Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/YCvyKZzfuhSt-UB_BB41WUPq--E.roa
File: YCvyKZzfuhSt-UB_BB41WUPq--E.roa (raw, json)
Hash identifier: L4yR4Mr4c0UNBFt0eLdoaoEy4kICzcre0WERPb7c1B4=
Subject key identifier: 60:2B:F2:29:9C:DF:BA:14:AD:F9:40:7F:04:1E:35:59:43:EA:FB:E1
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 018570F0ADB64EFFF472F0A1FDB57B43C7AD
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/YCvyKZzfuhSt-UB_BB41WUPq--E.roa
Signing time: Mon 02 Jan 2023 05:24:59 +0000
ROA not before: Mon 02 Jan 2023 05:24:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60106
IP address blocks: 81.15.167.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:ad:b6:4e:ff:f4:72:f0:a1:fd:b5:7b:43:c7:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 2 05:24:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=602bf2299cdfba14adf9407f041e355943eafbe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f9:15:0e:2f:9f:cb:6f:3e:05:02:15:d8:80:
65:2a:9e:90:4e:a4:17:88:d5:cb:9f:b9:a8:f0:f2:
d5:ae:a0:f5:3d:57:c1:28:d0:d6:00:cc:c5:5b:aa:
ba:e7:ff:d9:38:98:c5:0e:7c:25:c5:f9:11:de:82:
10:1b:88:f4:ee:68:c6:d8:33:33:0a:75:8d:f4:09:
51:ef:f6:94:df:f5:6e:0f:e1:ff:6c:85:c4:a1:82:
26:01:b0:73:23:95:45:9f:b2:92:ab:df:2e:c7:44:
5d:18:d5:c9:e5:30:65:46:ed:aa:ec:50:26:94:50:
1c:3e:a0:77:ba:13:4c:d8:86:96:07:17:5c:84:6d:
8f:94:6a:2f:42:ca:8a:96:42:63:f1:71:9d:1e:4b:
60:22:64:ae:8a:61:2a:34:46:39:61:f5:76:e0:a8:
73:48:ea:f2:8f:8b:01:7a:74:19:54:8a:a6:96:4e:
56:e7:f9:77:97:5e:94:9f:96:45:e6:ec:9f:94:8b:
93:3a:a7:9e:b8:fd:91:07:7e:db:13:3e:82:3f:03:
61:5e:e1:16:ea:bc:b5:99:f2:47:b3:50:ef:40:d9:
35:c5:ee:0d:f1:3c:76:05:10:51:03:0a:ed:c9:28:
21:58:b5:71:4f:52:01:7c:ff:0a:78:c9:dc:28:32:
89:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:2B:F2:29:9C:DF:BA:14:AD:F9:40:7F:04:1E:35:59:43:EA:FB:E1
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/YCvyKZzfuhSt-UB_BB41WUPq--E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.15.167.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:34:54:ac:07:22:14:d9:d7:ad:b9:73:fc:89:e9:08:2b:b1:
cd:81:c4:f3:a2:c1:fb:bb:06:a1:11:f3:5a:46:6f:dd:64:99:
d7:a8:c4:ca:65:96:f1:49:bf:3c:d6:04:8c:9a:ff:16:00:0a:
a7:0b:0e:32:e6:b0:07:40:ed:4a:2a:61:97:89:7e:92:97:cc:
84:c7:65:2a:8b:b0:0b:3b:0c:17:52:38:53:04:9d:3c:39:45:
ae:2b:03:7b:da:69:8c:db:1c:ad:2a:e4:84:da:36:ed:c4:a4:
a1:29:a9:ff:71:5f:b5:d6:4c:f1:0f:21:8d:dd:b9:5d:ab:55:
8f:bc:1a:63:b3:1b:0c:1e:7b:d4:6c:af:43:f3:81:76:9c:d4:
b6:44:63:03:d1:d4:82:5b:b4:f6:d2:ef:80:ca:d5:5b:7c:f4:
fc:14:c4:96:37:f2:4b:c5:40:58:30:92:ca:ee:41:98:46:0c:
ac:0a:ae:f2:20:67:d2:f0:55:77:8a:66:96:14:69:69:2e:95:
33:cf:c5:52:01:82:f4:7a:f5:52:5e:d6:1b:58:52:87:d5:0a:
13:f4:1f:7d:64:42:b5:4b:ae:59:84:e8:53:62:c5:c3:12:9a:
cb:c9:35:15:ac:ba:4a:a4:a7:42:4e:dd:25:1a:db:62:28:49:
fc:e3:a2:31
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVw8K22Tv/0cvCh/bV7Q8etMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0NjgzNGU2ODg5MGYzOTg2YTFiMDQ1N2NlMGY1NGFlMDNj
MmQ3NmIwHhcNMjMwMTAyMDUyNDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MDJiZjIyOTljZGZiYTE0YWRmOTQwN2YwNDFlMzU1OTQzZWFmYmUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/kVDi+fy28+BQIV2IBlKp6QTqQX
iNXLn7mo8PLVrqD1PVfBKNDWAMzFW6q65//ZOJjFDnwlxfkR3oIQG4j07mjG2DMz
CnWN9AlR7/aU3/VuD+H/bIXEoYImAbBzI5VFn7KSq98ux0RdGNXJ5TBlRu2q7FAm
lFAcPqB3uhNM2IaWBxdchG2PlGovQsqKlkJj8XGdHktgImSuimEqNEY5YfV24Khz
SOryj4sBenQZVIqmlk5W5/l3l16Un5ZF5uyflIuTOqeeuP2RB37bEz6CPwNhXuEW
6ry1mfJHs1DvQNk1xe4N8Tx2BRBRAwrtySghWLVxT1IBfP8KeMncKDKJ2wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGAr8imc37oUrflAfwQeNVlD6vvhMB8GA1UdIwQY
MBaAFFRoNOaIkPOYahsEV84PVK4DwtdrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQt
NTI3NjZiMjRiYWE0LzEvWUN2eUtaemZ1aFN0LVVCX0JCNDFXVVBxLS1FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQtNTI3NjZiMjRiYWE0
LzEvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUQ+nMA0G
CSqGSIb3DQEBCwUAA4IBAQAvNFSsByIU2detuXP8iekIK7HNgcTzosH7uwahEfNa
Rm/dZJnXqMTKZZbxSb881gSMmv8WAAqnCw4y5rAHQO1KKmGXiX6Sl8yEx2Uqi7AL
OwwXUjhTBJ08OUWuKwN72mmM2xytKuSE2jbtxKShKan/cV+11kzxDyGN3bldq1WP
vBpjsxsMHnvUbK9D84F2nNS2RGMD0dSCW7T20u+AytVbfPT8FMSWN/JLxUBYMJLK
7kGYRgysCq7yIGfS8FV3imaWFGlpLpUzz8VSAYL0evVSXtYbWFKH1QoT9B99ZEK1
S65ZhOhTYsXDEprLyTUVrLpKpKdCTt0lGttiKEn846Ix
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:03:49 2025 by rpki-client