Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/6109d6-0a8a-4bf6-a0e2-e52da3b86754/1/bYRLQKWOrRtD8CNjdTcunpUV2lw.roa
File: bYRLQKWOrRtD8CNjdTcunpUV2lw.roa (raw, json)
Hash identifier: O9BiLek3qMsSvrOH4cdoOZMUAHaYyTmW/hqopkQmGwk=
Subject key identifier: 6D:84:4B:40:A5:8E:AD:1B:43:F0:23:63:75:37:2E:9E:95:15:DA:5C
Certificate issuer: /CN=56e3353d5f423ad4271c3261caa543140530bddb
Certificate serial: 01856D4A95E87BD90585589E53C84FF53CB0
Authority key identifier: 56:E3:35:3D:5F:42:3A:D4:27:1C:32:61:CA:A5:43:14:05:30:BD:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VuM1PV9COtQnHDJhyqVDFAUwvds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/6109d6-0a8a-4bf6-a0e2-e52da3b86754/1/bYRLQKWOrRtD8CNjdTcunpUV2lw.roa
Signing time: Sun 01 Jan 2023 12:24:42 +0000
ROA not before: Sun 01 Jan 2023 12:24:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 40995
IP address blocks: 5.44.172.0/23 maxlen: 24
109.111.160.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:4a:95:e8:7b:d9:05:85:58:9e:53:c8:4f:f5:3c:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56e3353d5f423ad4271c3261caa543140530bddb
Validity
Not Before: Jan 1 12:24:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6d844b40a58ead1b43f0236375372e9e9515da5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2e:d5:3b:b9:6f:8e:7b:01:77:14:e9:18:59:
ad:15:43:00:c6:8b:a9:dc:d7:98:52:ad:34:21:9e:
3b:0d:13:87:7f:93:21:b6:69:74:6b:17:a5:4d:29:
a2:e6:d9:cc:c7:b2:6d:4d:02:5e:e4:5c:67:5a:14:
c8:82:b8:a9:14:2f:a1:d2:b4:72:93:3f:0b:47:88:
c3:c7:e0:bd:69:18:c8:67:13:f9:c3:9f:0c:87:6d:
e3:1e:eb:f7:4b:29:8f:ea:f0:34:52:81:55:3b:29:
86:d7:99:1c:50:53:ac:1d:8e:0a:d2:a7:5a:17:46:
e8:ea:71:75:8a:06:19:95:99:3f:0a:cd:c2:50:7b:
89:c1:ba:7d:12:11:9b:8d:b9:46:7e:14:8c:16:c8:
4d:b5:98:83:c8:7c:2d:7b:e5:0b:66:1b:ac:a8:71:
48:59:6e:f9:c4:f9:26:86:3c:dd:8c:a3:ec:7d:8a:
e5:c1:ca:76:77:4b:75:ae:4f:6c:2e:ab:91:f0:df:
20:73:ad:3c:bb:5f:7c:7a:50:24:65:0f:d9:93:9e:
26:20:0c:9b:0f:98:15:65:a1:86:9e:48:e8:a9:d1:
f8:6a:b6:11:1a:b2:ae:f6:ee:fb:d5:5c:7a:1f:65:
ed:8c:27:16:91:7c:7f:7d:0e:ba:98:98:83:2a:f2:
8f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:84:4B:40:A5:8E:AD:1B:43:F0:23:63:75:37:2E:9E:95:15:DA:5C
X509v3 Authority Key Identifier:
keyid:56:E3:35:3D:5F:42:3A:D4:27:1C:32:61:CA:A5:43:14:05:30:BD:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VuM1PV9COtQnHDJhyqVDFAUwvds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6109d6-0a8a-4bf6-a0e2-e52da3b86754/1/bYRLQKWOrRtD8CNjdTcunpUV2lw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6109d6-0a8a-4bf6-a0e2-e52da3b86754/1/VuM1PV9COtQnHDJhyqVDFAUwvds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.44.172.0/23
