Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/yZKULXfv3SMEeaQxZhMlHFevfGs.roa
File: yZKULXfv3SMEeaQxZhMlHFevfGs.roa (raw, json)
Hash identifier: 9J6m3JX8txWsXSLtFLU3ZLRTN5KfgVWujDdvSG9ZQEs=
Subject key identifier: C9:92:94:2D:77:EF:DD:23:04:79:A4:31:66:13:25:1C:57:AF:7C:6B
Certificate issuer: /CN=f60846f21c56a8513d31c155dd199197a3ffc7c0
Certificate serial: 0D2B9B55
Authority key identifier: F6:08:46:F2:1C:56:A8:51:3D:31:C1:55:DD:19:91:97:A3:FF:C7:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/yZKULXfv3SMEeaQxZhMlHFevfGs.roa
Signing time: Sat 01 Jan 2022 09:58:20 +0000
ROA not before: Sat 01 Jan 2022 09:58:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30893
IP address blocks: 185.231.100.0/22 maxlen: 24
195.47.238.0/24 maxlen: 24
2a0c:5700:3133::/48 maxlen: 48
2a0c:5700:5353::/48 maxlen: 48
2a0c:5700::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 220961621 (0xd2b9b55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f60846f21c56a8513d31c155dd199197a3ffc7c0
Validity
Not Before: Jan 1 09:58:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c992942d77efdd230479a4316613251c57af7c6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:7d:43:7c:b1:2b:bd:2f:a8:60:8e:18:4d:45:
cb:0c:50:f2:ef:22:c7:8e:d7:36:c5:da:e5:7a:3b:
57:78:ce:15:76:a3:5d:68:ea:a6:44:88:ac:0d:c6:
73:cd:81:90:51:92:86:95:8b:c3:5e:50:51:d0:6d:
cd:b5:e8:95:fe:18:03:31:f9:d2:33:a6:92:22:4b:
4a:b3:05:c4:84:55:2e:ed:c4:92:e2:34:d3:16:59:
c8:a1:0e:98:d1:7f:4e:7f:53:27:62:ea:80:3e:5c:
d6:20:b1:57:b2:a8:bc:55:08:17:a7:79:02:af:b4:
25:d5:78:97:74:7d:6e:83:af:f5:da:44:34:50:a1:
a5:c5:7f:c1:3a:e7:5a:19:6b:04:28:57:43:43:63:
1a:45:5b:0f:f4:95:1d:9e:d5:91:63:16:b1:49:21:
a6:5a:28:65:6f:4c:5c:51:78:34:e9:6a:49:09:cd:
b4:ba:3d:2d:5d:f0:40:cd:60:70:e6:b1:5d:8d:4f:
e6:48:21:75:d0:42:39:88:5f:b0:fb:f1:da:4d:37:
94:d1:88:f1:66:06:0d:25:29:40:5b:14:58:c6:fc:
fb:f2:ca:3b:91:e5:23:42:7e:90:80:1b:5b:a9:09:
7b:bc:ed:81:65:32:b8:f2:a7:1d:a1:ff:29:c5:b2:
f9:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:92:94:2D:77:EF:DD:23:04:79:A4:31:66:13:25:1C:57:AF:7C:6B
X509v3 Authority Key Identifier:
keyid:F6:08:46:F2:1C:56:A8:51:3D:31:C1:55:DD:19:91:97:A3:FF:C7:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/yZKULXfv3SMEeaQxZhMlHFevfGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.231.100.0/22
195.47.238.0/24
IPv6:
2a0c:5700::/29
Signature Algorithm: sha256WithRSAEncryption
72:a8:94:d7:71:6a:29:ef:8c:3a:7f:80:25:5c:e0:d4:f7:c4:
