Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/YxX57yVtfl0gOcms3s9_6Azv2j4.roa
File: YxX57yVtfl0gOcms3s9_6Azv2j4.roa (raw, json)
Hash identifier: ADUhiSp7z4qhQuS7ChYO1z/uADXdGsXrSqfKBeh0ruo=
Subject key identifier: 63:15:F9:EF:25:6D:7E:5D:20:39:C9:AC:DE:CF:7F:E8:0C:EF:DA:3E
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 01856F66E9D42467EAB84465624B78C2700D
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/YxX57yVtfl0gOcms3s9_6Azv2j4.roa
Signing time: Sun 01 Jan 2023 22:14:53 +0000
ROA not before: Sun 01 Jan 2023 22:14:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206361
IP address blocks: 79.172.251.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:66:e9:d4:24:67:ea:b8:44:65:62:4b:78:c2:70:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Jan 1 22:14:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6315f9ef256d7e5d2039c9acdecf7fe80cefda3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:31:08:30:af:f9:e2:45:f8:0b:02:20:d1:31:
f8:b5:4d:37:90:7b:4b:eb:10:4d:3d:28:d3:cf:ce:
d2:a0:e3:47:d6:97:5b:35:ae:e9:b6:3a:9d:25:2f:
a6:5f:a1:28:12:b1:8f:a7:c4:8e:cc:a8:d8:67:31:
10:5b:a7:bd:16:27:c5:81:23:8a:f8:c1:7c:6b:16:
b9:d3:82:5d:da:28:88:d4:bf:aa:d8:ac:8f:e4:33:
47:7e:fd:fb:05:01:41:f2:42:dc:a5:6a:28:01:01:
50:d1:f5:e2:fc:17:e0:6e:c8:ef:3e:07:1e:c4:49:
ee:48:5c:cc:c4:33:45:ae:6a:c1:8a:55:2d:27:46:
47:cb:d1:eb:b9:5f:4c:b7:5a:8b:91:1d:43:87:1a:
5a:30:02:a9:56:a6:e5:9e:7b:81:cb:50:d7:20:6f:
36:1b:d3:4a:83:51:f7:2b:6a:85:e1:49:16:9d:c9:
e6:08:fa:8c:4f:1e:ef:c6:19:fb:9c:f0:7c:17:17:
97:b2:3e:dd:0e:f8:ae:14:ae:e5:10:cf:5f:64:7c:
61:dc:75:ea:90:02:0f:1a:19:6c:ea:f7:5b:31:76:
87:da:15:60:ef:4d:74:73:b4:5d:4c:68:2b:af:35:
0a:18:88:c5:1f:b7:ed:40:4d:a0:d3:ba:ee:5c:29:
18:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:15:F9:EF:25:6D:7E:5D:20:39:C9:AC:DE:CF:7F:E8:0C:EF:DA:3E
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/YxX57yVtfl0gOcms3s9_6Azv2j4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.251.0/24
Signature Algorithm: sha256WithRSAEncryption
24:d2:2c:b3:c8:b5:2d:f5:6e:b8:f3:ab:c6:fb:54:7f:7e:39:
cd:03:d2:e0:18:32:2c:c0:32:95:f2:1d:cf:6e:13:24:bd:0b:
73:5f:f4:a8:b0:7b:0f:06:ee:53:1b:29:36:c8:f6:cd:04:df:
77:b6:06:3a:7f:c6:07:0c:bb:9f:cd:50:de:14:3f:4e:d6:ab:
28:33:a6:2b:cc:b6:78:87:ab:c8:55:d1:dc:48:e1:f8:02:1d:
98:e0:82:55:bd:bc:38:b1:bc:63:00:e6:d7:8e:38:02:9b:c8:
93:80:0b:ff:ff:60:20:fc:c7:5f:74:d8:d3:77:b5:ce:5b:be:
6f:8f:7c:41:b9:0a:90:be:a6:80:5c:79:12:b6:8a:a7:9d:3c:
f8:d8:96:b0:18:20:0f:f8:50:d7:2c:32:51:a8:03:b8:9a:24:
17:d0:03:24:27:40:f0:28:b3:59:4f:67:ab:90:4b:d8:51:ba:
17:e9:e6:ce:49:28:bf:be:6d:b9:40:ce:3c:f6:65:ae:91:45:
b9:82:5a:fc:8b:4a:95:83:5f:3b:96:4c:d7:9c:4e:04:be:da:
ff:e8:57:c1:4e:d8:1c:89:54:33:b2:6a:f5:4a:14:80:d5:56:
c1:f0:47:24:58:2c:f3:65:46:df:76:1b:7e:8e:d1:56:98:c7:
7e:a7:93:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:34:35 2025 by rpki-client