Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/4f3e11-fd0f-4e71-9369-2204ee217280/1/Yb2_ODopocZyShLL0biMOg8CqbY.roa
File: Yb2_ODopocZyShLL0biMOg8CqbY.roa (raw, json)
Hash identifier: 9Lko9aKGeh0sJx5Xmw4+eExAmNQUB2Q0PduqoGT5Njk=
Subject key identifier: 61:BD:BF:38:3A:29:A1:C6:72:4A:12:CB:D1:B8:8C:3A:0F:02:A9:B6
Certificate issuer: /CN=77a1eed3ace0fc2f8aa000de687a49befd2791d8
Certificate serial: 01856F94A78C17CC7F9390FC21C2221413B1
Authority key identifier: 77:A1:EE:D3:AC:E0:FC:2F:8A:A0:00:DE:68:7A:49:BE:FD:27:91:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d6Hu06zg_C-KoADeaHpJvv0nkdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/4f3e11-fd0f-4e71-9369-2204ee217280/1/Yb2_ODopocZyShLL0biMOg8CqbY.roa
Signing time: Sun 01 Jan 2023 23:04:51 +0000
ROA not before: Sun 01 Jan 2023 23:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211645
IP address blocks: 91.205.124.0/24 maxlen: 24
2a10:41c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:94:a7:8c:17:cc:7f:93:90:fc:21:c2:22:14:13:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77a1eed3ace0fc2f8aa000de687a49befd2791d8
Validity
Not Before: Jan 1 23:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=61bdbf383a29a1c6724a12cbd1b88c3a0f02a9b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:30:ac:bc:3d:63:d0:bd:05:f5:7d:a9:31:eb:
e4:c2:b3:13:ef:6b:c5:fd:38:5b:99:37:04:e4:c3:
37:02:74:d0:c2:5a:ec:27:52:d9:a3:32:8b:12:29:
54:b7:67:22:ac:50:71:d6:e2:9b:48:76:6f:c0:27:
04:dc:db:04:17:17:fd:c6:75:49:ae:f0:24:8e:62:
1d:bc:30:9c:60:fc:15:45:b1:ed:dc:1e:0f:c4:22:
27:ce:a0:43:1b:87:7f:eb:7d:cd:13:b9:0a:59:a9:
86:84:04:a3:c8:5a:42:9d:58:f0:0f:56:be:83:ed:
9b:35:34:88:a0:9a:58:4c:e5:3a:07:72:85:ac:c1:
db:37:5a:6c:6e:3a:9b:65:d1:cd:c9:b6:3b:5e:8a:
bf:fa:25:90:8f:e6:99:1d:2d:10:3f:57:73:bc:34:
46:3c:25:29:48:05:39:73:b0:1b:4c:30:ed:bf:af:
68:28:62:f9:0a:18:7a:8c:5b:66:c9:78:4d:6d:2a:
ce:2a:8f:fc:cb:12:5e:3f:c7:d9:b5:ce:19:11:60:
88:63:e4:01:5f:1f:f9:ab:9a:42:b0:94:f8:1d:f0:
9d:0f:91:16:85:88:5e:fc:c0:b6:dd:d4:e0:88:c8:
55:5d:8b:db:04:6f:23:63:82:5f:d2:a7:2b:ee:35:
d6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:BD:BF:38:3A:29:A1:C6:72:4A:12:CB:D1:B8:8C:3A:0F:02:A9:B6
X509v3 Authority Key Identifier:
keyid:77:A1:EE:D3:AC:E0:FC:2F:8A:A0:00:DE:68:7A:49:BE:FD:27:91:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6Hu06zg_C-KoADeaHpJvv0nkdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4f3e11-fd0f-4e71-9369-2204ee217280/1/Yb2_ODopocZyShLL0biMOg8CqbY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4f3e11-fd0f-4e71-9369-2204ee217280/1/d6Hu06zg_C-KoADeaHpJvv0nkdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.205.124.0/24
IPv6:
2a10:41c0::/29
Signature Algorithm: sha256WithRSAEncryption
51:c4:12:23:4d:81:0b:32:e7:a2:a0:34:13:09:f2:92:a3:ec:
80:20:f4:f0:15:1c:5a:25:f7:74:a2:8f:76:cc:33:ce:64:9b:
ef:b9:c4:0e:26:03:37:fc:37:37:b1:90:14:c3:1b:e5:b9:45:
e7:eb:a6:d6:3d:7c:90:5c:4b:9e:79:9d:36:a3:63:64:59:45:
61:ec:fe:65:ff:ec:7c:29:a8:4f:62:b8:fd:52:9e:6d:1d:47:
5a:b1:0a:c8:4f:22:e7:56:a4:7f:25:9e:a5:4e:01:f9:23:e8:
97:85:9e:9b:2d:5b:7b:61:dd:97:92:d9:46:e7:1b:ee:17:70:
ae:2b:73:3e:e3:ed:f8:73:97:7a:e9:a2:3f:ac:5b:98:78:2e:
72:34:3c:e4:84:f7:1a:eb:fb:6b:a2:5d:d2:49:15:b2:fd:f9:
24:4a:24:09:cb:c6:c9:40:06:d8:db:d0:ff:76:41:62:da:25:
a1:01:d0:08:d1:af:b0:22:4c:b6:03:91:f4:87:f7:0c:5e:a1:
85:bb:c1:0d:f6:8d:04:f3:31:13:62:97:14:ee:c8:f6:47:7c:
6e:64:38:f4:fc:40:81:bc:84:20:39:33:62:b6:2d:8a:9e:ae:
bc:4e:20:fa:97:1f:3b:a5:d0:d9:2a:62:cf:fb:75:2f:c0:75:
fc:1a:67:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:04:02 2025 by rpki-client