Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/yt0zndxZe4lBHJox9ce1HZC6meo.roa
File: yt0zndxZe4lBHJox9ce1HZC6meo.roa (raw, json)
Hash identifier: OoxK7iACuYebpi0f77FJj0UHtR8LWaLCX/jOEdHCLSI=
Subject key identifier: CA:DD:33:9D:DC:59:7B:89:41:1C:9A:31:F5:C7:B5:1D:90:BA:99:EA
Certificate issuer: /CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff
Certificate serial: 123D8545
Authority key identifier: 1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/yt0zndxZe4lBHJox9ce1HZC6meo.roa
Signing time: Sat 01 Jan 2022 04:01:48 +0000
ROA not before: Sat 01 Jan 2022 04:01:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204500
IP address blocks: 195.72.119.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 306021701 (0x123d8545)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff
Validity
Not Before: Jan 1 04:01:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cadd339ddc597b89411c9a31f5c7b51d90ba99ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ce:63:89:d8:a0:73:1f:f0:ed:d0:07:e3:74:
1c:18:b4:a4:d6:ab:e0:32:8a:46:77:f7:9d:39:ac:
2a:44:d6:8c:44:d2:db:9a:2c:6c:8d:57:c4:11:d9:
70:99:e1:fc:66:10:31:9f:ca:c1:f4:3c:27:0b:c8:
e6:d2:53:71:7d:ca:24:a8:89:14:1f:a1:6d:43:de:
d1:ef:57:3b:ff:31:63:22:1f:42:30:9e:f0:65:2f:
7c:0b:91:5d:c8:ef:0d:cb:2a:6c:f7:a9:7c:68:41:
3a:e0:6d:f2:51:af:d2:e2:c4:30:ef:e8:13:64:7d:
af:16:fc:39:37:df:9b:ef:79:8d:16:b3:f8:af:a3:
1e:14:6a:e7:ce:a0:e9:8e:09:97:ce:0e:a6:81:bd:
1f:6e:f2:82:d9:ae:51:43:82:de:77:2b:68:70:f4:
a3:91:20:84:ba:2a:35:1f:20:a2:f1:80:30:36:f3:
6c:c9:19:97:20:31:aa:b4:78:4b:eb:c3:02:f8:9a:
22:59:f9:91:db:f7:e7:91:78:3e:76:35:9a:4a:df:
db:15:57:70:86:65:2f:9b:2c:49:e4:35:fe:2d:5c:
cc:5c:f9:d5:e2:6b:aa:d6:fe:06:14:ee:ff:3f:d8:
c1:20:93:b5:f8:51:c3:ab:20:2b:b3:e8:7a:50:c5:
ed:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:DD:33:9D:DC:59:7B:89:41:1C:9A:31:F5:C7:B5:1D:90:BA:99:EA
X509v3 Authority Key Identifier:
keyid:1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/yt0zndxZe4lBHJox9ce1HZC6meo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.72.119.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:4c:c6:b3:30:35:6c:fd:28:1b:42:93:42:a3:96:54:c9:27:
e1:b9:df:8c:3a:48:e2:1c:a6:f0:1a:cf:63:17:96:fd:66:db:
6b:5e:76:a8:13:48:ce:c6:68:72:f6:d6:97:36:91:b0:10:2c:
69:fe:17:2e:c2:3f:f9:a2:72:e6:21:c7:3e:89:7a:e8:05:90:
50:03:9f:2f:52:5a:19:76:ee:b4:65:05:d5:48:e4:58:3f:e1:
ef:98:15:ea:a2:a0:f0:1b:99:83:ef:c0:31:0d:e4:a5:0d:26:
77:fa:18:b2:a3:40:37:9d:9e:a9:67:b2:00:04:9e:12:0a:72:
59:39:53:cc:f2:3e:57:f6:e7:b6:51:c4:9c:56:00:55:d1:d9:
72:e3:ef:93:70:1b:38:a0:76:70:cc:be:60:37:89:34:1d:07:
ba:46:77:65:a5:6c:59:2f:7e:6d:eb:9c:46:9b:7d:0a:2b:ec:
bb:66:f2:56:90:21:58:dc:4c:c7:a4:24:f6:c0:fa:ee:5f:9d:
6d:3e:46:2e:89:e3:ef:71:76:79:3c:27:f4:2c:b9:9d:dd:ee:
91:ef:b3:38:3a:23:bf:b3:c9:94:5e:9c:30:00:33:79:e4:96:
16:81:0a:46:3b:b4:0a:40:4f:01:5a:77:8d:23:4c:bc:ba:2b:
95:4f:bc:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:41:46 2025 by rpki-client