Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/y9VzmhupMse_OcHaWtQ4w0791-I.roa
File: y9VzmhupMse_OcHaWtQ4w0791-I.roa (raw, json)
Hash identifier: VH1MbAcpAh0OWllRs3sU7T/5qKrEKdCNwHBgSnkdXcI=
Subject key identifier: CB:D5:73:9A:1B:A9:32:C7:BF:39:C1:DA:5A:D4:38:C3:4E:FD:D7:E2
Certificate issuer: /CN=4432f61bbd3fd11d7facbb1543a751a65a3f64c3
Certificate serial: 0812313F
Authority key identifier: 44:32:F6:1B:BD:3F:D1:1D:7F:AC:BB:15:43:A7:51:A6:5A:3F:64:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RDL2G70_0R1_rLsVQ6dRplo_ZMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/y9VzmhupMse_OcHaWtQ4w0791-I.roa
Signing time: Sat 01 Jan 2022 09:01:51 +0000
ROA not before: Sat 01 Jan 2022 09:01:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43096
IP address blocks: 80.83.90.0/24 maxlen: 24
185.61.236.0/24 maxlen: 24
185.61.237.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135409983 (0x812313f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4432f61bbd3fd11d7facbb1543a751a65a3f64c3
Validity
Not Before: Jan 1 09:01:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cbd5739a1ba932c7bf39c1da5ad438c34efdd7e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:cc:62:5b:b5:7d:71:56:ef:09:31:57:99:2f:
de:01:c5:70:f8:80:b6:d8:7e:a7:ad:e3:b5:52:ce:
51:1f:86:f2:22:5f:11:78:9d:51:1a:53:38:3e:d4:
9e:c4:33:31:eb:b4:0d:bc:b0:f3:b2:b5:84:ed:3f:
ee:66:1f:45:28:25:c9:f8:c9:4b:73:ea:91:a4:dd:
2c:74:ae:ae:af:36:23:c9:34:60:10:df:6e:4b:d2:
1b:cc:d6:dc:e1:2c:4d:41:a5:11:3f:45:da:d4:86:
c9:54:ce:c4:b2:7f:9c:02:fe:7d:cd:9a:69:f6:1f:
9b:1b:c1:3a:87:6e:4b:4f:4c:a3:fb:71:56:8c:3c:
8e:11:55:67:e8:9f:f1:25:95:d3:24:96:cb:08:e9:
ef:e1:c0:41:74:b8:be:eb:d8:ef:7f:79:8c:fc:85:
38:20:70:96:e7:65:3d:b1:a2:4c:41:7e:6f:27:7d:
54:56:7d:cf:18:f8:7a:21:74:9d:a5:3b:cc:a9:05:
52:82:5a:e2:56:c6:4e:e1:59:41:76:b5:65:08:27:
65:93:5a:27:cd:c7:ec:3b:ba:8c:42:53:f4:dd:83:
0e:83:d7:65:7e:77:df:49:d1:0e:46:83:0f:2f:dd:
bc:b3:f8:ac:91:66:fc:9e:67:d4:59:1c:85:a6:09:
1f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:D5:73:9A:1B:A9:32:C7:BF:39:C1:DA:5A:D4:38:C3:4E:FD:D7:E2
X509v3 Authority Key Identifier:
keyid:44:32:F6:1B:BD:3F:D1:1D:7F:AC:BB:15:43:A7:51:A6:5A:3F:64:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RDL2G70_0R1_rLsVQ6dRplo_ZMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/y9VzmhupMse_OcHaWtQ4w0791-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.83.90.0/24
185.61.236.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:8c:c7:56:79:a5:b6:46:b0:8b:1c:cb:d1:e5:de:dc:07:91:
