Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/YyWSvhKf_QXi8i4zX7sViNOC1QM.roa
File: YyWSvhKf_QXi8i4zX7sViNOC1QM.roa (raw, json)
Hash identifier: I985B/Qa6mP/STVvoznWd3vfl10dnmL4EmwcDSzbvCM=
Subject key identifier: 63:25:92:BE:12:9F:FD:05:E2:F2:2E:33:5F:BB:15:88:D3:82:D5:03
Certificate issuer: /CN=1b623dba62b857ca73d8a80a11990f71e04e7db6
Certificate serial: FC58
Authority key identifier: 1B:62:3D:BA:62:B8:57:CA:73:D8:A8:0A:11:99:0F:71:E0:4E:7D:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2I9umK4V8pz2KgKEZkPceBOfbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/YyWSvhKf_QXi8i4zX7sViNOC1QM.roa
Signing time: Fri 04 Mar 2022 18:36:21 +0000
ROA not before: Fri 04 Mar 2022 18:36:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6830
IP address blocks: 195.43.153.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64600 (0xfc58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b623dba62b857ca73d8a80a11990f71e04e7db6
Validity
Not Before: Mar 4 18:36:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=632592be129ffd05e2f22e335fbb1588d382d503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:58:c0:20:c5:4e:73:2a:05:7d:7e:64:f7:dd:
48:8e:73:12:8d:92:92:bd:2b:75:95:15:0e:e5:ce:
5b:bf:16:bb:4f:91:54:bb:f8:51:05:9b:7f:cf:df:
01:64:55:ac:5a:ad:c3:25:a4:51:59:a1:16:b8:37:
d4:9f:12:fe:c8:c1:6f:c5:b3:39:5d:0d:8a:ca:a4:
69:26:61:09:4f:11:59:c9:cb:a4:84:e1:11:e6:ac:
2b:18:16:0e:7b:a5:eb:30:f7:c1:04:2c:86:95:6d:
7e:42:89:5b:71:f9:62:a5:21:50:a4:43:ac:78:09:
6e:08:4f:34:2c:cd:83:c3:c1:9b:36:0c:9a:4d:a7:
39:90:5a:98:b7:59:8e:9c:d6:ea:3f:ec:c1:c4:6a:
c3:35:be:2a:2b:37:a3:0a:d5:55:67:90:29:b9:64:
4b:34:5f:8e:36:2c:ac:09:4a:51:d0:ef:b6:17:40:
4e:59:62:70:09:80:d1:fc:99:64:3c:2e:ac:e5:a4:
c5:1c:cb:a0:77:80:0f:74:e0:59:25:23:ca:3d:28:
2d:95:92:f7:1e:40:2d:ae:9d:98:56:e8:00:27:1d:
1b:32:a9:30:19:85:89:c1:0e:cc:5c:4f:01:d8:d8:
cf:55:e9:99:ea:52:84:d1:62:39:45:d4:c9:55:59:
68:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:25:92:BE:12:9F:FD:05:E2:F2:2E:33:5F:BB:15:88:D3:82:D5:03
X509v3 Authority Key Identifier:
keyid:1B:62:3D:BA:62:B8:57:CA:73:D8:A8:0A:11:99:0F:71:E0:4E:7D:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2I9umK4V8pz2KgKEZkPceBOfbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/YyWSvhKf_QXi8i4zX7sViNOC1QM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.43.153.0/24
Signature Algorithm: sha256WithRSAEncryption
42:66:5f:24:b5:8f:c8:a0:b8:43:e8:13:a8:ad:98:aa:ef:fa:
