Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/0961f9-d85d-4976-a4cd-a18ed19c49e3/1/y-5-Tv_nMhNfb1Kz2tbd2pU2SOE.roa
File: y-5-Tv_nMhNfb1Kz2tbd2pU2SOE.roa (raw, json)
Hash identifier: edprKktpY+6ncJya0380AYX3Z9tlVM7jQsfEJOyhQr8=
Subject key identifier: CB:EE:7E:4E:FF:E7:32:13:5F:6F:52:B3:DA:D6:DD:DA:95:36:48:E1
Certificate issuer: /CN=605522e37de26b0d56895ac18ab07d7c784ab93c
Certificate serial: 5BE8F1
Authority key identifier: 60:55:22:E3:7D:E2:6B:0D:56:89:5A:C1:8A:B0:7D:7C:78:4A:B9:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFUi433iaw1WiVrBirB9fHhKuTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/0961f9-d85d-4976-a4cd-a18ed19c49e3/1/y-5-Tv_nMhNfb1Kz2tbd2pU2SOE.roa
Signing time: Sat 01 Jan 2022 01:55:51 +0000
ROA not before: Sat 01 Jan 2022 01:55:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210462
IP address blocks: 188.68.64.0/20 maxlen: 24
2a12:df00::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6023409 (0x5be8f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605522e37de26b0d56895ac18ab07d7c784ab93c
Validity
Not Before: Jan 1 01:55:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cbee7e4effe732135f6f52b3dad6ddda953648e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:69:bc:9e:52:50:a0:49:18:f3:47:e8:50:ae:
4a:45:d3:46:c1:8c:f5:e5:a0:c6:7a:4a:0b:8e:ed:
44:26:74:dc:27:99:a1:22:87:66:70:12:21:7b:dc:
90:90:3f:09:ad:7a:a9:4c:7d:54:99:ac:45:da:bf:
cd:2a:32:07:0a:f3:fb:6e:8b:a9:0f:73:28:8e:86:
44:0f:d4:5f:4a:dc:bb:c9:66:55:c0:cb:05:03:e8:
73:bc:86:9d:9b:7d:15:e8:1f:70:61:fd:bb:1f:4e:
25:c9:ca:a4:1a:15:86:dd:a9:08:d1:1b:72:ba:95:
16:a7:02:a7:19:12:e4:0e:47:4a:b3:62:19:46:92:
d6:53:7f:0f:17:54:0f:ee:7d:ac:0d:41:7f:e6:8c:
c6:aa:98:4c:9e:df:d1:9e:f2:a2:fb:04:50:b2:e7:
48:31:2b:db:96:78:74:7a:22:79:4c:2f:63:37:46:
94:fa:86:3d:d6:69:ec:a4:8e:d7:84:27:bb:72:e8:
25:2a:48:08:2c:ed:dd:a7:40:9a:4e:0e:4d:0b:f1:
4b:e9:00:e3:9d:1a:f1:cf:ad:2e:dc:9d:03:b9:66:
be:9e:79:43:15:70:14:df:0e:05:95:62:19:f3:5b:
1a:05:ba:e8:19:75:83:24:88:87:b6:5e:23:a1:47:
6b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:EE:7E:4E:FF:E7:32:13:5F:6F:52:B3:DA:D6:DD:DA:95:36:48:E1
X509v3 Authority Key Identifier:
keyid:60:55:22:E3:7D:E2:6B:0D:56:89:5A:C1:8A:B0:7D:7C:78:4A:B9:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFUi433iaw1WiVrBirB9fHhKuTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/0961f9-d85d-4976-a4cd-a18ed19c49e3/1/y-5-Tv_nMhNfb1Kz2tbd2pU2SOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/0961f9-d85d-4976-a4cd-a18ed19c49e3/1/YFUi433iaw1WiVrBirB9fHhKuTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.68.64.0/20
IPv6:
2a12:df00::/32
Signature Algorithm: sha256WithRSAEncryption
05:44:02:2b:ed:d1:e8:08:98:48:14:44:93:5a:f4:77:19:5b:
d5:dc:5a:f4:1b:60:06:16:f9:f4:f2:88:ab:1b:b0:38:50:c0:
77:46:7a:c1:97:bd:42:bf:62:93:da:90:81:ee:bc:c9:7e:ca:
9b:4c:be:64:95:54:6a:3a:33:17:b2:78:c6:83:d7:c9:f9:ef:
18:34:99:1a:09:6d:36:0b:da:75:e6:96:a8:bc:da:35:57:b7:
cb:1c:b2:e3:ba:bd:4d:5b:a3:c9:74:5d:77:c4:96:a1:8f:55:
af:a4:10:8c:50:99:9e:0c:96:40:df:c3:68:f1:16:d5:c7:15:
32:c6:d5:79:5b:9e:75:55:4e:02:dc:40:70:f4:86:af:65:a2:
b4:87:1d:18:ce:ab:01:4b:1e:5b:d0:f5:eb:3b:26:26:a6:dc:
b0:f0:a8:14:ab:46:62:0b:1d:e5:b3:fe:e9:ce:f6:89:95:28:
95:bb:17:0f:de:ab:58:5f:5d:bb:e5:41:4f:39:2e:57:e9:fb:
56:9e:4a:c0:61:71:1c:63:5a:b2:56:17:36:b6:7a:a1:ba:9c:
d0:74:b3:21:27:af:30:09:f8:5b:f6:6a:90:99:83:64:39:95:
43:59:d7:9c:d7:80:f0:0d:ea:27:15:1b:1c:2c:64:98:51:dd:
a4:d2:fd:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:39:53 2025 by rpki-client