55:4b:2b:58:41:d0:ff:ba:4c:90:f5:68:38:e2:40:0d:66:79:
cf:e9:b7:ac:50:23:e0:94:d4:96:03:b7:8e:de:34:ab:0b:6a:
45:9a:90:76:79:34:46:ed:d9:aa:cf:a7:5d:63:b6:3e:dc:96:
b2:1b:c4:c2:db:a5:21:db:f1:fa:ad:2a:70:08:fb:75:2c:38:
47:10:2b:89:e3:f8:1c:83:62:d3:fe:d7:bd:06:23:1c:b5:14:
7b:70:bd:e4:aa:a1:74:18:7c:7c:b7:17:48:e3:86:72:a6:a5:
7a:e9:4e:4d:7e:2b:f4:3d:91:12:1d:9b:b6:c7:1d:fa:f3:7c:
c1:ad:0c:c6:08:c2:0f:c5:e4:f9:19:0e:18:32:fb:d3:60:84:
c2:c6:88:2c:94:98:01:92:73:3a:3d:dc:ec:84:3a:75:e6:0d:
d1:72:b5:32:d5:c5:20:9d:39:42:0c:3d:45:ed:a1:99:8c:01:
d5:31:f0:a7:32:cd:68:8c:8d:5b:4f:11:07:0c:b6:17:8f:0f:
aa:2e:d8:6c:e1:bc:e3:a8:f1:36:6e:45:60:f0:56:1c:8a:54:
58:f6:bf:c8:3d:4c:17:41:67:3e:39:5d:dd:79:bc:4e:50:05:
1a:d1:27:b8
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIECBIxPzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
NDMyZjYxYmJkM2ZkMTFkN2ZhY2JiMTU0M2E3NTFhNjVhM2Y2NGMzMB4XDTIyMDEw
MTA5MDE1MVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoY2JkNTczOWExYmE5
MzJjN2JmMzljMWRhNWFkNDM4YzM0ZWZkZDdlMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIzMYlu1fXFW7wkxV5kv3gHFcPiAtth+p63jtVLOUR+G8iJf
EXidURpTOD7UnsQzMeu0Dbyw87K1hO0/7mYfRSglyfjJS3PqkaTdLHSurq82I8k0
YBDfbkvSG8zW3OEsTUGlET9F2tSGyVTOxLJ/nAL+fc2aafYfmxvBOoduS09Mo/tx
Vow8jhFVZ+if8SWV0ySWywjp7+HAQXS4vuvY7395jPyFOCBwludlPbGiTEF+byd9
VFZ9zxj4eiF0naU7zKkFUoJa4lbGTuFZQXa1ZQgnZZNaJ83H7Du6jEJT9N2DDoPX
ZX5330nRDkaDDy/dvLP4rJFm/J5n1FkchaYJH58CAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBTL1XOaG6kyx785wdpa1DjDTv3X4jAfBgNVHSMEGDAWgBREMvYbvT/RHX+s
uxVDp1GmWj9kwzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1JETDJHNzBfMFIxX3JMc1ZRNmRScGxvX1pNTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWEvNjY0ZWIxLWYyMjAtNDgwNC04YzVhLTkyNzg4NDBjNDk3MC8x
L3k5VnptaHVwTXNlX09jSGFXdFE0dzA3OTEtSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWEv
NjY0ZWIxLWYyMjAtNDgwNC04YzVhLTkyNzg4NDBjNDk3MC8xL1JETDJHNzBfMFIx
X3JMc1ZRNmRScGxvX1pNTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAFBTWgMEAbk97DANBgkqhkiG9w0B
AQsFAAOCAQEAGozHVnmltkawixzL0eXe3AeRVUsrWEHQ/7pMkPVoOOJADWZ5z+m3
rFAj4JTUlgO3jt40qwtqRZqQdnk0Ru3Zqs+nXWO2PtyWshvEwtulIdvx+q0qcAj7
dSw4RxArieP4HINi0/7XvQYjHLUUe3C95KqhdBh8fLcXSOOGcqaleulOTX4r9D2R
Eh2btscd+vN8wa0MxgjCD8Xk+RkOGDL702CEwsaILJSYAZJzOj3c7IQ6deYN0XK1
MtXFIJ05Qgw9Re2hmYwB1THwpzLNaIyNW08RBwy2F48Pqi7YbOG846jxNm5FYPBW
HIpUWPa/yD1MF0FnPjld3Xm8TlAFGtEnuA==
-----END CERTIFICATE-----
Generated at Tue Apr 22 06:13:41 2025 by rpki-client