Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/YSGVx1WeG1kI5w9l_UBDvo9eO-E.roa
File: YSGVx1WeG1kI5w9l_UBDvo9eO-E.roa (raw, json)
Hash identifier: 8q6PqHboZgYot1aKrT52t+kHYnG1TyEVCc4hx9hCMqs=
Subject key identifier: 61:21:95:C7:55:9E:1B:59:08:E7:0F:65:FD:40:43:BE:8F:5E:3B:E1
Certificate issuer: /CN=8e895f1e270c635ec61df9a97fc0f668c0a8f548
Certificate serial: 0185737A905D3E9FE59D79C2AE79ED5B2341
Authority key identifier: 8E:89:5F:1E:27:0C:63:5E:C6:1D:F9:A9:7F:C0:F6:68:C0:A8:F5:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jolfHicMY17GHfmpf8D2aMCo9Ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/YSGVx1WeG1kI5w9l_UBDvo9eO-E.roa
Signing time: Mon 02 Jan 2023 17:14:50 +0000
ROA not before: Mon 02 Jan 2023 17:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48172
IP address blocks: 194.33.114.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:7a:90:5d:3e:9f:e5:9d:79:c2:ae:79:ed:5b:23:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e895f1e270c635ec61df9a97fc0f668c0a8f548
Validity
Not Before: Jan 2 17:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=612195c7559e1b5908e70f65fd4043be8f5e3be1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:45:7b:c2:1a:9a:03:e4:9b:cd:11:ec:87:78:
42:33:45:0d:a8:93:5f:db:3e:41:4f:c9:0c:49:49:
6d:88:7b:32:04:25:ac:43:ed:6c:36:a9:1c:f3:24:
4b:02:b2:b7:a1:84:fc:6f:f5:f3:0f:41:4f:44:0f:
3f:8b:ee:55:2f:18:1f:a2:4e:a7:36:f1:23:97:b6:
7c:1a:0f:85:5f:c9:88:06:90:f5:ac:8a:7c:52:46:
0a:a9:21:dd:17:2c:ef:d6:7b:e2:36:71:5f:f4:30:
86:5e:b5:d8:ce:bc:7c:6e:11:27:a8:cb:38:ad:6c:
77:33:9a:34:7b:c9:28:4e:da:53:27:42:f4:18:e5:
b4:0b:96:74:78:3e:e2:bd:3e:3d:bd:55:cf:15:1d:
5b:46:11:95:4e:a3:10:80:12:1f:d9:2b:52:56:8f:
9e:47:4a:2f:42:70:85:5d:22:40:76:58:ff:c4:8d:
e3:a8:21:cc:7e:b1:70:04:52:aa:00:c4:0d:b1:b4:
ba:36:3d:8d:cc:ed:a6:55:a7:20:ca:92:80:d1:b1:
c2:4e:3f:6f:8e:88:c9:eb:87:02:6c:6f:80:8f:f4:
ed:ea:87:27:67:79:aa:bd:17:ce:8b:6b:64:91:20:
6d:0c:21:a1:fc:c9:29:ab:08:2d:c9:20:f7:c4:7f:
16:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:21:95:C7:55:9E:1B:59:08:E7:0F:65:FD:40:43:BE:8F:5E:3B:E1
X509v3 Authority Key Identifier:
keyid:8E:89:5F:1E:27:0C:63:5E:C6:1D:F9:A9:7F:C0:F6:68:C0:A8:F5:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jolfHicMY17GHfmpf8D2aMCo9Ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/YSGVx1WeG1kI5w9l_UBDvo9eO-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.33.114.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:72:e2:42:bf:54:4d:8c:ee:8e:0e:18:42:7d:8d:7a:53:0e:
1e:14:fb:ce:b8:3a:df:1d:55:41:b5:cb:89:79:6e:8d:68:bc:
7f:59:b6:08:87:1d:ec:d6:e4:19:00:e4:cd:08:c7:3c:3b:f2:
80:0a:a6:6f:2e:78:34:19:bc:f6:ea:f1:b6:d5:c2:1e:f3:51:
57:ec:fb:b5:8f:e5:52:4c:a1:cb:80:8f:2c:1f:9a:38:26:38:
c8:95:12:ba:2b:99:2a:c4:89:39:74:6a:39:a7:d6:55:ad:8b:
7b:d9:be:79:f2:86:ed:3f:47:b6:2c:fa:60:1b:74:ac:56:2b:
45:fc:b2:69:13:1e:85:4e:0c:ee:77:b3:ed:ad:ce:bc:51:d8:
16:55:22:5d:e9:33:d0:c8:ec:75:31:9e:7d:fd:0a:80:6a:1f:
13:95:c6:90:4c:bf:03:ed:c2:9b:05:99:b8:3b:35:cb:90:c3:
da:53:1d:ca:bf:42:47:fa:68:c1:63:32:f4:6e:f5:14:79:26:
64:69:bb:cc:8c:72:19:a6:09:cb:b9:40:59:b4:51:48:e7:65:
70:25:99:36:bf:09:c9:5d:76:d7:c5:af:e5:62:df:17:33:60:
17:ad:ed:ca:6c:cb:d1:26:66:f9:a0:c3:ec:e7:e5:38:4a:b2:
f3:bf:77:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:53:25 2025 by rpki-client