Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/2860a4-3b94-4274-a3a2-f9ac15e66386/1/yQ8yk1BICbduinl18XCLTKCyQLk.roa
File: yQ8yk1BICbduinl18XCLTKCyQLk.roa (raw, json)
Hash identifier: wA5pVj+/NW42Nxy8z4MsQkHDJvNk3+ycTCrNyrHlmos=
Subject key identifier: C9:0F:32:93:50:48:09:B7:6E:8A:79:75:F1:70:8B:4C:A0:B2:40:B9
Certificate issuer: /CN=107807c2518915138f555123605c0133dfdbb4fa
Certificate serial: 08C1162E
Authority key identifier: 10:78:07:C2:51:89:15:13:8F:55:51:23:60:5C:01:33:DF:DB:B4:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHgHwlGJFROPVVEjYFwBM9_btPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/2860a4-3b94-4274-a3a2-f9ac15e66386/1/yQ8yk1BICbduinl18XCLTKCyQLk.roa
Signing time: Sat 01 Jan 2022 01:00:44 +0000
ROA not before: Sat 01 Jan 2022 01:00:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 378
IP address blocks: 132.70.0.0/15 maxlen: 15
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146871854 (0x8c1162e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=107807c2518915138f555123605c0133dfdbb4fa
Validity
Not Before: Jan 1 01:00:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c90f3293504809b76e8a7975f1708b4ca0b240b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:58:e7:1d:60:99:bd:90:54:ab:f3:96:57:8d:
72:91:e0:a9:5e:f4:f9:b1:4f:de:e4:1f:40:81:00:
fc:af:ca:b2:30:a4:57:85:0f:fe:b0:6d:ce:c4:6a:
9a:fb:20:52:2a:fe:c0:15:61:96:2d:31:d4:c6:3c:
bc:ac:73:c6:31:a3:df:a2:c6:f6:83:29:67:9e:e1:
93:9a:3c:05:de:3b:bc:e8:3f:17:ef:fa:09:7b:2a:
e0:06:d1:c0:ab:68:82:1c:c7:2a:8e:e8:f2:86:e8:
ab:2a:dc:7a:ec:fc:38:94:19:0b:3a:b1:72:81:29:
ef:7c:bb:75:43:5a:eb:4c:db:7f:f5:f8:48:1c:01:
f1:84:a4:11:14:c6:11:ed:36:91:54:5c:22:e9:8a:
01:bd:f9:84:1c:20:fb:be:89:24:c0:86:66:53:5d:
a4:1a:98:33:e8:46:2c:6e:cc:3a:f3:bd:76:91:6c:
dd:7a:7b:79:31:72:f3:4a:7d:3c:91:e8:21:97:e8:
64:0e:d9:22:82:dc:6c:fe:82:42:ef:fc:61:25:fe:
8d:63:a7:38:b4:ee:e2:24:00:eb:8e:e0:0c:97:47:
fc:19:9e:96:d3:83:5c:8f:71:a9:e5:99:24:61:eb:
38:26:e7:15:0a:d9:60:75:71:6f:e7:9d:e8:95:47:
14:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:0F:32:93:50:48:09:B7:6E:8A:79:75:F1:70:8B:4C:A0:B2:40:B9
X509v3 Authority Key Identifier:
keyid:10:78:07:C2:51:89:15:13:8F:55:51:23:60:5C:01:33:DF:DB:B4:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHgHwlGJFROPVVEjYFwBM9_btPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2860a4-3b94-4274-a3a2-f9ac15e66386/1/yQ8yk1BICbduinl18XCLTKCyQLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2860a4-3b94-4274-a3a2-f9ac15e66386/1/EHgHwlGJFROPVVEjYFwBM9_btPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.70.0.0/15
Signature Algorithm: sha256WithRSAEncryption
a1:38:74:b8:11:15:c3:f3:69:4c:91:43:b5:28:2c:0f:26:d4:
15:55:53:b1:01:1d:c9:c3:40:48:a8:2c:7b:28:26:ea:6a:ae:
47:d1:a5:b4:65:8f:8a:4c:33:94:b1:d1:94:1c:c8:f1:1b:d8:
c0:4f:96:ff:9e:1f:06:87:a3:90:3c:cf:7a:c3:28:9c:bb:23:
77:be:ff:a9:0a:e1:87:3b:60:d0:d3:44:3c:7c:37:93:36:be:
1a:17:ec:6f:08:5f:16:0f:96:6d:ee:fd:79:a7:66:3f:b4:cb:
b0:a6:81:42:20:1d:1f:9d:47:42:c1:9b:27:22:b8:53:48:f2:
a7:13:9b:42:ab:95:88:68:80:43:de:6f:cc:b7:62:ae:49:0c:
7b:26:5f:32:06:fb:52:ee:d1:3b:8e:1c:58:0f:be:99:1d:e0:
bd:58:07:fa:69:a7:cf:5a:dd:2e:d1:b2:1f:50:6b:a9:00:3b:
56:c3:6b:8f:bf:94:cb:f4:48:8d:12:be:cd:94:a5:7f:d9:ee:
f9:da:4f:e5:cc:a7:24:af:a2:c8:45:18:20:2d:93:08:30:ae:
9e:e6:4d:9c:8d:5a:63:d0:cf:5f:44:0a:59:52:db:96:be:6b:
7b:eb:8f:8c:09:30:03:32:61:85:22:51:3b:b0:11:5b:1f:4b:
81:2d:c1:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:33:07 2025 by rpki-client