Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/yvmcoRqp-4Np3XluwjcfyM2hJDI.roa
File: yvmcoRqp-4Np3XluwjcfyM2hJDI.roa (raw, json)
Hash identifier: b69nAQT5j8GSRzPf7BrRDqaLIYowc37ZZ9Vy9lunfMU=
Subject key identifier: CA:F9:9C:A1:1A:A9:FB:83:69:DD:79:6E:C2:37:1F:C8:CD:A1:24:32
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018AAD00E0BAB2C5E6E6BE2D7D0361314923
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/yvmcoRqp-4Np3XluwjcfyM2hJDI.roa
Signing time: Tue 19 Sep 2023 10:33:50 +0000
ROA not before: Tue 19 Sep 2023 10:33:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 5.105.186.0/23 maxlen: 24
5.105.202.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ad:00:e0:ba:b2:c5:e6:e6:be:2d:7d:03:61:31:49:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Sep 19 10:33:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=caf99ca11aa9fb8369dd796ec2371fc8cda12432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:cd:b1:6b:9c:02:26:a3:64:43:7e:41:2e:3e:
41:0a:59:6b:65:a2:e4:3f:c6:2a:b3:54:cc:5d:c3:
b5:de:34:07:9d:01:2e:3d:4d:01:94:8b:cb:81:a9:
bf:9d:a0:0e:7e:da:4c:94:b1:18:d1:0b:78:9e:f5:
1e:6c:b0:96:7e:4e:c1:80:e1:3f:6c:fd:7b:92:0f:
7e:ee:9a:4c:b3:cc:9c:10:1a:c6:a9:92:a5:b9:ee:
42:a1:07:51:6b:7b:b6:cc:50:8d:ea:2b:7a:f8:8d:
07:f9:de:63:d7:ad:95:fc:fc:a3:ef:9d:94:35:7d:
7e:a6:32:ea:40:84:e1:93:e0:8a:86:0e:d5:46:04:
99:38:03:4e:91:09:80:a0:71:25:70:00:59:a5:f0:
d9:e4:58:77:e1:d8:22:47:3c:8a:3d:ac:60:e9:47:
e7:e9:d8:53:e9:5a:37:40:6d:e1:76:19:35:35:19:
70:49:9f:87:d7:99:b8:41:f4:b4:be:73:e3:c2:39:
b2:57:fc:91:fd:9c:19:b4:58:ba:6e:f2:4b:c9:2d:
e5:5d:33:bf:91:99:9b:3f:0f:b3:ac:a2:dd:7f:69:
94:90:64:b6:95:f3:11:a3:bb:84:f9:0e:fc:7e:3a:
7d:cd:b6:c3:0a:de:81:59:13:cb:4e:fe:76:50:96:
c5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:F9:9C:A1:1A:A9:FB:83:69:DD:79:6E:C2:37:1F:C8:CD:A1:24:32
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/yvmcoRqp-4Np3XluwjcfyM2hJDI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.186.0/23
5.105.202.0/23
Signature Algorithm: sha256WithRSAEncryption
0b:69:e6:21:ed:8e:71:fb:c0:80:f9:1c:59:ff:c0:30:dc:9a:
df:8f:18:ae:56:4e:0d:c4:96:1c:ba:48:2d:ac:9f:d8:9d:93:
ef:c1:5d:24:ba:d6:a3:b4:f1:ba:67:a8:f5:b6:13:fd:8a:e8:
0f:22:bc:7b:04:c8:34:f8:6b:76:cb:ae:4b:64:3c:e5:95:d8:
cc:45:ae:e6:6f:cd:d6:6c:0c:3e:ed:e9:8f:2b:38:73:95:89:
c1:a6:63:18:27:f7:03:37:6f:f7:6f:a1:ec:d8:f1:48:ed:49:
ab:83:4e:44:86:7e:a2:33:3d:93:0d:6b:2b:41:13:08:0c:e7:
19:55:e5:b8:95:06:cf:d7:cf:1c:3a:12:b1:43:ce:4e:0e:eb:
ec:56:ba:17:b4:4f:ea:de:0c:65:47:fe:8c:de:96:7a:3f:06:
7f:e3:77:fc:7e:28:9b:ee:07:68:56:60:6d:58:ae:f2:a7:d2:
5f:55:b1:ba:6b:9f:f4:4d:29:fe:47:06:9f:74:49:b0:2e:5d:
05:7c:53:55:7c:12:fd:5e:8a:81:f9:ed:25:88:58:fe:38:cd:
11:89:f9:da:d2:08:bd:90:c5:bd:9f:07:36:f6:6a:99:35:82:
0a:97:08:67:46:0e:b0:35:6a:a5:fc:8f:13:38:9b:36:3d:8c:
94:8d:07:09
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYqtAOC6ssXm5r4tfQNhMUkjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjMwOTE5MTAzMzUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYWY5OWNhMTFhYTlmYjgzNjlkZDc5NmVjMjM3MWZjOGNkYTEyNDMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3M2xa5wCJqNkQ35BLj5BCllrZaLk
P8Yqs1TMXcO13jQHnQEuPU0BlIvLgam/naAOftpMlLEY0Qt4nvUebLCWfk7BgOE/
bP17kg9+7ppMs8ycEBrGqZKlue5CoQdRa3u2zFCN6it6+I0H+d5j162V/Pyj752U
NX1+pjLqQIThk+CKhg7VRgSZOANOkQmAoHElcABZpfDZ5Fh34dgiRzyKPaxg6Ufn
6dhT6Vo3QG3hdhk1NRlwSZ+H15m4QfS0vnPjwjmyV/yR/ZwZtFi6bvJLyS3lXTO/
kZmbPw+zrKLdf2mUkGS2lfMRo7uE+Q78fjp9zbbDCt6BWRPLTv52UJbFfwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMr5nKEaqfuDad15bsI3H8jNoSQyMB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEveXZtY29ScXAtNE5wM1hsdXdqY2Z5TTJoSkRJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBBWm6AwQB
BWnKMA0GCSqGSIb3DQEBCwUAA4IBAQALaeYh7Y5x+8CA+RxZ/8Aw3JrfjxiuVk4N
xJYcukgtrJ/YnZPvwV0kutajtPG6Z6j1thP9iugPIrx7BMg0+Gt2y65LZDzlldjM
Ra7mb83WbAw+7emPKzhzlYnBpmMYJ/cDN2/3b6Hs2PFI7Umrg05Ehn6iMz2TDWsr
QRMIDOcZVeW4lQbP188cOhKxQ85ODuvsVroXtE/q3gxlR/6M3pZ6PwZ/43f8fiib
7gdoVmBtWK7yp9JfVbG6a5/0TSn+RwafdEmwLl0FfFNVfBL9XoqB+e0liFj+OM0R
ifna0gi9kMW9nwc29mqZNYIKlwhnRg6wNWql/I8TOJs2PYyUjQcJ
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:36:05 2025 by rpki-client