DBIBc.roa (raw, json)
Hash identifier: QugdxIV586IcEPhzCBVW5cNClPt4ajIQUWlw1ooGPvk=
Subject key identifier: 62:63:8F:3F:70:CF:B8:66:3C:BA:BC:72:FE:B0:4B:E7:F0:C1:20:17
Certificate issuer: /CN=2093e383b2cc52d5eca30feb12697593c9c788a0
Certificate serial: 0E6100BE
Authority key identifier: 20:93:E3:83:B2:CC:52:D5:EC:A3:0F:EB:12:69:75:93:C9:C7:88:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IJPjg7LMUtXsow_rEml1k8nHiKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/973136-09ab-4c83-8f3c-04534ebce35e/1/YmOPP3DPuGY8urxy_rBL5_DBIBc.roa
Signing time: Sat 01 Jan 2022 14:59:07 +0000
ROA not before: Sat 01 Jan 2022 14:59:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30746
IP address blocks: 193.47.147.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 241238206 (0xe6100be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2093e383b2cc52d5eca30feb12697593c9c788a0
Validity
Not Before: Jan 1 14:59:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62638f3f70cfb8663cbabc72feb04be7f0c12017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:98:0b:9a:88:c4:25:22:b8:c9:e0:59:c7:80:
75:0c:65:cd:8e:7f:60:55:c5:05:91:a3:78:f4:8b:
57:2f:fe:38:45:06:7c:0c:75:b9:5c:51:f4:d1:4f:
84:85:b2:ee:0c:69:91:34:a9:16:bd:2b:c9:53:fc:
6f:b9:2b:53:4d:da:2a:7d:f1:38:67:83:3b:30:69:
47:e4:2b:ef:4a:91:5e:50:44:95:77:00:a1:b0:b8:
be:7b:6d:2d:ce:6e:44:cb:29:f1:66:7a:ce:21:49:
d9:15:53:8c:00:2e:24:25:4c:1b:66:2a:31:ee:56:
43:10:8d:37:87:10:df:12:f6:21:17:fc:ad:3d:0d:
be:61:19:56:90:cd:0f:7d:2a:26:64:3f:05:89:f3:
24:ea:f3:3d:d0:c7:c9:ef:c8:47:7f:6b:4c:2b:95:
e1:b6:fc:5e:18:a9:84:dd:b8:3c:4c:1c:f4:91:50:
c2:f0:e0:60:e7:f3:03:49:f3:ef:47:cb:32:7c:96:
ff:68:78:20:2c:90:4a:c4:a3:0c:04:e8:29:e4:f2:
24:f7:82:f5:63:12:f8:8b:98:c0:bb:06:d8:e4:a0:
3a:c2:af:a4:cb:4b:48:7a:3d:79:bf:de:f2:17:f9:
0f:60:91:a7:f7:b5:03:64:57:e9:b1:3f:e8:8f:d8:
27:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:63:8F:3F:70:CF:B8:66:3C:BA:BC:72:FE:B0:4B:E7:F0:C1:20:17
X509v3 Authority Key Identifier:
keyid:20:93:E3:83:B2:CC:52:D5:EC:A3:0F:EB:12:69:75:93:C9:C7:88:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJPjg7LMUtXsow_rEml1k8nHiKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/973136-09ab-4c83-8f3c-04534ebce35e/1/YmOPP3DPuGY8urxy_rBL5_DBIBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/973136-09ab-4c83-8f3c-04534ebce35e/1/IJPjg7LMUtXsow_rEml1k8nHiKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.47.147.0/24
Signature Algorithm: sha256WithRSAEncryption
01:73:c6:fd:db:31:8a:a9:10:2d:7f:03:13:32:cf:8d:90:e5:
0b:23:8c:d1:9d:3c:f3:f4:65:f6:bf:78:87:fb:43:64:94:11:
64:82:7b:05:48:ae:f9:38:48:3b:08:68:13:e1:0e:83:52:49:
e9:ff:85:4e:03:bb:0b:33:56:ff:54:dd:78:f4:d3:78:d6:4d:
f7:07:6e:5c:ea:92:58:f2:e8:27:a3:90:aa:33:6e:9d:91:b4:
29:e7:08:5b:f8:99:4e:70:17:13:45:db:a7:a7:9c:de:bf:4d:
15:58:56:27:61:d2:e9:fc:07:d5:0d:79:69:1c:c8:0a:4d:24:
bc:52:14:97:b6:7d:f5:39:e3:ce:0e:1a:bf:8b:ef:85:57:78:
fe:60:ca:af:13:67:1b:95:04:69:7e:6e:9c:a8:94:15:d3:1b:
e1:5b:d2:15:7f:0d:e3:5f:51:61:0b:81:c0:c1:15:9f:6a:bc:
c9:b0:9c:61:1e:e8:0d:ac:a8:cf:06:96:03:c2:81:c6:62:1e:
0d:51:94:7a:97:3d:f6:25:7b:6c:a8:95:a3:96:3e:d5:a1:86:
02:8a:46:91:57:7b:3a:08:52:2d:08:56:fb:a2:c8:61:97:9a:
83:a9:d3:52:49:07:e5:11:18:2a:34:c1:49:3f:1d:b8:4c:78:
11:b3:55:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:52 2023 by rpki-client on console-ams.rpki-client.org