Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/YIKCnLK_uN79AVBQBFzdalTbD-Q.roa
File: YIKCnLK_uN79AVBQBFzdalTbD-Q.roa (raw, json)
Hash identifier: Edlxr6QBEcHpPnsBALxb9bp+hBHxtOyzbSjBvp53TPE=
Subject key identifier: 60:82:82:9C:B2:BF:B8:DE:FD:01:50:50:04:5C:DD:6A:54:DB:0F:E4
Certificate issuer: /CN=b343514630dc17f3fe9b51dd434184d0b62b03c0
Certificate serial: 0182A82B229BE8C9F5CF1D2C21120775B211
Authority key identifier: B3:43:51:46:30:DC:17:F3:FE:9B:51:DD:43:41:84:D0:B6:2B:03:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/YIKCnLK_uN79AVBQBFzdalTbD-Q.roa
Signing time: Tue 16 Aug 2022 19:39:35 +0000
ROA not before: Tue 16 Aug 2022 19:39:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207648
IP address blocks: 81.29.133.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:a8:2b:22:9b:e8:c9:f5:cf:1d:2c:21:12:07:75:b2:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b343514630dc17f3fe9b51dd434184d0b62b03c0
Validity
Not Before: Aug 16 19:39:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6082829cb2bfb8defd015050045cdd6a54db0fe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:38:96:3a:00:9e:d8:22:75:3f:4a:bd:95:83:
87:67:5e:0d:33:b7:64:2c:31:f2:b4:4f:fd:9c:4e:
aa:0b:6e:12:a9:27:3a:b1:3e:76:eb:87:b7:20:0b:
c7:68:a2:81:b8:f4:86:e1:63:25:35:01:a1:a8:9a:
c5:b4:24:eb:36:b8:a3:c8:35:bc:c0:42:6d:e9:48:
7c:98:12:21:a1:16:55:20:72:38:64:ad:bd:96:f7:
f2:f8:cf:fa:c8:08:73:93:e3:fa:0a:4e:f3:de:ad:
a4:3d:7d:6b:c6:5b:67:b3:b1:ad:8e:8c:a7:96:b1:
c2:79:6a:83:61:34:12:12:73:df:ff:de:b2:41:d1:
41:72:77:0f:13:41:cb:d0:dc:0f:94:9d:5f:b7:fc:
83:d4:77:e5:f2:72:8b:73:0f:5c:ed:1f:2b:36:4c:
4e:7f:72:3d:62:7b:1d:5d:6d:cb:97:66:42:3c:b1:
44:d7:33:1a:ba:9a:5d:77:27:34:cd:19:55:a4:24:
2e:12:38:ab:86:94:10:f8:55:31:c8:a9:42:89:c8:
3c:63:8d:3b:ee:68:2d:d4:cb:de:8e:0d:58:5c:8f:
74:45:41:ce:80:ce:ae:8f:ef:56:13:5d:9e:81:66:
06:d2:03:22:a8:2e:3e:6c:b0:95:0f:4b:3a:b6:af:
eb:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:82:82:9C:B2:BF:B8:DE:FD:01:50:50:04:5C:DD:6A:54:DB:0F:E4
X509v3 Authority Key Identifier:
keyid:B3:43:51:46:30:DC:17:F3:FE:9B:51:DD:43:41:84:D0:B6:2B:03:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/YIKCnLK_uN79AVBQBFzdalTbD-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.29.133.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:71:45:79:e9:de:a9:5f:5f:c0:2d:63:f4:50:4b:d0:40:73:
9e:d5:60:7f:dc:ad:ac:a1:d1:da:c5:da:eb:da:77:4d:60:d9:
e2:1f:01:80:58:97:17:4f:48:2a:c3:3a:77:fa:f8:ef:2a:e1:
f7:0c:10:c7:a2:96:00:54:fa:08:fe:05:87:49:72:5e:d9:d3:
4d:bd:6a:fa:0f:d2:9f:07:4e:8e:41:f6:8b:39:4c:43:9f:46:
6a:85:c4:61:b3:dc:af:5a:aa:af:e5:3c:d5:8e:b7:08:9b:29:
8e:94:4d:7c:3a:5e:f8:2c:9f:07:8a:e1:a7:86:58:f9:b6:df:
ed:a4:8a:42:53:00:ff:06:72:9f:55:cb:2b:bd:70:d4:ed:3f:
50:f7:73:7e:c1:84:8c:06:c0:4d:4c:04:32:08:b1:29:43:6d:
7b:a4:c9:4b:fc:40:6f:ce:e8:86:51:26:6b:02:bf:c1:88:ba:
85:d6:af:22:e7:72:f9:50:dd:e6:36:43:fd:7d:22:6c:d5:de:
95:46:7e:fa:41:f4:13:80:5f:2a:f8:75:aa:af:e9:c8:41:86:
7e:fa:d5:7b:17:22:78:c1:c0:70:36:03:ac:9b:fb:30:25:59:
57:9c:93:71:4a:df:67:a1:21:72:bd:37:9d:de:ab:ef:b6:24:
fa:d0:8b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:53:47 2025 by rpki-client