Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/YYfAW_fk80uZMWnHn-jQpLQI_0I.roa
File: YYfAW_fk80uZMWnHn-jQpLQI_0I.roa (raw, json)
Hash identifier: izZCn71Bc9TRXsCawnr/pHxRythFFOkS4jIXXSbpnI0=
Subject key identifier: 61:87:C0:5B:F7:E4:F3:4B:99:31:69:C7:9F:E8:D0:A4:B4:08:FF:42
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0187C1AB0031DCB6C23A22CEC3B98252F27C
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/YYfAW_fk80uZMWnHn-jQpLQI_0I.roa
Signing time: Thu 27 Apr 2023 07:43:42 +0000
ROA not before: Thu 27 Apr 2023 07:43:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204843
IP address blocks: 5.105.30.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c1:ab:00:31:dc:b6:c2:3a:22:ce:c3:b9:82:52:f2:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Apr 27 07:43:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6187c05bf7e4f34b993169c79fe8d0a4b408ff42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:47:01:bd:b1:8b:8d:0d:69:9e:f8:6d:f5:c8:
cf:c3:95:71:46:ff:3c:e5:5f:90:af:81:d5:5a:79:
4e:3c:4a:cf:21:91:95:ee:a1:e9:5e:d9:76:bb:10:
6c:5c:16:62:7a:72:00:45:40:ad:c5:76:bf:db:e6:
f5:a9:b3:9c:0f:70:8a:2c:55:f8:78:3e:8f:18:49:
c4:dd:31:1e:66:64:36:35:49:7d:32:6b:07:40:8d:
76:d9:a5:ce:d7:06:3a:c2:40:68:8f:a4:75:d7:97:
13:1d:c8:85:70:6d:8b:97:92:7f:dc:8f:13:8f:28:
f9:79:78:b7:d1:3a:66:6c:90:64:31:30:14:10:63:
66:34:0a:be:f1:4d:bb:74:c4:9c:b1:4f:26:73:90:
54:ce:a5:8c:02:c7:e6:6e:22:6d:30:70:dd:ae:12:
eb:6e:11:73:5e:d3:a4:a1:9f:9f:c0:d9:ba:03:af:
e0:73:86:3b:3d:6b:49:05:2f:14:03:b6:c2:4f:ce:
d5:06:c5:b0:0a:c9:4d:b4:c6:25:12:d4:18:c8:62:
50:b0:f5:6e:03:c8:bf:25:d5:c8:4e:1c:3f:6f:af:
eb:23:b3:19:ca:3f:d2:74:99:86:ed:10:39:fd:ad:
5f:06:d9:9a:2a:60:f3:57:b3:7d:d1:d5:ce:6d:ba:
13:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:87:C0:5B:F7:E4:F3:4B:99:31:69:C7:9F:E8:D0:A4:B4:08:FF:42
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/YYfAW_fk80uZMWnHn-jQpLQI_0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.30.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:9e:6b:20:30:af:f0:bf:f1:a5:34:5a:71:ca:ff:2e:98:38:
3a:46:9a:c2:af:36:0e:75:ad:1c:56:5f:0f:c4:4a:15:33:fd:
38:68:16:45:95:8d:b1:7e:1f:d1:93:d3:a5:be:9d:5c:e5:2c:
98:be:f8:6e:fd:2a:53:95:97:81:6a:f3:60:1d:54:57:0e:91:
f7:53:73:58:d3:05:d0:9f:2b:eb:43:9e:7c:4b:29:ea:32:da:
8a:44:bb:94:a7:c2:e0:08:fb:0c:3c:47:74:9f:05:84:2c:90:
0e:94:04:7e:72:16:7a:1d:96:b3:37:60:27:85:67:89:62:25:
6b:25:eb:22:7e:48:93:2f:88:8e:ca:17:aa:7d:b0:7c:2d:c9:
4e:ac:51:02:db:63:0d:65:ef:71:73:50:62:44:97:f3:29:36:
1c:95:28:36:ce:b4:76:c3:74:eb:12:52:28:40:f6:ac:61:55:
f1:5b:a2:68:73:17:53:65:e4:6c:78:de:48:b3:8f:60:86:d6:
74:14:50:4d:da:61:51:32:a0:d6:fe:07:7a:15:73:56:a7:0b:
f8:9a:6c:c6:0f:a5:ca:7c:f0:ff:9e:6f:d2:c4:6d:af:9e:5d:
84:5f:73:68:a7:f0:99:48:9a:67:18:a9:34:bf:a1:6c:d2:08:
82:27:1a:65
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYfBqwAx3LbCOiLOw7mCUvJ8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjMwNDI3MDc0MzQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MTg3YzA1YmY3ZTRmMzRiOTkzMTY5Yzc5ZmU4ZDBhNGI0MDhmZjQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgEcBvbGLjQ1pnvht9cjPw5VxRv88
5V+Qr4HVWnlOPErPIZGV7qHpXtl2uxBsXBZienIARUCtxXa/2+b1qbOcD3CKLFX4
eD6PGEnE3TEeZmQ2NUl9MmsHQI122aXO1wY6wkBoj6R115cTHciFcG2Ll5J/3I8T
jyj5eXi30TpmbJBkMTAUEGNmNAq+8U27dMScsU8mc5BUzqWMAsfmbiJtMHDdrhLr
bhFzXtOkoZ+fwNm6A6/gc4Y7PWtJBS8UA7bCT87VBsWwCslNtMYlEtQYyGJQsPVu
A8i/JdXIThw/b6/rI7MZyj/SdJmG7RA5/a1fBtmaKmDzV7N90dXObboTBQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGGHwFv35PNLmTFpx5/o0KS0CP9CMB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEvWVlmQVdfZms4MHVaTVduSG4talFwTFFJXzBJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABWkeMA0G
CSqGSIb3DQEBCwUAA4IBAQAsnmsgMK/wv/GlNFpxyv8umDg6RprCrzYOda0cVl8P
xEoVM/04aBZFlY2xfh/Rk9Olvp1c5SyYvvhu/SpTlZeBavNgHVRXDpH3U3NY0wXQ
nyvrQ558SynqMtqKRLuUp8LgCPsMPEd0nwWELJAOlAR+chZ6HZazN2AnhWeJYiVr
JesifkiTL4iOyheqfbB8LclOrFEC22MNZe9xc1BiRJfzKTYclSg2zrR2w3TrElIo
QPasYVXxW6JocxdTZeRseN5Is49ghtZ0FFBN2mFRMqDW/gd6FXNWpwv4mmzGD6XK
fPD/nm/SxG2vnl2EX3Nop/CZSJpnGKk0v6Fs0giCJxpl
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:49:45 2025 by rpki-client