Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/ylC6xQ98t5O2KDA3aAq6akGb4rY.roa
File: ylC6xQ98t5O2KDA3aAq6akGb4rY.roa (raw, json)
Hash identifier: 2yVAx/Rg0d/N0N+GcQShj9qtnNBknPehdnkw8S4+mHQ=
Subject key identifier: CA:50:BA:C5:0F:7C:B7:93:B6:28:30:37:68:0A:BA:6A:41:9B:E2:B6
Certificate issuer: /CN=5dc67c6be367ab9e941d1427d050449447b8865c
Certificate serial: 0189FD019AAE4C7245A9DEEA9DD4A7530BB6
Authority key identifier: 5D:C6:7C:6B:E3:67:AB:9E:94:1D:14:27:D0:50:44:94:47:B8:86:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XcZ8a-Nnq56UHRQn0FBElEe4hlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/ylC6xQ98t5O2KDA3aAq6akGb4rY.roa
Signing time: Wed 16 Aug 2023 06:21:27 +0000
ROA not before: Wed 16 Aug 2023 06:21:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205240
IP address blocks: 193.218.204.0/24 maxlen: 24
193.218.222.0/24 maxlen: 24
193.219.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:fd:01:9a:ae:4c:72:45:a9:de:ea:9d:d4:a7:53:0b:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dc67c6be367ab9e941d1427d050449447b8865c
Validity
Not Before: Aug 16 06:21:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ca50bac50f7cb793b6283037680aba6a419be2b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fa:b6:e4:52:f0:27:e9:1b:06:a9:e2:13:f4:
c7:49:0c:2e:34:09:08:47:ab:23:4a:21:23:07:fa:
d6:53:14:ec:cb:c7:5f:8f:a5:6e:76:62:4d:8c:19:
0e:97:74:46:4b:1d:0e:6a:31:cd:08:07:6a:19:86:
5e:af:0d:6e:62:98:35:30:be:64:59:74:f9:69:9d:
fc:cd:5c:f1:7b:e4:4d:fe:68:fd:4c:25:39:23:68:
fa:40:cc:98:cf:98:29:c3:a0:dd:1a:ae:fd:9c:dc:
08:67:21:30:79:c2:80:7e:a1:10:ba:ef:73:53:2d:
c7:f6:73:3f:04:04:af:a2:53:f8:53:90:f0:a7:94:
29:53:36:bf:e6:4e:c5:29:fe:49:e7:d3:35:99:6a:
c0:87:4e:65:db:3d:2a:22:77:cc:9a:91:bf:5a:88:
30:e4:23:cf:c5:27:11:8e:da:f6:f5:33:fd:be:3c:
28:39:9b:27:56:5b:4b:13:ce:91:2d:c9:df:d2:7c:
13:84:ed:21:0a:ae:9a:00:ae:9c:f5:27:55:43:cb:
0b:93:77:56:86:e7:af:b0:35:5f:64:6b:41:ee:c1:
9a:c6:34:6b:46:71:79:de:9e:88:45:7a:55:61:db:
d5:6a:5c:7c:39:90:15:33:da:85:85:0c:ff:22:07:
9b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:50:BA:C5:0F:7C:B7:93:B6:28:30:37:68:0A:BA:6A:41:9B:E2:B6
X509v3 Authority Key Identifier:
keyid:5D:C6:7C:6B:E3:67:AB:9E:94:1D:14:27:D0:50:44:94:47:B8:86:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XcZ8a-Nnq56UHRQn0FBElEe4hlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/ylC6xQ98t5O2KDA3aAq6akGb4rY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/XcZ8a-Nnq56UHRQn0FBElEe4hlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.218.204.0/24
193.218.222.0/24
193.219.0.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:6f:39:58:d9:b2:59:ee:d1:ff:49:eb:21:97:6c:03:cd:52:
7f:53:6b:8b:c9:88:39:1c:ab:53:a4:d2:24:56:6c:1e:91:cb:
8c:df:09:eb:17:1c:c5:b7:cb:73:9e:6a:11:23:61:9e:13:ec:
d9:29:13:37:9e:7f:f4:78:02:76:ae:74:10:49:25:44:cb:e2:
32:81:ae:78:b3:93:e4:03:b7:46:ad:e8:db:ba:c8:63:72:b3:
37:05:cb:a8:6a:16:9b:bd:30:5c:b0:1d:18:c4:c0:ac:1d:79:
03:c9:dc:76:76:90:6f:c4:0a:9e:27:a4:7e:9b:5a:a6:55:20:
6f:12:5b:51:c5:69:9a:ec:1b:b0:ab:56:69:fa:fc:a8:3d:55:
c1:b1:40:87:d8:64:08:53:1a:5a:f9:66:95:51:31:a4:77:7f:
02:8e:62:a1:68:d4:f1:d3:20:1c:f9:88:52:81:ee:f8:fa:ba:
8c:ff:67:43:bc:5c:e8:59:b0:36:04:73:0f:e7:4b:a9:32:c9:
e1:ec:4d:65:ad:14:d4:93:ef:0a:c5:0f:3b:60:9b:a1:97:d1:
81:31:c2:46:fb:e7:bc:30:ab:ea:ef:4c:ca:cc:01:ce:06:09:
96:49:63:c3:29:c5:c4:c4:d6:f5:13:cb:54:01:59:05:0a:db:
c2:51:3e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:29:39 2025 by rpki-client