Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/yA0_Tj2ViYO3XdSDkS3lyi1YzlI.roa
File: yA0_Tj2ViYO3XdSDkS3lyi1YzlI.roa (raw, json)
Hash identifier: mg3/pT8tqgtQwx92c2qM2/eXK1aVSyXpXVSt1Ka5oT4=
Subject key identifier: C8:0D:3F:4E:3D:95:89:83:B7:5D:D4:83:91:2D:E5:CA:2D:58:CE:52
Certificate issuer: /CN=613d5e1379fea9d1d0f7256ed0fc9183be74fefb
Certificate serial: 04F48CD5
Authority key identifier: 61:3D:5E:13:79:FE:A9:D1:D0:F7:25:6E:D0:FC:91:83:BE:74:FE:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YT1eE3n-qdHQ9yVu0PyRg750_vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/yA0_Tj2ViYO3XdSDkS3lyi1YzlI.roa
Signing time: Sat 01 Jan 2022 13:55:48 +0000
ROA not before: Sat 01 Jan 2022 13:55:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207335
IP address blocks: 185.106.133.0/24 maxlen: 24
2a10:1380::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83135701 (0x4f48cd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=613d5e1379fea9d1d0f7256ed0fc9183be74fefb
Validity
Not Before: Jan 1 13:55:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c80d3f4e3d958983b75dd483912de5ca2d58ce52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6e:57:e7:eb:4f:b7:de:4b:b5:4f:d0:e3:2d:
ff:83:44:7b:cf:f0:73:d3:a0:13:86:8d:18:81:15:
33:52:6d:14:a1:d6:99:3c:44:9b:82:61:52:12:8b:
5a:fe:7e:10:c0:56:7c:27:3e:c4:28:d9:ac:82:9a:
40:20:7d:e5:a8:41:36:c0:f2:f8:b8:62:5e:bb:cf:
45:a6:c7:8b:64:81:90:17:9c:00:e7:d3:f7:fb:4a:
e3:b3:bc:15:60:ba:f1:a2:74:3f:f3:0a:28:87:3c:
cf:ee:bb:f0:03:a3:e4:d2:6a:8a:66:d9:01:08:8e:
df:e4:31:d4:0e:a3:81:5a:99:b0:4c:8c:80:7f:ef:
b0:cd:44:a7:f7:ee:96:59:fa:f0:99:4d:76:31:6e:
ef:b0:59:85:ea:5c:71:38:3f:d0:6a:7b:10:fd:12:
3c:48:10:4e:4b:f3:1a:73:4e:1f:c0:9b:1d:33:00:
ac:29:45:76:0a:99:80:80:d2:d6:eb:d0:7f:c8:f5:
d2:e1:05:1e:c1:85:f5:dd:05:c8:77:0b:78:7f:b0:
11:a2:53:9d:a7:67:61:ea:52:c7:f0:15:70:46:92:
b6:7b:09:48:45:88:b2:c4:e5:71:15:f3:96:68:8b:
a0:b6:fa:dc:b9:18:08:1b:8f:d9:4c:78:4b:32:87:
a9:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:0D:3F:4E:3D:95:89:83:B7:5D:D4:83:91:2D:E5:CA:2D:58:CE:52
X509v3 Authority Key Identifier:
keyid:61:3D:5E:13:79:FE:A9:D1:D0:F7:25:6E:D0:FC:91:83:BE:74:FE:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YT1eE3n-qdHQ9yVu0PyRg750_vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/yA0_Tj2ViYO3XdSDkS3lyi1YzlI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/YT1eE3n-qdHQ9yVu0PyRg750_vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.106.133.0/24
IPv6:
2a10:1380::/29
Signature Algorithm: sha256WithRSAEncryption