109.111.160.0/20
Signature Algorithm: sha256WithRSAEncryption
2d:51:c4:f0:b1:c0:f3:d3:cc:b7:4c:c3:64:9a:6d:c3:71:2e:
2b:1d:25:d9:6a:71:24:d5:2d:2c:06:e8:5f:b8:bf:07:3f:f0:
f8:65:47:da:d5:b0:c0:83:91:19:7c:5c:96:6d:92:fe:90:4a:
91:4e:b0:fe:9b:0c:62:d0:8c:d3:b9:d0:fc:fd:57:e1:4a:7d:
39:cb:66:b9:5e:f9:18:b4:11:1c:98:ec:2f:6b:57:b5:3b:7d:
bf:3b:4c:ec:5b:97:77:07:48:79:6d:3e:7a:4b:04:79:fa:06:
b3:8a:0a:50:10:15:93:23:dc:be:e0:07:90:50:56:a4:52:fb:
2e:d0:19:92:f5:9f:af:65:15:61:56:c1:54:d2:c7:a4:c5:71:
c3:7e:8b:ed:b6:13:87:f3:a9:68:d9:13:d9:40:34:9b:9e:0d:
34:1a:8a:54:0a:e7:32:4a:bf:8b:86:e5:52:93:00:b9:cd:c1:
eb:8d:b9:37:63:b7:5c:c6:c2:3c:ba:f2:dc:ee:33:a2:67:79:
1b:55:8c:70:ec:66:68:8c:10:57:31:ae:97:d6:0d:65:4a:f6:
b8:bf:7f:a6:a4:b9:c4:60:53:18:5e:92:04:80:b4:29:24:e1:
9c:2e:5b:10:93:1c:e8:5c:24:97:22:59:7f:6f:76:6f:41:5c:
58:6b:5a:72
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVtSpXoe9kFhVieU8hP9TywMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2ZTMzNTNkNWY0MjNhZDQyNzFjMzI2MWNhYTU0MzE0MDUz
MGJkZGIwHhcNMjMwMTAxMTIyNDQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZDg0NGI0MGE1OGVhZDFiNDNmMDIzNjM3NTM3MmU5ZTk1MTVkYTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnC7VO7lvjnsBdxTpGFmtFUMAxoup
3NeYUq00IZ47DROHf5Mhtml0axelTSmi5tnMx7JtTQJe5FxnWhTIgripFC+h0rRy
kz8LR4jDx+C9aRjIZxP5w58Mh23jHuv3SymP6vA0UoFVOymG15kcUFOsHY4K0qda
F0bo6nF1igYZlZk/Cs3CUHuJwbp9EhGbjblGfhSMFshNtZiDyHwte+ULZhusqHFI
WW75xPkmhjzdjKPsfYrlwcp2d0t1rk9sLquR8N8gc608u198elAkZQ/Zk54mIAyb
D5gVZaGGnkjoqdH4arYRGrKu9u771Vx6H2XtjCcWkXx/fQ66mJiDKvKP5wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFG2ES0Cljq0bQ/AjY3U3Lp6VFdpcMB8GA1UdIwQY
MBaAFFbjNT1fQjrUJxwyYcqlQxQFML3bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnVNMVBWOUNPdFFuSERKaHlxVkRGQVV3dmRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS82MTA5ZDYtMGE4YS00YmY2LWEwZTIt
ZTUyZGEzYjg2NzU0LzEvYllSTFFLV09yUnREOENOamRUY3VucFVWMmx3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS82MTA5ZDYtMGE4YS00YmY2LWEwZTItZTUyZGEzYjg2NzU0
LzEvVnVNMVBWOUNPdFFuSERKaHlxVkRGQVV3dmRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBBSysAwQE
bW+gMA0GCSqGSIb3DQEBCwUAA4IBAQAtUcTwscDz08y3TMNkmm3DcS4rHSXZanEk
1S0sBuhfuL8HP/D4ZUfa1bDAg5EZfFyWbZL+kEqRTrD+mwxi0IzTudD8/VfhSn05
y2a5XvkYtBEcmOwva1e1O32/O0zsW5d3B0h5bT56SwR5+gazigpQEBWTI9y+4AeQ
UFakUvsu0BmS9Z+vZRVhVsFU0sekxXHDfovtthOH86lo2RPZQDSbng00GopUCucy
Sr+LhuVSkwC5zcHrjbk3Y7dcxsI8uvLc7jOiZ3kbVYxw7GZojBBXMa6X1g1lSva4
v3+mpLnEYFMYXpIEgLQpJOGcLlsQkxzoXCSXIll/b3ZvQVxYa1py
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:28:30 2025 by rpki-client