Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/yu4GEoesZAhZ9pE55Oek_lfnbE4.roa
File: yu4GEoesZAhZ9pE55Oek_lfnbE4.roa (raw, json)
Hash identifier: XpK68d/82uwEw0e0fIuYt+vYHB3w9AtW5yc0to5pgsA=
Subject key identifier: CA:EE:06:12:87:AC:64:08:59:F6:91:39:E4:E7:A4:FE:57:E7:6C:4E
Certificate issuer: /CN=10515090f850e337eb3b118a157e4e39083b77a6
Certificate serial: 018573CD1A20C3D81EC866661EBEDAE97096
Authority key identifier: 10:51:50:90:F8:50:E3:37:EB:3B:11:8A:15:7E:4E:39:08:3B:77:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/yu4GEoesZAhZ9pE55Oek_lfnbE4.roa
Signing time: Mon 02 Jan 2023 18:44:59 +0000
ROA not before: Mon 02 Jan 2023 18:44:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39260
IP address blocks: 195.238.88.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:cd:1a:20:c3:d8:1e:c8:66:66:1e:be:da:e9:70:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10515090f850e337eb3b118a157e4e39083b77a6
Validity
Not Before: Jan 2 18:44:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=caee061287ac640859f69139e4e7a4fe57e76c4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:80:1d:86:fd:ef:ec:d1:a0:b2:2c:c7:4a:fc:
88:2c:4e:df:a8:55:f7:7c:6a:5d:54:f9:88:97:4c:
7d:17:ec:86:4a:cd:d2:36:92:10:7e:a0:d5:e2:52:
f0:d2:db:ba:75:01:30:8a:ee:2b:7d:4d:29:9a:72:
33:ce:a9:24:2a:63:2b:cd:41:89:f1:51:59:89:9c:
9a:4d:4d:1e:0a:4c:a9:e6:49:60:c4:e8:8f:6a:03:
d0:f6:ee:07:8f:ae:b0:c8:ed:9f:cc:3b:7d:4f:55:
cb:78:ee:d6:0f:1a:ef:63:8e:f6:06:a2:d2:61:c7:
6f:9e:91:31:57:ec:bc:84:97:ad:b4:0b:7e:ff:ef:
0b:e7:b9:09:27:be:1a:0c:fc:18:eb:6c:ea:e1:02:
3b:4c:11:06:50:09:6f:8e:0e:38:e7:0e:9e:c9:a9:
e3:71:04:1f:52:b4:f3:5a:05:b2:f6:85:0b:1b:16:
71:7b:26:62:77:f3:1a:05:03:87:df:0d:8d:43:86:
77:e1:df:bc:63:06:d3:8a:3a:36:b7:e8:66:20:f3:
a8:e4:e7:27:e9:fc:97:cb:be:a7:a4:8b:5e:b2:77:
2d:9b:b2:f1:5e:f2:c9:d0:37:8e:23:4b:2e:8e:2e:
48:3f:a6:cc:f3:02:be:74:6a:de:7d:d3:7b:f7:a8:
f2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:EE:06:12:87:AC:64:08:59:F6:91:39:E4:E7:A4:FE:57:E7:6C:4E
X509v3 Authority Key Identifier:
keyid:10:51:50:90:F8:50:E3:37:EB:3B:11:8A:15:7E:4E:39:08:3B:77:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/yu4GEoesZAhZ9pE55Oek_lfnbE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.238.88.0/23
Signature Algorithm: sha256WithRSAEncryption
aa:fa:33:a2:ed:71:7b:2b:1e:3a:1e:b5:72:46:39:1b:91:83:
29:16:17:80:6b:2b:bf:83:71:6f:86:d7:71:86:f4:ce:c2:3f:
b0:ba:99:33:68:d0:63:52:8d:6e:97:17:84:d5:a9:87:b6:49:
bb:42:c8:f0:e5:aa:5c:b7:42:c0:6b:a2:42:d4:db:3f:fa:e8:
07:88:ef:c4:a3:a5:1a:e1:ec:bc:1c:b8:29:35:a3:67:56:cd:
7d:21:9e:cc:af:6c:c0:91:3d:a4:d6:bf:d6:08:6d:e3:c5:10:
ae:41:ba:27:ca:48:5d:fc:d0:b6:16:31:be:e9:b2:bf:de:28:
6a:e8:ed:6e:fc:54:57:50:45:ac:7f:e7:88:72:db:4f:d0:54:
69:73:d7:48:8d:af:9c:be:69:37:36:93:37:11:2c:f3:e6:57:
d6:f8:44:38:63:f4:ab:68:a5:1d:47:17:1d:55:7d:59:ca:4e:
34:38:36:00:3a:9c:ba:c3:e4:5a:ee:da:ad:5a:5d:41:a0:0b:
77:1b:df:84:a3:a4:15:06:58:53:7a:20:7d:74:15:6d:1d:8c:
64:21:70:07:af:db:1f:e1:12:07:47:d9:32:b8:81:03:40:15:
5c:e7:13:5d:2f:e7:60:7e:be:48:f2:8f:f8:2b:05:3c:42:47:
b6:a0:d7:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:24:48 2025 by rpki-client