Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/a721a0-edba-476d-8be3-141422940385/1/yJKlulzWY1ONEslEhn0qRqij0Vw.roa
File: yJKlulzWY1ONEslEhn0qRqij0Vw.roa (raw, json)
Hash identifier: l/MHCqZwrfyrLsaJrIHW2hgopXlPazvB7U6bc6UGhRI=
Subject key identifier: C8:92:A5:BA:5C:D6:63:53:8D:12:C9:44:86:7D:2A:46:A8:A3:D1:5C
Certificate issuer: /CN=3b363e09bd6942adab42415999f979990ab96682
Certificate serial: 01826DA71731041E414B3AB0249B8105BC1E
Authority key identifier: 3B:36:3E:09:BD:69:42:AD:AB:42:41:59:99:F9:79:99:0A:B9:66:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OzY-Cb1pQq2rQkFZmfl5mQq5ZoI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/a721a0-edba-476d-8be3-141422940385/1/yJKlulzWY1ONEslEhn0qRqij0Vw.roa
Signing time: Fri 05 Aug 2022 10:57:23 +0000
ROA not before: Fri 05 Aug 2022 10:57:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211140
IP address blocks: 149.255.184.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:6d:a7:17:31:04:1e:41:4b:3a:b0:24:9b:81:05:bc:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b363e09bd6942adab42415999f979990ab96682
Validity
Not Before: Aug 5 10:57:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c892a5ba5cd663538d12c944867d2a46a8a3d15c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:1d:8e:99:89:e5:68:05:8c:a2:49:9a:d5:ed:
10:eb:92:6f:5a:bb:c3:a4:f2:04:43:ca:f5:3d:a0:
74:19:c1:e8:e3:f8:0e:5b:1e:7f:3f:2e:ae:64:60:
2a:23:67:45:c6:73:1c:15:62:88:e8:e9:5b:61:c5:
53:9f:b3:87:de:0a:26:77:b6:f6:fe:72:10:e3:fa:
44:43:3c:e1:66:c3:33:57:54:d0:7b:cb:8a:9a:c0:
fb:6e:8c:b9:cb:3f:85:23:e0:4b:5a:f8:35:6c:f0:
fe:3b:3e:f0:05:01:55:ce:f1:bb:be:40:5e:81:db:
53:db:2b:40:5d:7a:89:44:fd:45:aa:c8:03:e5:7e:
d2:c4:fd:31:ef:43:aa:ec:66:5a:8c:ca:66:9a:3e:
bf:b8:a1:1e:59:8f:e6:98:fd:8f:b0:b6:09:3c:af:
58:c5:12:cb:1b:da:ca:ef:e4:a5:2d:ea:3e:f9:27:
ab:4e:38:de:62:65:a1:1f:75:0d:a2:bc:f0:a6:ba:
fb:24:b6:c1:23:d9:8c:f7:35:c9:93:7d:3e:c7:bc:
ee:aa:75:f8:80:61:9a:f4:4e:01:66:4d:b9:a2:ee:
fd:07:66:cf:50:10:44:16:fb:58:59:7d:b0:2b:c4:
e2:bc:08:07:31:68:ad:88:d0:07:6b:a3:6c:6a:4c:
22:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:92:A5:BA:5C:D6:63:53:8D:12:C9:44:86:7D:2A:46:A8:A3:D1:5C
X509v3 Authority Key Identifier:
keyid:3B:36:3E:09:BD:69:42:AD:AB:42:41:59:99:F9:79:99:0A:B9:66:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzY-Cb1pQq2rQkFZmfl5mQq5ZoI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a721a0-edba-476d-8be3-141422940385/1/yJKlulzWY1ONEslEhn0qRqij0Vw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a721a0-edba-476d-8be3-141422940385/1/OzY-Cb1pQq2rQkFZmfl5mQq5ZoI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.255.184.0/21
Signature Algorithm: sha256WithRSAEncryption
0e:a5:59:4f:ab:ba:c3:e4:bc:a6:a1:6b:27:d3:78:b8:5b:b0:
a3:d5:fd:1e:c9:e8:a6:e8:73:d6:ed:c9:cc:d9:06:6c:fb:00:
96:a5:3e:29:6c:b5:27:ca:63:c4:ae:f3:7e:91:1a:99:ee:4b:
16:07:05:c6:07:10:1e:59:b1:cb:21:47:e6:47:85:65:bf:bb:
20:e4:df:06:ac:be:94:70:69:82:de:e9:95:c1:a4:cb:b8:f9:
9f:21:08:67:5e:19:02:c0:8f:4e:c1:0c:25:d4:69:81:3b:8f:
47:7d:7e:9e:61:2a:97:64:27:3a:e1:ee:bf:1a:8a:63:ea:f8:
9d:0f:77:cf:ac:c8:b5:2c:a2:a5:2d:d8:44:22:e7:10:2a:fb:
00:55:e2:8c:42:34:0e:d7:76:92:60:31:c9:f7:7c:3a:8f:13:
9a:5c:c2:af:d4:ec:02:f0:a5:a6:18:05:20:4e:b3:52:0d:9a:
ac:84:cd:79:66:8e:c3:95:b6:a8:6d:a8:cb:1d:0a:ba:d7:41:
50:f1:7d:b3:4d:38:45:d7:7c:62:54:92:17:61:8e:b4:9b:3e:
eb:03:fd:79:ad:b1:8c:70:f0:82:b1:c8:6c:5a:83:8a:68:6c:
bc:d6:5b:da:5f:6e:0f:15:48:6e:2f:85:47:52:69:26:ad:11:
c2:a9:be:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:47:37 2025 by rpki-client