Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/aa4cc4-5537-4aeb-9fed-d29b7d478631/1/Y-yQl13xbTeDFTvg7dY_RrpQupg.roa
File: Y-yQl13xbTeDFTvg7dY_RrpQupg.roa (raw, json)
Hash identifier: EhbrM/0gb4z/Jt3sSW9+c7j7faz8Xc0r6CT+TP22+l8=
Subject key identifier: 63:EC:90:97:5D:F1:6D:37:83:15:3B:E0:ED:D6:3F:46:BA:50:BA:98
Certificate issuer: /CN=42de27fa887905e0c9c1f53f67f23f296d045f0e
Certificate serial: 01825DA70544AD0258EE3946E07358A260E1
Authority key identifier: 42:DE:27:FA:88:79:05:E0:C9:C1:F5:3F:67:F2:3F:29:6D:04:5F:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/aa4cc4-5537-4aeb-9fed-d29b7d478631/1/Y-yQl13xbTeDFTvg7dY_RrpQupg.roa
Signing time: Tue 02 Aug 2022 08:23:23 +0000
ROA not before: Tue 02 Aug 2022 08:23:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49129
IP address blocks: 178.236.48.0/20 maxlen: 20
31.192.0.0/20 maxlen: 20
31.192.16.0/20 maxlen: 20
77.242.48.0/20 maxlen: 20
31.192.32.0/20 maxlen: 20
80.77.48.0/20 maxlen: 20
31.192.48.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:5d:a7:05:44:ad:02:58:ee:39:46:e0:73:58:a2:60:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42de27fa887905e0c9c1f53f67f23f296d045f0e
Validity
Not Before: Aug 2 08:23:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=63ec90975df16d3783153be0edd63f46ba50ba98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e0:bb:e3:dd:bd:95:3b:80:3a:52:44:47:2f:
54:f3:d4:ce:0c:dc:8b:59:f7:61:f2:3e:3a:19:a8:
21:9d:30:de:83:23:ea:61:83:c3:bc:27:ce:5d:f9:
aa:b9:af:3b:ae:e1:bf:14:00:0e:2e:85:4f:55:08:
df:18:a3:c3:ee:67:22:35:9d:a4:30:38:16:6c:14:
5d:76:49:c2:b9:e3:b2:b0:47:cc:91:45:5d:06:99:
c1:50:e5:0f:62:52:5c:23:29:1f:f9:35:6b:1f:bd:
5f:48:95:34:63:59:22:a8:6d:66:48:c7:43:09:a2:
ee:94:9b:2d:32:8f:3e:5b:25:f8:93:ec:e3:85:9b:
7d:37:98:3e:cb:8a:8f:20:90:81:1c:35:6a:37:68:
0a:bb:e5:83:21:1d:7a:e2:34:62:14:d8:44:62:9d:
89:a8:54:c9:78:02:66:b0:f5:ee:44:30:3b:0a:d8:
cb:ef:d7:7b:04:0e:84:50:94:43:ae:60:05:88:6a:
51:d4:62:08:47:4c:3e:b3:b4:d4:1a:e0:4f:8a:05:
3b:78:86:aa:8c:b6:25:47:1c:02:38:33:02:7e:95:
d9:74:e8:ab:05:f6:38:b3:57:85:51:1c:70:91:b1:
15:65:41:80:78:ea:07:c0:87:82:04:20:dc:14:a0:
bc:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:EC:90:97:5D:F1:6D:37:83:15:3B:E0:ED:D6:3F:46:BA:50:BA:98
X509v3 Authority Key Identifier:
keyid:42:DE:27:FA:88:79:05:E0:C9:C1:F5:3F:67:F2:3F:29:6D:04:5F:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/aa4cc4-5537-4aeb-9fed-d29b7d478631/1/Y-yQl13xbTeDFTvg7dY_RrpQupg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/aa4cc4-5537-4aeb-9fed-d29b7d478631/1/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.192.0.0/18
77.242.48.0/20
80.77.48.0/20
178.236.48.0/20
Signature Algorithm: sha256WithRSAEncryption
84:61:bc:34:8e:1e:78:46:d0:9d:b2:75:5b:ca:2b:f5:e9:0f:
7a:0d:5a:91:41:81:1f:11:67:1a:b5:5d:c6:04:ed:56:5a:48:
6c:34:e6:3a:0a:d6:44:d2:5a:cc:20:d2:ed:df:90:79:cb:91:
01:f0:db:b1:b5:cb:67:8c:3f:6c:c1:57:ba:bc:7f:ce:01:4b:
10:85:fb:7e:3c:f3:8e:4d:75:d2:7f:02:bf:1e:8d:1b:d2:6a:
9a:8a:42:62:b4:07:fa:8d:18:65:02:60:70:b1:4e:16:fa:43:
07:dd:bc:5f:94:33:17:9b:6d:03:fe:32:93:62:11:39:17:a2:
0c:63:3c:a4:ba:37:88:20:8e:ea:2d:48:59:2b:f1:90:56:12:
9e:c1:2f:51:12:81:17:98:23:81:f8:19:85:9a:6b:4e:cb:2b:
5c:42:b5:eb:5b:ab:c0:e4:83:6f:54:09:db:7f:11:1b:1b:66:
bf:ad:9a:50:19:13:d3:0d:59:89:5f:7d:9c:2f:df:3e:8b:ef:
7d:60:dc:a6:f3:24:ca:dc:32:f2:cf:d9:98:20:a2:0a:96:68:
ed:6b:5e:5f:ad:0d:a5:77:cd:50:d8:d4:63:22:cf:59:81:6d:
f8:0f:9c:e6:4b:1e:4b:8f:a9:ec:21:4e:14:b5:54:8e:af:9a:
0f:08:28:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:13:38 2025 by rpki-client