Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/YCfeFyJrMvOlw9fcxhKiL538XnA.roa
File: YCfeFyJrMvOlw9fcxhKiL538XnA.roa (raw, json)
Hash identifier: NqXdJN1dVr3dgzobNUAztiprtXTQW5KTskAkHJWBdLk=
Subject key identifier: 60:27:DE:17:22:6B:32:F3:A5:C3:D7:DC:C6:12:A2:2F:9D:FC:5E:70
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 01842259A5B8120B69C46E5F09002AEA4117
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/YCfeFyJrMvOlw9fcxhKiL538XnA.roa
Signing time: Sat 29 Oct 2022 06:06:51 +0000
ROA not before: Sat 29 Oct 2022 06:06:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208485
IP address blocks: 109.203.164.0/22 maxlen: 24
37.49.148.0/22 maxlen: 24
176.46.128.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:22:59:a5:b8:12:0b:69:c4:6e:5f:09:00:2a:ea:41:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Oct 29 06:06:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6027de17226b32f3a5c3d7dcc612a22f9dfc5e70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:94:f8:9b:b0:69:bd:1c:9f:b9:91:9c:66:0f:
8e:6e:cd:27:ba:9e:2d:49:26:83:85:54:38:bb:31:
6e:79:f2:85:93:27:49:79:a7:e4:c5:84:25:db:91:
d1:5d:86:97:a4:19:71:34:c0:d9:80:ce:7b:45:0e:
0f:96:34:04:b6:88:1b:76:72:a8:04:1f:55:2d:35:
b0:c6:fb:6b:bd:bf:6f:9b:fe:cc:a3:14:2c:ad:19:
80:44:f5:7d:f2:30:67:b6:fb:bf:92:97:e7:f8:bc:
4e:db:69:c0:a7:1e:e2:e2:51:cd:b7:2c:b1:91:ad:
88:68:1e:a4:2b:5c:80:26:4e:c0:60:f3:1e:c1:10:
af:46:39:a8:35:34:b0:a6:ef:a2:24:83:e9:bf:a5:
af:db:1b:7a:ad:b1:d6:36:ab:9a:24:85:7c:e1:16:
97:34:69:64:21:41:38:99:61:08:54:99:cc:c7:c3:
c5:26:e3:bf:68:71:33:58:ff:83:ca:fd:74:fc:f2:
96:1b:ff:54:8b:01:84:64:b6:72:49:b9:b7:4e:18:
55:56:e7:74:56:f7:09:32:46:b5:6e:e1:0e:92:7a:
d3:9d:5a:41:6d:8b:3a:a5:18:db:b2:6c:75:df:08:
1f:1e:fd:d9:74:ed:25:73:01:0b:fb:04:0e:ea:78:
d0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:27:DE:17:22:6B:32:F3:A5:C3:D7:DC:C6:12:A2:2F:9D:FC:5E:70
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/YCfeFyJrMvOlw9fcxhKiL538XnA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.49.148.0/22
109.203.164.0/22
176.46.128.0/19
Signature Algorithm: sha256WithRSAEncryption
2c:4f:7b:e8:97:de:40:4c:3c:cc:94:c6:68:03:44:da:75:1a:
d9:29:c9:10:39:96:a3:24:4a:9e:44:37:88:0a:c6:53:ee:d6:
d1:ea:a0:1e:e5:e9:a2:f1:8d:f0:f8:d3:7a:55:12:72:7a:f9:
74:60:d4:ae:93:65:c1:7a:d1:c2:d9:33:bb:6e:9f:f2:ea:64:
23:1c:e2:96:22:b9:f1:5a:02:31:23:f0:94:21:9e:a4:9c:46:
fb:39:70:bc:e8:db:ee:df:8e:d7:5a:a1:b8:9d:0a:a4:09:dc:
94:81:cc:76:c7:09:4e:3f:27:ee:0a:b9:d7:17:b9:ae:28:a8:
13:d2:5e:b0:fc:44:a5:a1:d4:39:b2:8e:6f:56:f4:eb:05:bb:
bc:41:85:49:c8:46:b1:48:0d:ce:b8:75:36:31:36:70:eb:77:
21:7f:e6:a5:16:cd:bf:94:f5:d4:88:15:9f:d9:d3:63:1f:18:
b8:32:de:23:80:78:5b:18:db:74:9a:95:04:6d:0a:7f:f5:e1:
08:69:0d:28:3a:ac:ae:48:2a:fd:e1:cf:81:2d:ea:12:be:51:
7f:7b:91:a5:df:81:c8:97:13:f5:9c:c3:4d:df:e5:f2:fb:8e:
33:06:52:b2:57:7e:b7:1b:f9:91:2b:71:11:52:47:2c:f6:53:
2e:b8:55:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:05:56 2025 by rpki-client