Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/ytHeO758uSYrCZjvElxl5JyqqQ0.roa
File: ytHeO758uSYrCZjvElxl5JyqqQ0.roa (raw, json)
Hash identifier: EUYDCeYh0EmBUxBqROxFMeKOeneLfyHapwrmptEY75E=
Subject key identifier: CA:D1:DE:3B:BE:7C:B9:26:2B:09:98:EF:12:5C:65:E4:9C:AA:A9:0D
Certificate issuer: /CN=dccb2d5fb253852f1823c65434e8f276d04e4e0c
Certificate serial: 0185E868635D79A96A15F8CB9754EF0A07C4
Authority key identifier: DC:CB:2D:5F:B2:53:85:2F:18:23:C6:54:34:E8:F2:76:D0:4E:4E:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3MstX7JThS8YI8ZUNOjydtBOTgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/ytHeO758uSYrCZjvElxl5JyqqQ0.roa
Signing time: Wed 25 Jan 2023 10:10:33 +0000
ROA not before: Wed 25 Jan 2023 10:10:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35592
IP address blocks: 46.29.184.0/21 maxlen: 24
185.162.4.0/22 maxlen: 24
91.245.16.0/21 maxlen: 24
87.236.192.0/21 maxlen: 24
89.187.128.0/19 maxlen: 24
2a01:5f0::/32 maxlen: 64
2a01:5f0::/29 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e8:68:63:5d:79:a9:6a:15:f8:cb:97:54:ef:0a:07:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dccb2d5fb253852f1823c65434e8f276d04e4e0c
Validity
Not Before: Jan 25 10:10:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cad1de3bbe7cb9262b0998ef125c65e49caaa90d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:78:41:10:dc:76:3c:ac:29:0b:97:c8:7e:6b:
fb:8d:bb:18:2b:9c:16:3f:45:7e:49:56:c3:47:83:
62:d2:47:7b:f8:25:d5:84:51:55:47:d5:9e:34:72:
a8:6d:60:26:4e:7b:fc:c9:5e:3b:9d:3b:25:a5:c1:
d7:21:26:c1:d9:60:a7:3d:3d:f0:8a:a6:a4:72:62:
b9:5e:67:62:97:c2:61:76:fb:c2:6e:b7:99:ba:ed:
d3:74:ec:64:a4:64:35:61:c7:bf:c6:8f:a8:bb:8e:
8e:e7:72:f8:9b:ee:5c:e0:f1:84:bf:dc:a1:6a:68:
92:37:ea:f7:76:b2:50:d3:56:21:6d:b7:58:ee:64:
99:c0:69:d9:40:6b:b5:66:60:41:9c:d4:ad:5a:4b:
2e:df:88:24:b8:c5:bd:a4:3c:f9:59:26:37:63:7a:
d7:33:e0:97:46:93:aa:9e:5b:fb:d5:73:3b:f6:69:
17:fd:d8:b1:b1:c4:04:9b:fc:24:cc:a8:35:60:f2:
9d:4b:6c:be:98:3d:56:0d:f8:78:52:6c:28:dd:eb:
1e:d8:2c:1c:65:f6:f7:1e:87:ef:e3:2e:03:5d:56:
4c:15:66:1b:7d:52:42:e4:18:d4:db:66:63:46:e5:
43:8b:f6:27:a6:2f:f8:e3:19:68:a5:ad:2d:cf:c1:
6e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:D1:DE:3B:BE:7C:B9:26:2B:09:98:EF:12:5C:65:E4:9C:AA:A9:0D
X509v3 Authority Key Identifier:
keyid:DC:CB:2D:5F:B2:53:85:2F:18:23:C6:54:34:E8:F2:76:D0:4E:4E:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3MstX7JThS8YI8ZUNOjydtBOTgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/ytHeO758uSYrCZjvElxl5JyqqQ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.29.184.0/21
87.236.192.0/21
89.187.128.0/19
91.245.16.0/21
185.162.4.0/22
IPv6:
2a01:5f0::/29
Signature Algorithm: sha256WithRSAEncryption
b1:2f:b2:bd:f0:61:3d:18:9a:ca:12:be:ef:21:3a:b2:32:18:
27:66:35:cc:62:54:c7:13:88:f0:3f:6c:b2:3b:15:8d:c4:78:
7e:3d:ec:31:cf:64:2e:45:a3:1a:1d:35:6d:a4:af:58:0e:f9:
e3:e0:e5:96:b6:56:65:a8:65:40:66:2e:30:0c:bf:97:17:9e:
bb:a8:3a:f7:9a:65:58:46:f0:d5:d5:38:ba:76:6d:6b:bd:2c:
5f:6b:d9:a2:58:d2:17:78:ce:d2:b6:5e:fb:91:d1:d7:e9:29:
67:c3:b5:63:f3:5b:eb:10:21:71:e7:17:57:08:95:8f:c8:97:
11:a7:7a:1f:2d:9a:bc:7c:19:dc:34:c6:57:f6:76:9b:65:e9:
e0:79:83:f7:65:6e:81:93:cd:76:ee:51:03:d3:39:2c:8a:c5:
31:8a:5e:4f:f0:51:75:f2:a0:f5:60:1a:8f:04:9a:c5:55:76:
23:43:5d:77:6a:6d:5f:8c:34:bc:ed:0a:bd:1c:b1:b0:b6:ea:
5b:69:8f:76:4a:43:0e:31:bb:f7:e0:25:a1:13:bc:4c:44:e7:
17:45:f0:da:b2:3c:d3:41:1c:46:62:63:16:5f:0f:c5:00:92:
bb:46:8a:32:ad:6b:2e:b2:a5:63:c5:d1:64:e1:e9:63:a3:00:
cb:d2:ce:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 13:10:51 2025 by rpki-client