Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/y_81QlxublVBjmAdpNLiEzvm8A4.roa
File: y_81QlxublVBjmAdpNLiEzvm8A4.roa (raw, json)
Hash identifier: P+HTWoeyfoUn/JcT4o3c99ltkzGE75J3nNgR1wsM8q4=
Subject key identifier: CB:FF:35:42:5C:6E:6E:55:41:8E:60:1D:A4:D2:E2:13:3B:E6:F0:0E
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 018571F0FB32BF6BB8A2946F9DF337C3CADF
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/y_81QlxublVBjmAdpNLiEzvm8A4.roa
Signing time: Mon 02 Jan 2023 10:04:56 +0000
ROA not before: Mon 02 Jan 2023 10:04:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198192
IP address blocks: 84.232.124.0/24 maxlen: 24
88.148.74.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:f0:fb:32:bf:6b:b8:a2:94:6f:9d:f3:37:c3:ca:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Jan 2 10:04:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cbff35425c6e6e55418e601da4d2e2133be6f00e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:97:ac:a1:44:98:9c:9d:98:ff:19:4c:ea:e2:
fe:42:e5:69:84:39:b7:66:25:1e:f2:d0:52:6e:9c:
80:3a:43:5e:1c:fc:ae:3a:cf:fa:25:fe:96:01:3d:
19:6d:89:90:72:c4:45:c0:ec:a3:1d:73:1b:a1:cb:
d9:fd:42:42:bd:fb:77:81:67:13:79:31:10:1a:98:
d6:4b:02:f4:5a:d0:fa:0f:bc:0f:ff:31:e4:32:56:
3b:69:d7:9b:8a:72:48:07:48:c2:4f:3a:ab:de:9d:
71:52:42:77:c3:18:0e:c3:39:c3:6c:94:74:ba:32:
94:69:8e:07:26:15:1c:b7:ec:87:b1:a1:31:e9:22:
96:43:dd:f1:31:e2:ba:9e:31:a3:62:97:24:20:0d:
7e:f0:7a:46:de:1e:d3:7b:39:0b:70:49:f2:c1:00:
53:85:f7:cd:92:7f:29:94:78:37:d2:54:9c:da:76:
87:6c:13:7a:6d:fe:02:b9:47:73:35:2c:13:29:06:
e7:ea:5b:22:ec:09:1a:ab:ec:44:25:b5:0a:11:e5:
82:2a:e5:9a:e4:05:02:cc:26:0c:7c:b7:13:44:a0:
3d:a0:21:e1:cc:b5:3f:e5:80:75:02:3b:61:33:74:
4f:df:be:bf:ad:29:f2:9f:e0:dd:82:20:d1:82:95:
af:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:FF:35:42:5C:6E:6E:55:41:8E:60:1D:A4:D2:E2:13:3B:E6:F0:0E
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/y_81QlxublVBjmAdpNLiEzvm8A4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.232.124.0/24
88.148.74.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:b2:08:b2:b9:d8:f1:a9:e1:a1:07:d7:13:2b:6e:1d:7b:16:
1f:09:ff:47:21:23:26:c4:aa:0f:9c:1f:5b:d4:16:16:80:c4:
a2:7c:5d:d5:8d:c6:22:38:a8:f5:dc:69:9f:7f:a2:d8:74:58:
ca:63:e1:10:c3:12:ef:f6:ac:b5:85:f2:56:18:a0:4b:1d:bd:
b7:aa:8c:57:cb:87:8f:39:d1:5d:10:83:22:2f:15:78:2c:32:
0b:0c:48:12:f4:9b:60:7e:3f:49:e1:e0:95:4b:34:28:68:14:
32:53:2e:d2:82:f1:0a:9f:92:c7:1c:40:17:cd:45:92:4d:0a:
a7:ca:a4:f6:7f:b9:b1:16:14:9d:56:1c:59:8d:dd:15:d6:55:
96:05:56:71:68:a9:ea:96:71:92:40:df:6a:fe:e7:2d:c9:d9:
5b:45:3d:83:6d:02:07:9c:71:36:0c:6e:5d:b8:dd:f6:70:b5:
99:9f:35:7a:d8:2e:90:c9:8a:0f:bf:65:47:4d:a8:25:ad:30:
74:4b:72:fb:e2:d7:51:e7:1d:88:19:91:65:65:c6:9f:41:b0:
e3:2b:bc:55:cb:ea:c1:03:a7:bf:39:2c:f0:6a:f9:2d:7c:69:
17:f5:1d:18:80:f1:9f:11:48:b7:a1:08:7f:11:aa:95:24:21:
a8:df:ba:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 14:19:58 2025 by rpki-client