Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/YkObs2FbtlYHA781sy6P1UwuRpQ.roa
File: YkObs2FbtlYHA781sy6P1UwuRpQ.roa (raw, json)
Hash identifier: T8L8KoZUfdKulGWkujLg1Tx0mSoWsJQtGp13zsbDJhA=
Subject key identifier: 62:43:9B:B3:61:5B:B6:56:07:03:BF:35:B3:2E:8F:D5:4C:2E:46:94
Certificate issuer: /CN=09253886a0250a04ec69be00bbf8433c2f014b7c
Certificate serial: 099E2C9D
Authority key identifier: 09:25:38:86:A0:25:0A:04:EC:69:BE:00:BB:F8:43:3C:2F:01:4B:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/YkObs2FbtlYHA781sy6P1UwuRpQ.roa
Signing time: Sat 01 Jan 2022 16:05:24 +0000
ROA not before: Sat 01 Jan 2022 16:05:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203576
IP address blocks: 194.110.169.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 161361053 (0x99e2c9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09253886a0250a04ec69be00bbf8433c2f014b7c
Validity
Not Before: Jan 1 16:05:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62439bb3615bb6560703bf35b32e8fd54c2e4694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3a:f8:4c:a9:32:92:78:d9:e0:52:eb:0e:57:
56:12:f8:22:f8:d4:0e:45:d4:23:0b:2d:1f:4a:71:
95:12:7b:82:47:db:05:54:cd:01:af:3c:d7:fb:71:
96:26:5f:26:77:96:17:fa:ae:1e:80:4d:80:44:52:
36:a9:7b:4f:f2:ac:ea:09:68:40:fa:74:bb:9a:ce:
28:53:da:f8:cc:b3:8b:f8:91:3b:cf:96:fb:3e:d8:
a8:e4:10:af:ea:6f:4a:27:3b:fb:81:87:fb:13:b1:
0b:9b:ee:8c:bf:93:c4:ab:45:69:6e:eb:8d:c3:1f:
66:78:5b:83:e5:a4:c7:81:0f:04:e0:a8:ff:fd:55:
56:48:31:bb:3d:10:b5:44:5f:df:5a:6e:30:df:df:
af:df:79:35:52:9a:b4:10:f8:fb:4a:44:8a:df:67:
c6:9a:bf:78:00:96:a5:eb:e9:86:01:1c:62:9a:71:
92:e0:ab:cc:48:ab:c2:cb:52:0e:8c:6a:25:b3:2a:
60:61:e7:cd:e0:07:a5:40:6a:58:26:7a:a2:c1:05:
fb:a8:f1:8a:2a:07:4b:88:4b:93:a6:fb:c4:36:53:
01:4e:f2:8d:ee:ab:69:08:c5:21:d5:95:1e:af:e6:
ff:c7:28:dc:c5:63:8f:c9:a6:eb:0f:48:c4:88:50:
56:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:43:9B:B3:61:5B:B6:56:07:03:BF:35:B3:2E:8F:D5:4C:2E:46:94
X509v3 Authority Key Identifier:
keyid:09:25:38:86:A0:25:0A:04:EC:69:BE:00:BB:F8:43:3C:2F:01:4B:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/YkObs2FbtlYHA781sy6P1UwuRpQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.110.169.0/24
Signature Algorithm: sha256WithRSAEncryption
62:8f:a3:62:81:5b:0c:a5:2f:d6:12:f6:8a:fd:7a:b9:e5:d6:
2e:b5:2c:1f:43:9c:81:59:2c:b8:bb:e9:cd:01:f3:0f:32:3b:
d7:65:83:58:75:17:76:6f:1a:98:f1:b6:35:ff:ed:af:15:b8:
6f:31:56:d6:47:4b:6f:b6:7e:30:b2:d6:75:a5:b3:27:b5:d6:
ea:92:1c:3b:16:2c:f5:cd:a6:01:c9:0b:d5:34:48:23:77:45:
96:81:54:c9:7c:31:a2:bd:fa:b9:5e:d5:14:5f:d6:90:e5:3f:
4b:a9:18:cc:b9:c4:70:06:b5:8f:10:bf:fd:a3:3f:b6:28:75:
c0:1a:5c:ea:b4:33:02:c3:52:2c:ac:0e:be:7c:6b:96:dc:ce:
6f:c9:16:90:e5:ca:03:da:a8:47:34:76:a5:09:48:4b:0d:fc:
90:f8:73:ad:ad:63:72:d1:7b:e1:84:3a:cf:f6:33:7e:91:ed:
6b:1f:50:fc:5d:72:5d:08:e2:72:fa:1f:bb:d3:83:e3:12:9c:
c8:63:4b:e2:1e:89:1c:60:04:73:e2:a1:cf:ee:d1:4d:05:69:
38:51:a3:85:11:d4:48:e0:2c:80:3f:2a:0a:fd:5c:09:a9:e8:
66:ea:63:00:e6:40:7e:c1:32:87:a1:9a:28:68:5a:c2:a9:77:
b6:9f:0f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:35:45 2025 by rpki-client