Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c5c595-2673-4d5f-8a85-ae8c81f96f42/1/YE59zYexVDxxZZPJjDDL_7_QDTo.roa
File: YE59zYexVDxxZZPJjDDL_7_QDTo.roa (raw, json)
Hash identifier: jzTYI+VCOUa9OHwm9MalW3+MBpOUmrVwRubwHsEz6aI=
Subject key identifier: 60:4E:7D:CD:87:B1:54:3C:71:65:93:C9:8C:30:CB:FF:BF:D0:0D:3A
Certificate issuer: /CN=4ce488c6401c8f5e969e15d64651fb4b2d2dcdf7
Certificate serial: 01856ECBA2AAAFD803FACA8CE53B5C144530
Authority key identifier: 4C:E4:88:C6:40:1C:8F:5E:96:9E:15:D6:46:51:FB:4B:2D:2D:CD:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TOSIxkAcj16WnhXWRlH7Sy0tzfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/c5c595-2673-4d5f-8a85-ae8c81f96f42/1/YE59zYexVDxxZZPJjDDL_7_QDTo.roa
Signing time: Sun 01 Jan 2023 19:25:17 +0000
ROA not before: Sun 01 Jan 2023 19:25:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51735
IP address blocks: 91.220.78.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:cb:a2:aa:af:d8:03:fa:ca:8c:e5:3b:5c:14:45:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ce488c6401c8f5e969e15d64651fb4b2d2dcdf7
Validity
Not Before: Jan 1 19:25:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=604e7dcd87b1543c716593c98c30cbffbfd00d3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:54:c7:12:46:f9:d8:2e:aa:9a:d0:fd:74:43:
7d:64:c8:74:e2:cc:8c:2f:21:ca:30:a7:33:b5:57:
3d:ef:cc:8f:67:59:f3:39:44:af:ef:97:20:41:23:
85:55:5f:b9:cd:5a:da:16:d9:f5:5a:6b:07:bb:f5:
3d:7d:cb:ce:c9:93:9c:5c:e8:5d:f5:91:2a:ba:09:
2f:b5:e5:83:90:a9:2d:76:82:ed:8b:46:f2:e9:3d:
7c:c8:16:82:46:43:ad:55:d8:a0:7a:11:8e:be:fc:
a1:f5:a8:10:f0:92:59:97:76:87:bf:62:a3:34:12:
4c:04:f2:e8:47:b7:75:b4:01:4c:c8:fb:c5:63:28:
ed:b6:77:cd:a2:dc:de:6b:c3:83:46:80:56:49:3d:
82:dd:af:b7:db:44:94:05:2d:8f:f0:3e:de:27:50:
bc:ac:f4:a6:9b:7d:df:62:ea:68:38:62:98:2d:79:
de:98:0d:81:e6:43:6b:bf:00:53:4a:c5:f3:43:af:
e6:6c:7b:47:22:fe:fa:91:15:a3:5d:81:c7:b9:e5:
d3:24:9a:27:d7:e5:9e:b5:c1:94:0c:b8:23:c5:1e:
00:ef:eb:09:25:90:af:58:64:67:6b:47:9f:8f:11:
c3:98:04:02:5c:45:bc:c5:bb:a6:76:22:f2:8c:7f:
a2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:4E:7D:CD:87:B1:54:3C:71:65:93:C9:8C:30:CB:FF:BF:D0:0D:3A
X509v3 Authority Key Identifier:
keyid:4C:E4:88:C6:40:1C:8F:5E:96:9E:15:D6:46:51:FB:4B:2D:2D:CD:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TOSIxkAcj16WnhXWRlH7Sy0tzfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c5c595-2673-4d5f-8a85-ae8c81f96f42/1/YE59zYexVDxxZZPJjDDL_7_QDTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c5c595-2673-4d5f-8a85-ae8c81f96f42/1/TOSIxkAcj16WnhXWRlH7Sy0tzfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.78.0/24
Signature Algorithm: sha256WithRSAEncryption
41:7e:5e:f8:5b:7d:12:2f:0c:f7:e7:f5:ff:9d:30:b3:5a:88:
e2:c1:92:4e:b3:f3:29:96:d9:bc:f2:f1:d5:a7:ae:cd:c4:f3:
f0:ad:b0:f6:9f:1a:c9:6d:54:d1:79:44:b8:83:a4:67:80:89:
98:65:0d:cb:ee:3f:62:c0:9c:8b:5c:bd:7e:59:93:05:ff:84:
f9:c8:4b:d0:94:f0:9e:2b:3b:d0:bd:94:a0:bd:7f:10:7e:a0:
9e:0e:51:d5:9a:dd:37:89:87:13:be:6b:53:0e:0c:04:f2:f6:
c8:2a:66:5f:d4:b8:a4:fc:94:6c:0a:e2:6a:65:e6:c6:be:3d:
f2:cb:06:7f:41:28:79:bd:88:32:d0:8c:90:b9:66:ec:c7:f7:
64:31:2d:2e:a0:02:34:a7:fc:10:b3:4f:f2:fc:b2:48:90:94:
d7:72:72:18:80:76:39:b1:e1:3d:76:64:46:09:df:46:c8:3a:
fd:3a:4b:98:a8:77:77:02:0a:75:b2:6c:b0:61:40:12:72:47:
f9:2f:82:eb:ce:f2:0e:d8:a1:db:2e:c6:a9:7b:9f:14:f6:a1:
fa:ee:f5:df:84:e6:ba:21:d7:e9:f9:be:85:18:a5:b5:19:33:
0a:f9:1e:33:7b:69:b9:1e:ad:18:f1:c0:29:79:4e:70:92:0c:
4e:e8:01:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:01:11 2025 by rpki-client