Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/YhFBvPG4g68QKGddYXCbVt3p5Go.roa
File: YhFBvPG4g68QKGddYXCbVt3p5Go.roa (raw, json)
Hash identifier: cZZkG0tCu/+Q/lsTwPJgF7BOHd6CmIs0XcbJ2V9huns=
Subject key identifier: 62:11:41:BC:F1:B8:83:AF:10:28:67:5D:61:70:9B:56:DD:E9:E4:6A
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 018466C11CD59F2EC2E5788A6BD6746ECC33
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/YhFBvPG4g68QKGddYXCbVt3p5Go.roa
Signing time: Fri 11 Nov 2022 12:54:02 +0000
ROA not before: Fri 11 Nov 2022 12:54:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 109.203.164.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:66:c1:1c:d5:9f:2e:c2:e5:78:8a:6b:d6:74:6e:cc:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Nov 11 12:54:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=621141bcf1b883af1028675d61709b56dde9e46a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:45:e1:e6:a7:38:87:d5:74:a3:b9:cd:ee:1a:
bc:5c:72:7e:b5:7c:78:18:9f:46:9b:db:8d:52:96:
41:50:e6:6d:c1:19:a4:a0:29:df:ca:96:90:f8:ff:
31:c9:cc:62:bd:b9:88:a0:b8:f9:88:23:03:30:14:
2c:4d:7d:a1:9f:17:84:5a:f3:0d:b7:46:a0:31:21:
13:d7:ed:1e:18:69:9f:ea:f7:0a:5d:0f:eb:77:e0:
61:4a:12:c7:a0:53:d1:0d:97:cd:71:2c:4e:15:cb:
09:c2:07:81:e3:79:35:4e:9a:29:ba:56:23:52:03:
11:8d:4f:61:33:63:f8:2e:8a:51:a5:11:16:ef:9d:
fd:64:c3:ac:41:26:09:59:ee:d5:b9:07:b9:09:51:
d9:78:ff:c6:ae:f7:98:8a:a2:6b:bc:35:15:ec:87:
64:2d:a0:59:6e:70:ae:c9:22:01:fb:40:80:1e:28:
0d:6c:58:d1:7f:8b:dc:c2:12:21:f3:c4:ab:72:1f:
63:6b:67:3c:20:cc:4a:16:20:49:3c:e2:7e:c2:79:
50:c3:cb:64:7e:58:c9:ac:56:09:84:33:80:e3:24:
48:dd:c9:06:b8:28:9a:76:c0:d2:1e:10:63:fd:f8:
51:f9:42:8f:7c:2d:e2:f5:1e:65:9f:fd:d2:2e:58:
5a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:11:41:BC:F1:B8:83:AF:10:28:67:5D:61:70:9B:56:DD:E9:E4:6A
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/YhFBvPG4g68QKGddYXCbVt3p5Go.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.203.164.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:d3:d8:b3:3e:79:ab:16:65:3e:72:f4:d4:22:98:78:1a:fc:
a5:e1:b0:85:25:69:5c:e4:53:6b:33:8a:4d:d1:80:d5:49:65:
28:11:fd:59:5f:16:9f:27:1b:2f:54:a8:10:c6:4d:80:f1:23:
17:1e:6e:7a:dc:6b:6b:5a:c4:3e:b4:92:d5:60:18:27:cd:ce:
ed:94:a7:67:b7:79:ac:8a:4a:1d:3e:58:ca:8f:cb:54:94:97:
ea:a5:f3:61:a9:8e:56:60:1d:34:f9:ee:b6:59:5d:9a:04:29:
a4:13:d5:20:01:73:28:7c:08:5f:86:4c:cb:74:9f:a6:ed:b5:
82:c4:b6:a3:f2:05:17:d1:42:dc:5b:97:3f:7f:8e:c9:02:bd:
f0:e0:bd:56:6c:73:ce:f2:88:db:f3:9c:3a:75:bf:54:63:e5:
bb:8f:a8:2c:37:43:04:18:26:f5:8a:73:38:fe:59:65:dc:bd:
97:17:93:13:34:07:75:1a:10:38:4c:55:b1:be:0c:01:d0:a8:
49:9d:db:4e:79:74:00:3f:88:b3:e9:24:41:28:42:6f:c7:69:
97:25:9e:ce:68:d2:49:4a:72:3a:35:91:48:b6:2f:5d:92:42:
a5:2b:b1:51:60:1f:7e:19:be:b0:f8:85:b9:8b:9a:e3:88:12:
c4:89:ac:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:02:48 2025 by rpki-client