84:93:92:b3:5f:aa:58:5d:06:7c:df:4e:34:87:6d:c4:e2:26:
24:f3:19:d7:6e:4c:d4:ab:2f:a2:df:77:d1:ee:63:ee:5f:14:
c1:1a:5f:7f:c1:83:a1:44:10:0d:18:18:1b:76:26:0a:50:96:
dc:8f:c2:dd:65:33:1e:a9:35:02:17:1a:00:ee:f7:c9:ff:8d:
5d:39:be:4e:55:1a:83:c1:fd:61:ed:cc:e9:53:8c:99:a1:15:
ee:f9:89:f5:f1:f4:3c:db:62:37:fd:0f:ad:b6:3d:c4:e1:64:
c8:f0:85:0e:b4:0a:da:3d:2b:6e:ae:9d:3f:b9:e6:fb:4c:42:
27:91:a3:7f:5e:af:27:29:ae:c4:61:a1:10:6f:39:b8:0b:22:
c4:a8:03:61:4d:f9:ca:d1:0c:69:ab:ea:3f:0f:24:d1:48:61:
87:57:a6:5c:e4:49:f8:42:c9:9a:e6:45:03:4b:45:76:df:2c:
ea:fb:48:b8:83:5d:ce:6f:31:a2:75:9b:50:be:e2:da:88:04:
5e:be:c0:c1:78:ed:5f:ba:f9:36:0a:64:52:51:55:6b:e4:7c:
3d:dc:da:72:be:b7:c3:7b:78:8b:11:7d:e2:72:a9:c8:27:a6:
4a:8e:36:66:a1:5e:48:f6:e0:e7:a1:63:18:25:5a:00:68:84:
f3:aa:c9:a7
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEBPSM1TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
MTNkNWUxMzc5ZmVhOWQxZDBmNzI1NmVkMGZjOTE4M2JlNzRmZWZiMB4XDTIyMDEw
MTEzNTU0OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzgwZDNmNGUzZDk1
ODk4M2I3NWRkNDgzOTEyZGU1Y2EyZDU4Y2U1MjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALpuV+frT7feS7VP0OMt/4NEe8/wc9OgE4aNGIEVM1JtFKHW
mTxEm4JhUhKLWv5+EMBWfCc+xCjZrIKaQCB95ahBNsDy+LhiXrvPRabHi2SBkBec
AOfT9/tK47O8FWC68aJ0P/MKKIc8z+678AOj5NJqimbZAQiO3+Qx1A6jgVqZsEyM
gH/vsM1Ep/fulln68JlNdjFu77BZhepccTg/0Gp7EP0SPEgQTkvzGnNOH8CbHTMA
rClFdgqZgIDS1uvQf8j10uEFHsGF9d0FyHcLeH+wEaJTnadnYepSx/AVcEaStnsJ
SEWIssTlcRXzlmiLoLb63LkYCBuP2Ux4SzKHqe8CAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBTIDT9OPZWJg7dd1IORLeXKLVjOUjAfBgNVHSMEGDAWgBRhPV4Tef6p0dD3
JW7Q/JGDvnT++zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1lUMWVFM24tcWRIUTl5VnUwUHlSZzc1MF92cy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZmUvZmQ2MDcwLTllMGItNDMzYS04YTc1LTdmNzNhNDY3MWExZS8x
L3lBMF9UajJWaVlPM1hkU0RrUzNseWkxWXpsSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmUv
ZmQ2MDcwLTllMGItNDMzYS04YTc1LTdmNzNhNDY3MWExZS8xL1lUMWVFM24tcWRI
UTl5VnUwUHlSZzc1MF92cy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEALlqhTANBAIAAjAHAwUDKhATgDAN
BgkqhkiG9w0BAQsFAAOCAQEAhJOSs1+qWF0GfN9ONIdtxOImJPMZ125M1Ksvot93
0e5j7l8UwRpff8GDoUQQDRgYG3YmClCW3I/C3WUzHqk1AhcaAO73yf+NXTm+TlUa
g8H9Ye3M6VOMmaEV7vmJ9fH0PNtiN/0PrbY9xOFkyPCFDrQK2j0rbq6dP7nm+0xC
J5Gjf16vJymuxGGhEG85uAsixKgDYU35ytEMaavqPw8k0Uhhh1emXORJ+ELJmuZF
A0tFdt8s6vtIuINdzm8xonWbUL7i2ogEXr7AwXjtX7r5NgpkUlFVa+R8Pdzacr63
w3t4ixF94nKpyCemSo42ZqFeSPbg56FjGCVaAGiE86rJpw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:44 2024 by rpki-client on console-ams.rpki-client.org