1a:45:37:7f:45:56:9b:ab:94:c2:b0:65:54:a1:2a:e6:a8:74:
b8:2c:b6:1f:45:7a:8d:f4:94:03:96:77:fc:bd:e1:a4:61:c3:
37:ad:de:8c:e5:88:15:6e:a9:41:4e:03:c7:c7:47:18:0b:5d:
1a:bd:bd:6d:90:6e:7a:ab:fd:40:89:93:42:d4:b8:df:d2:d7:
c1:90:58:bc:5c:d3:bc:96:a2:17:15:46:05:ab:96:43:e1:09:
f2:c0:57:1a:e9:64:59:dc:a9:c1:20:4d:c5:f6:b2:80:b4:ed:
3d:e8:af:f7:cf:5b:4f:70:73:68:c5:63:b1:b4:c6:09:f5:df:
a8:64:67:84:a5:b0:06:ec:c0:9a:e0:85:13:0b:c3:db:9d:61:
6b:01:e3:a7:72:0b:42:0c:3b:60:71:1c:f2:55:2e:5c:0b:3d:
39:f0:1c:28:e4:eb:86:14:de:15:57:46:4a:3a:1c:d2:3e:8e:
83:9f:4a:cd:97:c7:7a:6c:f7:2f:a6:ed:fd:ea:be:86:7a:a1:
dc:b1:a2:63:54:ae:a5:9f:6a:3d:19:c9:19:b6:c7:9c:54:3d:
1f:da:34:11:b9:6f:8a:e5:d5:53:86:2a:a8:21:7f:31:2f:8e:
ce:0f:59:56
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDAPxYMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDFi
NjIzZGJhNjJiODU3Y2E3M2Q4YTgwYTExOTkwZjcxZTA0ZTdkYjYwHhcNMjIwMzA0
MTgzNjIxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg2MzI1OTJiZTEyOWZm
ZDA1ZTJmMjJlMzM1ZmJiMTU4OGQzODJkNTAzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA3VjAIMVOcyoFfX5k991IjnMSjZKSvSt1lRUO5c5bvxa7T5FU
u/hRBZt/z98BZFWsWq3DJaRRWaEWuDfUnxL+yMFvxbM5XQ2KyqRpJmEJTxFZycuk
hOER5qwrGBYOe6XrMPfBBCyGlW1+QolbcflipSFQpEOseAluCE80LM2Dw8GbNgya
Tac5kFqYt1mOnNbqP+zBxGrDNb4qKzejCtVVZ5ApuWRLNF+ONiysCUpR0O+2F0BO
WWJwCYDR/JlkPC6s5aTFHMugd4APdOBZJSPKPSgtlZL3HkAtrp2YVugAJx0bMqkw
GYWJwQ7MXE8B2NjPVemZ6lKE0WI5RdTJVVloVwIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFGMlkr4Sn/0F4vIuM1+7FYjTgtUDMB8GA1UdIwQYMBaAFBtiPbpiuFfKc9io
ChGZD3HgTn22MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
RzJJOXVtSzRWOHB6MktnS0Vaa1BjZUJPZmJZLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC82NC8wYTBlNGQtNGU3NS00OWE1LWJkMGMtMWE1Yzc2MzU1ODhiLzEv
WXlXU3ZoS2ZfUVhpOGk0elg3c1ZpTk9DMVFNLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8w
YTBlNGQtNGU3NS00OWE1LWJkMGMtMWE1Yzc2MzU1ODhiLzEvRzJJOXVtSzRWOHB6
MktnS0Vaa1BjZUJPZmJZLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwyuZMA0GCSqGSIb3DQEBCwUAA4IB
AQBCZl8ktY/IoLhD6BOorZiq7/oaRTd/RVabq5TCsGVUoSrmqHS4LLYfRXqN9JQD
lnf8veGkYcM3rd6M5YgVbqlBTgPHx0cYC10avb1tkG56q/1AiZNC1Ljf0tfBkFi8
XNO8lqIXFUYFq5ZD4QnywFca6WRZ3KnBIE3F9rKAtO096K/3z1tPcHNoxWOxtMYJ
9d+oZGeEpbAG7MCa4IUTC8PbnWFrAeOncgtCDDtgcRzyVS5cCz058Bwo5OuGFN4V
V0ZKOhzSPo6Dn0rNl8d6bPcvpu396r6GeqHcsaJjVK6ln2o9GckZtsecVD0f2jQR
uW+K5dVThiqoIX8xL47OD1lW
-----END CERTIFICATE-----
Generated at Tue Apr 8 10:51:13 2025 by rpki-client