4a:e9:95:4f:ce:95:98:b2:e5:bd:45:44:84:74:95:1d:66:1d:
e3:5e:25:41:09:5b:d8:76:94:42:b2:b9:79:ff:a3:79:03:7c:
97:89:4e:e0:d0:9b:fa:5a:3c:61:38:fc:4a:82:d6:05:19:69:
7e:74:de:cf:47:99:6a:11:04:6c:20:91:f8:1b:80:e1:1b:60:
3c:41:69:5b:d7:03:7d:a0:d2:32:0a:9b:74:2e:e0:e6:b3:97:
89:5d:1c:e7:ca:23:14:20:3e:ed:cf:cf:0e:38:d4:a3:ae:e3:
f9:7e:df:6a:e0:ac:be:d4:a9:78:2a:2e:94:4a:63:a9:a7:bf:
e5:af:af:46:bf:01:be:54:b0:00:f8:76:35:31:43:2f:f3:b7:
da:24:cc:f3:46:24:72:19:f5:c4:67:33:87:94:fa:ce:27:48:
9f:ce:d8:0e:ee:c6:86:91:4b:5a:02:37:10:30:42:d3:a9:39:
be:e7:12:7e:ee:db:12:17:1a:28:00:22:5f:52:e0:1d:ef:31:
01:e5:ff:9f:9e:4c:67:6e:60:e5:fb:fa:3c:64:15:ed:ce:f7:
b5:de:a7:af:ca:ca:52:b2:c3:3f:61:18:cb:93:2d:1b:5d:1c:
fc:cf:f8:d5
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIEDSubVTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
NjA4NDZmMjFjNTZhODUxM2QzMWMxNTVkZDE5OTE5N2EzZmZjN2MwMB4XDTIyMDEw
MTA5NTgyMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzk5Mjk0MmQ3N2Vm
ZGQyMzA0NzlhNDMxNjYxMzI1MWM1N2FmN2M2YjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAPB9Q3yxK70vqGCOGE1FywxQ8u8ix47XNsXa5Xo7V3jOFXaj
XWjqpkSIrA3Gc82BkFGShpWLw15QUdBtzbXolf4YAzH50jOmkiJLSrMFxIRVLu3E
kuI00xZZyKEOmNF/Tn9TJ2LqgD5c1iCxV7KovFUIF6d5Aq+0JdV4l3R9boOv9dpE
NFChpcV/wTrnWhlrBChXQ0NjGkVbD/SVHZ7VkWMWsUkhplooZW9MXFF4NOlqSQnN
tLo9LV3wQM1gcOaxXY1P5kghddBCOYhfsPvx2k03lNGI8WYGDSUpQFsUWMb8+/LK
O5HlI0J+kIAbW6kJe7ztgWUyuPKnHaH/KcWy+dMCAwEAAaOCAh4wggIaMB0GA1Ud
DgQWBBTJkpQtd+/dIwR5pDFmEyUcV698azAfBgNVHSMEGDAWgBT2CEbyHFaoUT0x
wVXdGZGXo//HwDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzlnaEc4aHhXcUZFOU1jRlYzUm1SbDZQX3g4QS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjMvYTBmNGJlLTRjMGQtNGRmNS05MGM2LWE2ZDQ1ZWY3ZDIyNy8x
L3laS1VMWGZ2M1NNRWVhUXhaaE1sSEZldmZHcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjMv
YTBmNGJlLTRjMGQtNGRmNS05MGM2LWE2ZDQ1ZWY3ZDIyNy8xLzlnaEc4aHhXcUZF
OU1jRlYzUm1SbDZQX3g4QS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0
BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEArnnZAMEAMMv7jANBAIAAjAHAwUD
KgxXADANBgkqhkiG9w0BAQsFAAOCAQEAcqiU13FqKe+MOn+AJVzg1PfESumVT86V
mLLlvUVEhHSVHWYd414lQQlb2HaUQrK5ef+jeQN8l4lO4NCb+lo8YTj8SoLWBRlp
fnTez0eZahEEbCCR+BuA4RtgPEFpW9cDfaDSMgqbdC7g5rOXiV0c58ojFCA+7c/P
DjjUo67j+X7fauCsvtSpeCoulEpjqae/5a+vRr8BvlSwAPh2NTFDL/O32iTM80Yk
chn1xGczh5T6zidIn87YDu7GhpFLWgI3EDBC06k5vucSfu7bEhcaKAAiX1LgHe8x
AeX/n55MZ25g5fv6PGQV7c73td6nr8rKUrLDP2EYy5MtG10c/M/41Q==
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:43:25 2025 by rpki-client