Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/YXZsuwzbQg036zBzRJlewcdelY0.roa
File: YXZsuwzbQg036zBzRJlewcdelY0.roa (raw, json)
Hash identifier: 6s96164NcTenqmuuB46VvGGxM31XlueCd8+K69zFkVo=
Subject key identifier: 61:76:6C:BB:0C:DB:42:0D:37:EB:30:73:44:99:5E:C1:C7:5E:95:8D
Certificate issuer: /CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Certificate serial: 04358508
Authority key identifier: 04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/YXZsuwzbQg036zBzRJlewcdelY0.roa
Signing time: Thu 27 Jan 2022 07:14:37 +0000
ROA not before: Thu 27 Jan 2022 07:14:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207967
IP address blocks: 212.113.116.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70616328 (0x4358508)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Validity
Not Before: Jan 27 07:14:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=61766cbb0cdb420d37eb307344995ec1c75e958d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:2f:88:32:20:8b:ff:35:89:bf:01:03:ef:96:
fe:b1:33:64:17:dd:95:d2:16:62:e3:3f:fc:75:62:
ff:88:74:56:b9:d8:0b:69:f7:16:c7:de:7a:df:cd:
4b:d3:33:37:c3:b7:7d:b3:04:67:9e:ae:1e:79:48:
6f:81:cc:01:46:67:2a:01:c4:f3:4c:07:ac:8e:3a:
d3:57:7a:3d:6c:92:fb:18:2a:f0:1e:2f:6c:52:5f:
88:ab:ed:20:b9:a6:a4:d0:65:dc:bb:09:16:55:18:
04:3c:0f:44:28:c8:a4:8e:72:5b:67:c2:f2:13:3e:
2d:35:53:66:05:21:7a:b6:04:c8:d2:fb:cc:df:82:
9f:b8:ac:b1:ed:f0:35:96:1d:c6:39:81:3d:3d:fa:
b2:bf:d5:d2:eb:12:64:b9:b8:a5:4c:10:81:0d:25:
88:f2:f5:61:42:93:58:03:b8:c2:43:1e:70:38:ca:
aa:d4:fb:3f:ae:61:ae:55:79:56:31:b4:15:16:e2:
ad:4d:0e:3e:ee:8c:09:8c:5c:c6:07:40:9c:cd:fd:
40:af:fb:13:83:de:ec:a9:1a:9b:a3:9d:66:8b:8c:
67:2f:c2:41:ee:bd:ce:28:e7:9f:f4:ef:8f:e2:c3:
0e:92:b0:69:92:d2:2d:f9:41:18:1e:2b:a8:f3:e5:
b3:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:76:6C:BB:0C:DB:42:0D:37:EB:30:73:44:99:5E:C1:C7:5E:95:8D
X509v3 Authority Key Identifier:
keyid:04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/YXZsuwzbQg036zBzRJlewcdelY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.113.116.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:b8:23:e4:6d:f8:7f:a6:37:30:fe:c1:38:fa:c4:cc:17:d0:
9a:47:68:6f:52:51:81:b5:10:08:34:c4:32:8b:af:c2:26:64:
b5:b6:45:b2:97:7f:4b:3f:7f:f2:2a:06:56:6d:5c:80:5c:38:
35:ed:7e:58:fc:9c:97:4b:74:b8:f3:b0:f7:48:de:08:d5:17:
1a:71:43:b3:57:e0:bb:76:63:7e:e7:e9:ea:87:b6:0f:fd:a5:
ab:6b:09:c7:c6:f6:ef:48:8b:6e:9b:9f:56:0a:dc:f3:29:bf:
e0:58:ac:72:31:cf:03:41:0e:10:82:4a:32:4b:c2:62:1b:44:
26:ad:b1:d6:92:26:d7:2b:8b:df:c2:da:0b:68:97:69:c4:4c:
de:da:f7:13:d3:18:52:61:dd:ec:db:ef:43:0e:6e:2f:d5:63:
ba:52:47:5e:4d:7b:c5:54:15:40:09:34:cf:25:96:e3:04:f0:
d6:3c:28:9f:be:16:72:1d:5c:cb:d7:17:89:07:04:38:3f:7d:
6e:01:3b:d9:a2:9a:62:0f:29:2d:09:16:7e:02:37:c4:3c:e3:
e4:a3:64:dc:b5:e6:30:1f:5c:62:e5:fc:9b:41:f5:1c:c9:02:
95:d0:58:43:2c:12:85:21:95:c1:f5:4e:0c:88:a5:0c:9f:d7:
8e:85:af:6b
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBDWFCDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
NGNiZTViNDYyM2RhYjQyZjE1YTkwNTAwMmRiN2NlNjJlODU0ZjI5MB4XDTIyMDEy
NzA3MTQzN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjE3NjZjYmIwY2Ri
NDIwZDM3ZWIzMDczNDQ5OTVlYzFjNzVlOTU4ZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANwviDIgi/81ib8BA++W/rEzZBfdldIWYuM//HVi/4h0VrnY
C2n3Fsfeet/NS9MzN8O3fbMEZ56uHnlIb4HMAUZnKgHE80wHrI4601d6PWyS+xgq
8B4vbFJfiKvtILmmpNBl3LsJFlUYBDwPRCjIpI5yW2fC8hM+LTVTZgUherYEyNL7
zN+Cn7isse3wNZYdxjmBPT36sr/V0usSZLm4pUwQgQ0liPL1YUKTWAO4wkMecDjK
qtT7P65hrlV5VjG0FRbirU0OPu6MCYxcxgdAnM39QK/7E4Pe7Kkam6OdZouMZy/C
Qe69zijnn/Tvj+LDDpKwaZLSLflBGB4rqPPls2MCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRhdmy7DNtCDTfrMHNEmV7Bx16VjTAfBgNVHSMEGDAWgBQEy+W0Yj2rQvFa
kFAC23zmLoVPKTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0JNdmx0R0k5cTBMeFdwQlFBdHQ4NWk2RlR5ay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzEvM2QzYTJkLWEwMzktNDZmNC04Njg3LTA1NzgxN2JhOWZiNy8x
L1lYWnN1d3piUWcwMzZ6QnpSSmxld2NkZWxZMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzEv
M2QzYTJkLWEwMzktNDZmNC04Njg3LTA1NzgxN2JhOWZiNy8xL0JNdmx0R0k5cTBM
eFdwQlFBdHQ4NWk2RlR5ay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAtRxdDANBgkqhkiG9w0BAQsFAAOC
AQEAfbgj5G34f6Y3MP7BOPrEzBfQmkdob1JRgbUQCDTEMouvwiZktbZFspd/Sz9/
8ioGVm1cgFw4Ne1+WPycl0t0uPOw90jeCNUXGnFDs1fgu3Zjfufp6oe2D/2lq2sJ
x8b270iLbpufVgrc8ym/4FiscjHPA0EOEIJKMkvCYhtEJq2x1pIm1yuL38LaC2iX
acRM3tr3E9MYUmHd7NvvQw5uL9VjulJHXk17xVQVQAk0zyWW4wTw1jwon74Wch1c
y9cXiQcEOD99bgE72aKaYg8pLQkWfgI3xDzj5KNk3LXmMB9cYuX8m0H1HMkCldBY
QywShSGVwfVODIilDJ/XjoWvaw==
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:44:50 2025 by rpki-client