Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/YBrqNvgEPSV3FcREO_cer6wSgOM.roa
File: YBrqNvgEPSV3FcREO_cer6wSgOM.roa (raw, json)
Hash identifier: 4N2THwWddtkgKY3wVvTxzpB/0ohVN98KzB0/DRq0QPc=
Subject key identifier: 60:1A:EA:36:F8:04:3D:25:77:15:C4:44:3B:F7:1E:AF:AC:12:80:E3
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 28446A6F
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/YBrqNvgEPSV3FcREO_cer6wSgOM.roa
Signing time: Sat 01 Jan 2022 16:09:59 +0000
ROA not before: Sat 01 Jan 2022 16:09:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208515
IP address blocks: 146.120.241.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 675572335 (0x28446a6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:09:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=601aea36f8043d257715c4443bf71eafac1280e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1c:43:c3:c6:4a:60:6d:7b:f7:38:3e:7d:b0:
9b:99:9b:10:db:47:f2:51:ef:70:11:81:9b:f4:d0:
69:be:f1:09:43:df:b7:71:7b:74:ed:f7:59:46:db:
7f:19:4c:10:1a:36:6d:22:53:9a:37:0e:18:76:c3:
e5:95:13:e6:d7:54:11:f2:2d:77:87:a7:7c:aa:1a:
77:f1:a7:ad:9b:73:0f:be:a8:8f:89:d5:07:77:99:
e1:5b:37:32:b6:19:44:28:6a:a6:49:cd:ce:c6:25:
22:4d:21:0b:10:f6:d0:08:1b:60:f9:f3:7e:d1:0c:
92:5b:19:12:8c:af:2a:b5:86:06:8d:bd:63:36:a4:
c4:45:ca:48:5e:d9:1c:af:8c:fe:fd:2b:08:de:25:
d4:18:92:26:54:0f:7d:61:63:3e:31:d0:4f:7e:cc:
08:57:b9:f7:16:56:f7:de:60:18:32:aa:73:bd:b8:
5e:f5:27:b8:d4:79:65:29:10:6c:38:88:56:9a:8d:
43:24:3d:bb:1d:cd:50:10:c0:52:06:f2:44:72:b7:
11:76:a4:0a:c9:74:d5:0f:98:14:d8:e6:ba:92:9a:
de:8b:77:39:d3:b1:31:e7:98:7a:f3:83:11:5e:20:
25:2b:ff:e1:22:56:87:a2:14:f8:3c:35:e3:59:96:
62:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:1A:EA:36:F8:04:3D:25:77:15:C4:44:3B:F7:1E:AF:AC:12:80:E3
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/YBrqNvgEPSV3FcREO_cer6wSgOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.120.241.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:d4:ed:42:c3:66:bf:9e:1e:b7:ae:0d:7c:6d:85:62:ff:75:
b8:c9:92:d9:9f:a2:54:c0:77:a2:70:ac:49:63:1f:b6:19:5e:
74:c3:4f:5f:d2:e9:54:89:7c:f0:ce:f8:5d:e9:04:52:bd:3d:
45:67:2c:d9:5f:a8:32:c6:51:ca:27:80:d6:f8:9a:d1:8f:0d:
a4:7e:35:68:b9:18:a5:1a:f6:14:70:1f:52:47:ec:8f:52:e3:
a8:b6:f9:9f:de:a6:5a:58:6d:fa:fc:5c:8e:52:92:e1:9d:ea:
b7:83:31:90:0d:3f:21:e7:99:db:c7:b0:c7:92:61:10:e8:be:
35:47:22:aa:77:7d:83:5f:a2:d5:de:07:99:59:28:53:5a:4a:
ff:a0:df:79:75:e8:ed:b2:ae:82:0a:01:f8:67:4f:d7:0f:72:
b6:3b:f0:eb:5f:a0:ea:04:3c:c2:38:f8:7d:b4:ad:7d:54:93:
0b:16:d5:e3:92:2f:c4:34:3f:fb:ff:87:5b:9b:9b:ea:3e:90:
26:05:df:5c:3b:d7:9e:cb:c5:d8:8e:2a:14:a5:36:e5:f8:e0:
4c:fe:ec:fb:38:d8:7d:17:5c:82:fe:cf:34:9e:14:bf:71:4e:
32:44:93:9f:d7:c4:8f:33:f0:48:1c:b4:60:65:4b:85:dd:12:
48:2d:87:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:48:53 2025 by rpki-client