Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/YMlu6WSyWRdCqOXFU-LI67AnFfM.roa
File: YMlu6WSyWRdCqOXFU-LI67AnFfM.roa (raw, json)
Hash identifier: SWzTQy6EjpVzNlLa7D3NYsT1gTdP6EcPBENjEQZ1OLY=
Subject key identifier: 60:C9:6E:E9:64:B2:59:17:42:A8:E5:C5:53:E2:C8:EB:B0:27:15:F3
Certificate issuer: /CN=77a350d9fe4e9f90ff3e84e2f960cb5dc3d6cee1
Certificate serial: B8CC
Authority key identifier: 77:A3:50:D9:FE:4E:9F:90:FF:3E:84:E2:F9:60:CB:5D:C3:D6:CE:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d6NQ2f5On5D_PoTi-WDLXcPWzuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/YMlu6WSyWRdCqOXFU-LI67AnFfM.roa
Signing time: Tue 26 Apr 2022 15:20:47 +0000
ROA not before: Tue 26 Apr 2022 15:20:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3303
IP address blocks: 193.5.254.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47308 (0xb8cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77a350d9fe4e9f90ff3e84e2f960cb5dc3d6cee1
Validity
Not Before: Apr 26 15:20:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=60c96ee964b2591742a8e5c553e2c8ebb02715f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:46:02:1a:b1:2d:2d:b8:cb:7a:1c:8c:c7:ee:
88:76:15:48:89:24:66:0b:84:5e:fd:f5:32:6d:bd:
fb:98:98:86:9f:ba:db:97:a3:ea:8a:10:2d:2e:26:
1e:55:72:c4:d7:73:ea:fc:c9:58:44:7b:0e:1c:5d:
6a:91:23:fb:0f:ad:e0:f9:c3:a4:9a:b5:47:bc:37:
00:dd:15:b7:f4:d7:65:2d:4e:c6:02:48:d6:9f:5c:
47:07:a6:3e:6b:2d:d5:f5:5f:2b:0a:70:be:f6:a2:
76:f0:ba:c1:fe:fb:25:9c:46:2e:77:fa:6b:e6:e5:
e3:c2:f6:38:48:89:ed:09:4c:4a:3e:3f:6c:db:66:
d4:3e:aa:82:ba:e3:1b:33:5a:22:d6:6d:2f:b0:74:
20:d4:18:40:49:7b:c3:20:16:63:85:12:a6:a6:05:
36:fc:b3:86:df:93:a0:70:1c:b3:77:0f:ae:15:4b:
b1:c7:c7:44:9e:26:7f:ce:7b:4a:c8:e3:67:1a:be:
28:b9:7f:7b:b2:00:f1:dc:b4:b7:2a:ff:d7:aa:9f:
a3:3f:ec:24:29:62:2f:70:c0:c8:8b:fc:7d:a1:d9:
ba:6f:b2:6b:58:24:34:5d:03:22:7c:0d:f1:dd:72:
7a:16:7e:26:ee:d8:6c:1d:b8:b1:35:6a:ba:75:3b:
48:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:C9:6E:E9:64:B2:59:17:42:A8:E5:C5:53:E2:C8:EB:B0:27:15:F3
X509v3 Authority Key Identifier:
keyid:77:A3:50:D9:FE:4E:9F:90:FF:3E:84:E2:F9:60:CB:5D:C3:D6:CE:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6NQ2f5On5D_PoTi-WDLXcPWzuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/YMlu6WSyWRdCqOXFU-LI67AnFfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.5.254.0/24
Signature Algorithm: sha256WithRSAEncryption
35:8d:08:3a:fc:44:b8:66:a2:dc:1b:1d:77:bb:f4:ca:39:5f:
0e:b5:73:18:39:0b:fc:2c:9f:29:ff:ec:30:31:58:06:3f:32:
f9:ad:84:4b:ec:b4:3a:c7:28:f2:7d:ff:7d:bd:80:ca:d0:4a:
7d:70:5f:47:99:da:9f:2a:1f:f1:cc:ee:5e:95:78:a5:0a:1f:
04:da:d3:74:6f:7a:d3:26:be:f0:35:42:8a:30:59:3e:dd:27:
d2:cb:b6:71:4f:b8:07:c6:34:b1:b8:6b:c2:41:d5:f2:40:c1:
52:55:aa:37:c8:c8:05:de:3a:69:65:cd:4a:23:c4:77:d2:fc:
2c:c7:38:60:3e:76:a2:4e:56:7c:af:e7:b7:12:ed:a5:45:00:
4f:60:29:08:e8:b6:2a:57:ab:d0:76:60:f7:32:bb:0c:9f:d2:
bf:0d:d6:13:68:20:03:f3:5e:74:a5:73:80:a5:58:1c:61:53:
20:7a:d2:41:df:05:a2:26:55:40:76:28:61:a0:4a:66:a8:29:
1e:21:c5:bf:ce:75:12:db:8b:22:eb:ff:ff:98:8a:00:6c:2a:
de:0a:b1:7a:66:97:bb:7e:56:f3:02:51:3a:d0:71:67:af:9b:
8b:d0:a3:84:3d:3b:7b:4f:b3:fb:ca:b8:5c:32:1f:94:76:ec:
e9:2c:24:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:56:42 2025 by rpki-client