Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/YgVP9PY1um_yuS9X9_Y0jl2ZUmc.roa
File: YgVP9PY1um_yuS9X9_Y0jl2ZUmc.roa (raw, json)
Hash identifier: JkKalepugTR9u8aR/XVyryTv9qG6eCQTDFRg4p/kyIw=
Subject key identifier: 62:05:4F:F4:F6:35:BA:6F:F2:B9:2F:57:F7:F6:34:8E:5D:99:52:67
Certificate issuer: /CN=cc5911433ba206f450ac9bd065c86c96608401c1
Certificate serial: 072CA8FB
Authority key identifier: CC:59:11:43:3B:A2:06:F4:50:AC:9B:D0:65:C8:6C:96:60:84:01:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zFkRQzuiBvRQrJvQZchslmCEAcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/YgVP9PY1um_yuS9X9_Y0jl2ZUmc.roa
Signing time: Sat 01 Jan 2022 10:55:20 +0000
ROA not before: Sat 01 Jan 2022 10:55:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13002
IP address blocks: 213.159.96.0/19 maxlen: 19
213.159.113.0/24 maxlen: 24
213.159.118.0/24 maxlen: 24
213.159.124.0/24 maxlen: 24
213.159.125.0/24 maxlen: 24
213.159.122.0/24 maxlen: 24
213.159.119.0/24 maxlen: 24
213.159.127.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120367355 (0x72ca8fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc5911433ba206f450ac9bd065c86c96608401c1
Validity
Not Before: Jan 1 10:55:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62054ff4f635ba6ff2b92f57f7f6348e5d995267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:de:55:64:3a:8d:74:91:b8:ad:74:1a:c9:29:
13:ae:28:69:d4:e4:7b:cd:f6:74:c2:50:e1:75:e6:
85:8f:25:8a:c9:4f:3a:f5:1b:ef:98:5b:e4:0d:16:
d3:f8:38:34:37:66:f7:3d:8a:4a:19:49:d1:3d:94:
92:a1:dc:db:46:b5:7a:ef:c4:f6:a3:e3:9a:4e:59:
48:11:59:72:fc:7a:b7:34:c0:3c:7e:dc:bd:1d:af:
cf:f3:aa:39:a7:60:31:9f:bd:a0:6d:cd:38:82:7f:
92:2f:66:40:65:09:69:46:52:8e:3f:c0:1d:b7:37:
31:cc:0b:d2:4c:25:a7:6a:15:04:5b:2a:ea:4e:79:
e6:8d:98:91:7f:a8:c7:72:d3:fc:67:47:b1:d8:26:
7b:f6:a5:1d:d0:95:c3:e6:d6:38:3b:c7:9b:3c:5f:
c6:75:8f:2b:c0:57:b7:df:a8:c2:d9:07:6b:e6:41:
48:ab:65:9f:fa:3a:30:63:48:65:02:49:ff:00:16:
de:09:0d:66:a1:1e:ef:09:e4:e2:0e:a2:ff:aa:ff:
0c:ff:14:3d:da:1b:50:53:19:32:a4:0f:66:eb:55:
bc:31:b3:97:dd:f6:15:92:5a:35:49:20:13:8d:f5:
68:c0:83:64:14:f7:78:1e:bd:04:75:e6:60:37:cc:
3e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:05:4F:F4:F6:35:BA:6F:F2:B9:2F:57:F7:F6:34:8E:5D:99:52:67
X509v3 Authority Key Identifier:
keyid:CC:59:11:43:3B:A2:06:F4:50:AC:9B:D0:65:C8:6C:96:60:84:01:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zFkRQzuiBvRQrJvQZchslmCEAcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/YgVP9PY1um_yuS9X9_Y0jl2ZUmc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/zFkRQzuiBvRQrJvQZchslmCEAcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.159.96.0/19
Signature Algorithm: sha256WithRSAEncryption
86:db:0c:eb:43:ca:68:c9:20:b8:c5:33:31:24:5c:f0:85:e7:
2b:b2:01:b7:59:d0:04:69:f9:6a:61:be:1c:4a:81:50:03:62:
db:c6:c2:00:7a:b3:0c:dc:a1:13:58:81:b3:4b:f3:3f:b5:0a:
0c:fa:52:67:1c:4b:c9:75:80:08:3c:5e:95:43:c0:bc:ec:12:
d8:00:e5:b6:46:06:63:c1:0a:80:27:ed:36:c9:a8:3f:57:4b:
27:75:d4:99:be:e7:b5:2d:b8:a6:d4:0f:fd:7e:78:7c:e5:1f:
7b:97:96:9b:88:72:cb:01:b3:dd:e3:08:50:a1:e9:6f:bc:a2:
76:8d:93:32:c1:a8:ec:e4:98:eb:6a:c6:43:a7:41:32:ae:cf:
fd:6b:4a:9f:0c:00:7a:93:f5:0b:06:24:1c:4a:0c:a8:ba:93:
c7:51:42:d3:35:ad:6f:2a:b6:f2:06:e8:0b:00:ee:3b:1f:a2:
33:85:db:10:ae:5c:5c:6e:26:fd:6d:81:32:79:2e:bf:e3:b9:
06:88:29:2a:8a:99:87:80:49:c9:58:07:8e:03:a5:2c:98:bb:
44:b5:e7:f8:4e:c4:7c:ee:07:2d:fe:1d:98:8a:43:65:0a:49:
5e:5d:35:7c:64:88:ea:c3:3c:73:6a:4f:43:fa:9a:81:38:0d:
fb:4d:2a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 11 05:06:14 2025 by rpki-client