Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/YXUEv4wl9tKdDJOLBWCElOGiY84.roa
File: YXUEv4wl9tKdDJOLBWCElOGiY84.roa (raw, json)
Hash identifier: zSm/yzlfnprOYKkb4kJwA2sif3PURYgwOcU536PbSmI=
Subject key identifier: 61:75:04:BF:8C:25:F6:D2:9D:0C:93:8B:05:60:84:94:E1:A2:63:CE
Certificate issuer: /CN=c93b063fc63e8a1aba1f430b2d074dbe270be395
Certificate serial: 11F71538
Authority key identifier: C9:3B:06:3F:C6:3E:8A:1A:BA:1F:43:0B:2D:07:4D:BE:27:0B:E3:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yTsGP8Y-ihq6H0MLLQdNvicL45U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/YXUEv4wl9tKdDJOLBWCElOGiY84.roa
Signing time: Sat 01 Jan 2022 06:01:09 +0000
ROA not before: Sat 01 Jan 2022 06:01:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203221
IP address blocks: 185.141.248.0/24 maxlen: 24
185.141.249.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 301405496 (0x11f71538)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c93b063fc63e8a1aba1f430b2d074dbe270be395
Validity
Not Before: Jan 1 06:01:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=617504bf8c25f6d29d0c938b05608494e1a263ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:87:2e:ea:5e:ea:32:09:ec:07:cb:0f:5d:4b:
7c:e1:9a:17:b1:4a:20:e8:e5:8f:5e:51:32:ad:31:
e9:28:8a:ae:cb:a0:70:95:a5:60:da:e3:b1:da:5b:
eb:ff:29:0f:8e:7d:9d:30:4c:4b:4a:c0:49:82:70:
5c:ba:af:67:fc:55:d5:4a:44:cb:22:17:eb:1e:de:
52:e5:94:b4:d9:38:e9:bf:c2:80:2b:2f:bf:90:dd:
47:64:7e:a6:45:2c:e6:d0:e4:17:fc:99:26:2e:aa:
33:c1:7b:be:18:82:33:68:f6:6d:d0:d7:9b:31:12:
d3:4a:b5:bd:d9:c4:40:58:f6:63:df:e2:8d:23:dc:
69:be:aa:10:6e:0f:7d:66:86:1a:e6:f2:b5:05:6b:
3e:3d:67:d7:19:5d:bf:1c:72:e4:34:45:92:37:24:
cb:2b:9f:69:dc:7b:ef:3b:84:e3:8b:8e:30:db:af:
82:eb:3b:f7:5e:f4:10:c3:73:c7:3e:38:50:3f:61:
98:c2:21:72:9d:82:ce:7d:26:8b:40:e8:dd:7a:b1:
f5:ff:c2:97:9c:77:6c:0c:ae:6c:44:36:ec:8e:39:
48:03:55:47:5a:c1:29:37:95:7a:0c:cf:68:cf:26:
2d:0c:49:77:55:ec:0f:c8:4f:8f:52:12:b7:37:f5:
52:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:75:04:BF:8C:25:F6:D2:9D:0C:93:8B:05:60:84:94:E1:A2:63:CE
X509v3 Authority Key Identifier:
keyid:C9:3B:06:3F:C6:3E:8A:1A:BA:1F:43:0B:2D:07:4D:BE:27:0B:E3:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yTsGP8Y-ihq6H0MLLQdNvicL45U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/YXUEv4wl9tKdDJOLBWCElOGiY84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.141.248.0/23
Signature Algorithm: sha256WithRSAEncryption
25:1e:3e:15:66:fd:b5:52:b0:a9:17:f6:86:17:30:56:79:7f:
f3:0e:6f:54:2e:5c:a6:2a:15:c4:c8:f6:b4:58:48:ff:71:72:
6e:ce:77:02:b5:5c:b9:f7:58:75:73:58:34:ce:e4:77:86:d5:
46:c7:ee:b7:87:d4:38:b5:24:f9:de:a3:09:0a:e6:04:ac:c0:
61:82:c9:bf:b2:3e:ce:76:7d:8d:6b:18:79:74:d3:e5:04:9a:
62:e8:ec:4e:48:e2:44:e5:43:e5:e6:3d:a9:9a:dd:ec:17:8b:
d0:73:50:cb:18:3b:87:fb:62:c4:92:70:75:69:0b:32:72:1a:
ec:6b:82:d6:da:af:7a:0a:7b:60:82:5b:bd:42:1f:1f:0b:8e:
9f:46:1e:0a:f0:27:d4:cd:32:5a:dc:10:80:8b:0c:3a:92:00:
07:ee:9b:63:69:f3:d1:10:11:e2:3b:eb:9a:6f:37:3a:d0:b1:
12:b8:32:c7:a7:09:18:42:ee:02:d9:ef:35:54:93:61:97:f8:
9d:ee:79:c7:44:85:19:5f:89:7d:ef:64:60:90:89:95:d9:e1:
40:cb:51:dc:8c:19:60:ac:6b:67:c9:1c:68:a9:e0:f8:d7:1b:
63:71:a5:c8:8e:7e:df:81:3f:4f:63:4c:15:d6:b2:1b:7e:cf:
7d:6e:9b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:28 2023 by rpki-client on console.sobornost.net