Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/yfUs0V2zbcOe7wYAzN_060FoF8c.roa
File: yfUs0V2zbcOe7wYAzN_060FoF8c.roa (raw, json)
Hash identifier: c62C5bEaKCGl2DdErpI2q9cM8nAM4f4mtQVKoxVNbWw=
Subject key identifier: C9:F5:2C:D1:5D:B3:6D:C3:9E:EF:06:00:CC:DF:F4:EB:41:68:17:C7
Certificate issuer: /CN=ba9d30e6035be8b8386061f271481c707e04ce2b
Certificate serial: 0185735624574D830473FE8DED224921A052
Authority key identifier: BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/yfUs0V2zbcOe7wYAzN_060FoF8c.roa
Signing time: Mon 02 Jan 2023 16:35:03 +0000
ROA not before: Mon 02 Jan 2023 16:35:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50889
IP address blocks: 85.29.14.0/24 maxlen: 24
85.29.18.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:56:24:57:4d:83:04:73:fe:8d:ed:22:49:21:a0:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba9d30e6035be8b8386061f271481c707e04ce2b
Validity
Not Before: Jan 2 16:35:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c9f52cd15db36dc39eef0600ccdff4eb416817c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:3b:87:0d:fb:27:7e:29:c1:92:f1:d5:1b:e0:
3c:67:a5:aa:95:ff:d2:e7:b2:e2:58:a8:5e:e0:8b:
3a:c1:68:6f:c1:18:5e:0c:c8:01:6b:77:07:bb:53:
20:22:e0:97:09:16:e8:9a:04:c6:ac:db:59:4c:b1:
99:ea:9f:f2:9a:f9:ef:a7:4c:93:c4:ab:77:32:b6:
b1:ad:5f:66:8f:53:48:da:5d:03:cb:8f:5b:20:78:
0d:55:64:0b:0f:a5:bf:22:64:a9:fd:3e:64:75:83:
55:f6:98:ec:b9:b3:e8:1e:ca:c0:41:0e:0f:1f:91:
09:f8:9c:aa:f6:4f:32:e1:62:9a:76:1a:fb:83:17:
78:5c:e9:96:37:6d:20:62:df:3d:32:0f:05:4f:95:
d4:c8:03:26:9e:58:2b:56:f6:f9:df:e9:a6:86:cc:
fb:5f:60:da:fd:d7:70:56:be:a6:b4:2a:7b:c0:6c:
6c:7d:f3:c2:8b:5e:77:ff:a0:ed:98:c4:db:20:83:
91:38:33:82:9f:5f:b5:37:98:da:37:6f:ef:6a:99:
ee:8a:4c:a6:1f:57:cd:12:ba:a9:fd:b0:0b:8d:1f:
db:1c:66:e2:1b:01:93:a9:83:92:b7:7b:e2:80:d4:
09:2f:69:30:59:6b:3b:c7:c3:e3:e9:e6:89:8f:66:
82:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:F5:2C:D1:5D:B3:6D:C3:9E:EF:06:00:CC:DF:F4:EB:41:68:17:C7
X509v3 Authority Key Identifier:
keyid:BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/yfUs0V2zbcOe7wYAzN_060FoF8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.29.14.0/24
85.29.18.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:66:d9:3d:50:69:4e:9a:96:ae:48:69:06:d1:10:6d:91:d2:
60:98:92:3e:44:15:2a:c2:df:dd:e1:80:34:67:46:21:c7:86:
49:1d:fe:5a:a9:72:54:64:f8:24:aa:dd:42:5d:4a:8d:f9:b4:
08:f0:b9:6a:e4:6a:4e:e4:3f:6d:3b:25:16:b9:71:c1:71:c0:
4d:63:db:9d:ee:12:57:02:7f:a9:62:d3:97:df:d1:3a:bf:b2:
51:00:cb:6e:4d:4d:ba:a5:bf:bb:0a:5c:2c:76:32:d1:23:63:
7a:14:66:16:d5:89:8a:1c:2c:76:a0:ca:19:e7:57:22:0e:27:
1a:79:85:cb:1b:e6:2d:3b:e2:ca:d3:60:9f:a6:3b:8f:a3:6c:
12:45:42:46:46:4b:d7:12:bb:81:f2:a3:52:09:1a:e4:b5:2b:
9d:69:59:0f:32:95:4a:db:b7:52:50:b7:cc:47:f0:c4:d6:e4:
46:77:6c:a8:95:3d:bb:f3:df:56:d9:32:90:70:b6:66:c0:d5:
59:ee:7d:5b:2a:5c:7d:e7:6a:de:61:97:7d:57:cf:2d:46:80:
d2:63:bf:e6:22:ad:e4:da:35:ab:ba:a5:36:94:1e:8e:28:78:
cb:69:5c:6c:e3:dc:5b:77:8a:d7:af:28:db:1a:5d:01:7a:c2:
e8:5a:3a:de
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVzViRXTYMEc/6N7SJJIaBSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhOWQzMGU2MDM1YmU4YjgzODYwNjFmMjcxNDgxYzcwN2Uw
NGNlMmIwHhcNMjMwMTAyMTYzNTAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOWY1MmNkMTVkYjM2ZGMzOWVlZjA2MDBjY2RmZjRlYjQxNjgxN2M3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDuHDfsnfinBkvHVG+A8Z6Wqlf/S
57LiWKhe4Is6wWhvwRheDMgBa3cHu1MgIuCXCRbomgTGrNtZTLGZ6p/ymvnvp0yT
xKt3MraxrV9mj1NI2l0Dy49bIHgNVWQLD6W/ImSp/T5kdYNV9pjsubPoHsrAQQ4P
H5EJ+Jyq9k8y4WKadhr7gxd4XOmWN20gYt89Mg8FT5XUyAMmnlgrVvb53+mmhsz7
X2Da/ddwVr6mtCp7wGxsffPCi153/6DtmMTbIIORODOCn1+1N5jaN2/vapnuikym
H1fNErqp/bALjR/bHGbiGwGTqYOSt3vigNQJL2kwWWs7x8Pj6eaJj2aC0QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMn1LNFds23Dnu8GAMzf9OtBaBfHMB8GA1UdIwQY
MBaAFLqdMOYDW+i4OGBh8nFIHHB+BM4rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hYzljMzItN2RiYy00ZDZjLWJjMDgt
NWQ1ODRmYmM1ZDI3LzEveWZVczBWMnpiY09lN3dZQXpOXzA2MEZvRjhjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9hYzljMzItN2RiYy00ZDZjLWJjMDgtNWQ1ODRmYmM1ZDI3
LzEvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVR0OAwQA
VR0SMA0GCSqGSIb3DQEBCwUAA4IBAQAeZtk9UGlOmpauSGkG0RBtkdJgmJI+RBUq
wt/d4YA0Z0Yhx4ZJHf5aqXJUZPgkqt1CXUqN+bQI8Llq5GpO5D9tOyUWuXHBccBN
Y9ud7hJXAn+pYtOX39E6v7JRAMtuTU26pb+7ClwsdjLRI2N6FGYW1YmKHCx2oMoZ
51ciDicaeYXLG+YtO+LK02CfpjuPo2wSRUJGRkvXEruB8qNSCRrktSudaVkPMpVK
27dSULfMR/DE1uRGd2yolT27899W2TKQcLZmwNVZ7n1bKlx952reYZd9V88tRoDS
Y7/mIq3k2jWruqU2lB6OKHjLaVxs49xbd4rXryjbGl0BesLoWjre
-----END CERTIFICATE-----
Generated at Thu Apr 17 18:38:36 2025 by rpki-client