Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/53f458-761a-4382-827c-494f08c21497/1/YXFFwwN69QBDBylUHj-gyOC1vcM.roa
File: YXFFwwN69QBDBylUHj-gyOC1vcM.roa (raw, json)
Hash identifier: 4Ze0lBRdZg+JKN6Sy/LbgeCPtd5jXffJL/WLN797h7s=
Subject key identifier: 61:71:45:C3:03:7A:F5:00:43:07:29:54:1E:3F:A0:C8:E0:B5:BD:C3
Certificate issuer: /CN=afd23cc55aeeaf337edb73eae25b59097a27784c
Certificate serial: 018B441592B5CB8AF5D5EFEC56A5BD4FC5FF
Authority key identifier: AF:D2:3C:C5:5A:EE:AF:33:7E:DB:73:EA:E2:5B:59:09:7A:27:78:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r9I8xVrurzN-23Pq4ltZCXoneEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/53f458-761a-4382-827c-494f08c21497/1/YXFFwwN69QBDBylUHj-gyOC1vcM.roa
Signing time: Wed 18 Oct 2023 18:39:06 +0000
ROA not before: Wed 18 Oct 2023 18:39:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25358
IP address blocks: 185.25.40.0/22 maxlen: 24
109.70.168.0/21 maxlen: 24
193.189.104.0/23 maxlen: 24
195.140.148.0/22 maxlen: 24
2a00:14e8::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:44:15:92:b5:cb:8a:f5:d5:ef:ec:56:a5:bd:4f:c5:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afd23cc55aeeaf337edb73eae25b59097a27784c
Validity
Not Before: Oct 18 18:39:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=617145c3037af500430729541e3fa0c8e0b5bdc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0c:1b:11:76:03:5a:fd:7d:c5:5b:17:29:82:
25:c1:f0:fa:20:29:34:79:82:0d:79:ce:e5:da:d0:
3f:31:7d:61:17:85:9c:3f:45:12:06:cd:98:eb:72:
7e:01:0b:6e:d1:78:8a:20:df:c3:0f:f8:c6:e1:2b:
a6:31:29:8a:12:07:68:66:28:12:e2:a5:21:56:ca:
81:47:4e:c3:0d:b0:04:0a:c6:20:a4:f5:62:c7:78:
26:12:36:f2:15:ec:8c:5d:e5:fe:df:76:a5:b0:36:
ca:6f:55:46:09:f0:48:89:ca:8a:bc:59:fc:05:f9:
70:e4:76:98:14:4c:15:b7:e7:3c:49:c8:6f:ce:50:
87:31:18:0e:94:92:b0:b6:39:6d:20:bb:d8:76:28:
dc:f6:90:9a:06:4e:3e:f6:7a:32:62:a8:e1:9d:27:
52:30:8c:c6:26:5c:9e:f6:53:1c:64:4a:1c:41:32:
60:35:c8:62:6d:d1:69:f9:d5:24:6f:e9:2f:84:86:
64:91:2d:64:19:1c:6f:fa:ac:3f:2e:bf:e0:d6:fa:
98:eb:f7:12:0c:31:71:fc:e6:cd:df:93:1f:59:f7:
62:d3:9b:9d:a7:f2:0d:0a:ab:aa:7e:3d:fc:35:e3:
2e:26:6d:13:73:c7:68:cb:16:bd:b5:57:21:ca:4d:
fe:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:71:45:C3:03:7A:F5:00:43:07:29:54:1E:3F:A0:C8:E0:B5:BD:C3
X509v3 Authority Key Identifier:
keyid:AF:D2:3C:C5:5A:EE:AF:33:7E:DB:73:EA:E2:5B:59:09:7A:27:78:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r9I8xVrurzN-23Pq4ltZCXoneEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/53f458-761a-4382-827c-494f08c21497/1/YXFFwwN69QBDBylUHj-gyOC1vcM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/53f458-761a-4382-827c-494f08c21497/1/r9I8xVrurzN-23Pq4ltZCXoneEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.70.168.0/21
185.25.40.0/22
193.189.104.0/23
195.140.148.0/22
IPv6:
2a00:14e8::/29
Signature Algorithm: sha256WithRSAEncryption
ba:5f:eb:78:bc:57:66:3c:05:13:05:98:c7:4c:c2:e6:cc:17:
0f:af:a6:18:17:fb:67:4f:16:2a:52:d9:e7:ea:e9:c4:7c:9f:
54:19:65:56:77:61:e1:12:df:62:a3:a6:37:8f:74:40:4a:d5:
5c:8a:2b:e9:96:6f:f7:76:5e:1c:62:6e:11:64:31:79:09:ed:
89:33:8b:80:17:55:90:d0:ee:03:b0:ec:53:23:89:f6:18:b8:
d5:f6:c9:a0:0e:e8:10:09:70:37:81:c0:56:b8:66:44:40:d8:
92:52:f4:8f:bb:4e:fd:ad:2c:c7:4e:cd:2c:35:c2:d9:6c:dd:
8f:e1:0c:44:96:e8:e4:37:d9:1c:c8:d2:25:fe:95:66:88:8f:
66:24:32:c2:95:5f:a0:de:2e:80:1d:51:c3:bb:99:f7:5e:50:
41:bf:57:b8:50:81:b3:a4:03:b3:8d:2b:10:be:a8:be:47:80:
06:79:26:e8:a1:0b:cd:a2:42:c1:bf:99:55:fc:f9:c9:18:e9:
d7:c0:99:0e:56:c7:d5:78:47:97:55:13:5d:42:39:a9:73:b9:
15:f7:d7:39:77:73:9d:5e:4d:bd:46:05:62:d3:64:f8:68:67:
85:0f:3a:63:52:f2:0f:dc:93:1b:14:e2:11:91:5a:47:2a:4f:
c8:3a:f8:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:29:24 2025 by rpki-client