Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yNaxnjHPV7JrGc33jo9zZO5UfyI.roa
File: yNaxnjHPV7JrGc33jo9zZO5UfyI.roa (raw, json)
Hash identifier: y7LdZbOnoNQyWyeZKDWYX/vg/pmHqK2hK99UFJK6PSY=
Subject key identifier: C8:D6:B1:9E:31:CF:57:B2:6B:19:CD:F7:8E:8F:73:64:EE:54:7F:22
Certificate issuer: /CN=c98b825f36e9cc330315c940de800cbabce3397b
Certificate serial: 030514F4
Authority key identifier: C9:8B:82:5F:36:E9:CC:33:03:15:C9:40:DE:80:0C:BA:BC:E3:39:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYuCXzbpzDMDFclA3oAMurzjOXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yNaxnjHPV7JrGc33jo9zZO5UfyI.roa
Signing time: Sat 01 Jan 2022 04:57:05 +0000
ROA not before: Sat 01 Jan 2022 04:57:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15404
IP address blocks: 194.11.129.0/24 maxlen: 24
194.11.130.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50664692 (0x30514f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c98b825f36e9cc330315c940de800cbabce3397b
Validity
Not Before: Jan 1 04:57:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c8d6b19e31cf57b26b19cdf78e8f7364ee547f22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ba:39:59:28:c0:a5:e4:e7:51:31:03:0f:03:
f4:54:27:36:75:cb:d2:9b:5f:77:70:c1:1a:d2:ee:
7a:2d:dc:49:41:d3:f9:c0:94:42:df:03:4e:1a:d4:
c3:0a:ba:b2:e2:4e:e5:3b:3a:0d:2f:28:5b:23:32:
1c:c7:7e:64:07:01:8f:b3:bf:76:89:56:77:41:15:
73:fc:19:4c:ee:02:0e:a5:c0:59:94:57:41:1d:f4:
ad:e7:55:e4:2b:58:91:27:8f:a5:73:0b:7a:95:96:
43:48:a2:90:3b:2a:06:d5:5b:84:ca:59:60:5c:7a:
0a:ab:90:77:02:0e:1d:bc:82:2b:bd:c6:6c:be:ea:
73:51:d3:45:63:b6:e4:ed:e6:34:a6:49:9b:8a:1a:
3a:32:44:a2:c4:ec:e3:46:58:1b:60:57:52:fc:16:
63:aa:03:d1:db:e9:77:a2:e0:81:d7:dc:bb:b7:09:
df:1f:ba:b5:27:4f:4c:20:ae:62:3b:23:e5:02:94:
3d:0d:2e:35:c0:4c:be:e7:4d:45:e5:9e:da:2b:70:
c8:fa:1d:d5:73:df:38:48:a3:0a:df:4d:2e:97:6e:
05:39:68:b0:3a:c9:47:64:f7:65:c8:22:01:8f:00:
b8:e9:f7:cf:ab:4f:c3:47:da:0e:fd:3a:66:77:19:
e2:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:D6:B1:9E:31:CF:57:B2:6B:19:CD:F7:8E:8F:73:64:EE:54:7F:22
X509v3 Authority Key Identifier:
keyid:C9:8B:82:5F:36:E9:CC:33:03:15:C9:40:DE:80:0C:BA:BC:E3:39:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYuCXzbpzDMDFclA3oAMurzjOXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yNaxnjHPV7JrGc33jo9zZO5UfyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.11.129.0-194.11.130.255
Signature Algorithm: sha256WithRSAEncryption
0b:74:85:22:f5:b7:d9:06:f0:71:db:29:8b:60:b3:0f:c8:ff:
ce:ec:9a:59:46:48:19:99:af:2d:52:b6:12:ac:37:b4:18:c8:
e4:4e:45:d6:51:12:c8:b6:8f:71:b5:5e:43:cb:06:0e:e0:ab:
e9:d9:d3:06:33:4a:cd:71:26:bb:99:81:ab:b5:57:00:e9:0e:
6e:b8:fe:01:b3:5b:45:12:67:9c:1a:21:ab:c5:af:88:e2:44:
c4:92:5d:0a:dc:a7:19:6d:01:b5:59:43:2e:85:ad:ff:53:dd:
dc:cb:60:18:bb:46:da:b0:c6:c0:1d:18:19:27:e7:0a:35:da:
96:20:40:c7:81:c1:f4:2d:bb:11:48:78:67:a1:9b:a7:b8:28:
32:88:d0:35:a3:06:0e:b2:cf:e9:01:39:e0:68:fc:86:0a:64:
07:9f:fa:34:59:6c:84:f6:1e:22:58:7a:19:70:ee:53:f6:5e:
3a:48:71:45:14:b2:e1:56:77:08:25:e5:7b:bf:cc:97:f7:d5:
f7:10:f5:b6:fa:ee:57:f9:71:3d:43:ca:b4:41:1c:1c:d1:1d:
17:00:14:a1:45:d1:6e:5e:fb:68:d1:de:74:ce:c6:3d:5b:36:
19:88:b1:7b:26:a9:7f:d5:fe:c2:d0:a6:55:a2:e7:92:e5:dd:
c2:51:a5:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 06:22:25 2025 by rpki-client