Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/b27203-9d48-49a5-af25-49d40a13cbc2/1/ygWpjBJoMn-Yk5_aRXGs7upfOts.roa
File: ygWpjBJoMn-Yk5_aRXGs7upfOts.roa (raw, json)
Hash identifier: CVwZId1A8szLWsiY7ha+OD4hD+cbt0tiHNWjcEz4A6w=
Subject key identifier: CA:05:A9:8C:12:68:32:7F:98:93:9F:DA:45:71:AC:EE:EA:5F:3A:DB
Certificate issuer: /CN=c25cb7132c19f7d51f002ed4ad811aecf5b20f57
Certificate serial: 018AADCEDE346D8C972A140D2DA52FE974A7
Authority key identifier: C2:5C:B7:13:2C:19:F7:D5:1F:00:2E:D4:AD:81:1A:EC:F5:B2:0F:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wly3EywZ99UfAC7UrYEa7PWyD1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/b27203-9d48-49a5-af25-49d40a13cbc2/1/ygWpjBJoMn-Yk5_aRXGs7upfOts.roa
Signing time: Tue 19 Sep 2023 14:18:50 +0000
ROA not before: Tue 19 Sep 2023 14:18:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31083
IP address blocks: 193.68.119.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ad:ce:de:34:6d:8c:97:2a:14:0d:2d:a5:2f:e9:74:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c25cb7132c19f7d51f002ed4ad811aecf5b20f57
Validity
Not Before: Sep 19 14:18:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ca05a98c1268327f98939fda4571aceeea5f3adb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7b:a2:ac:1c:9b:4c:d1:48:11:7b:4a:62:cf:
d8:05:b5:58:d6:fa:65:c9:fe:c9:39:59:19:97:46:
41:49:25:d7:22:1e:82:b0:06:7b:ab:15:07:51:8c:
2e:4b:ae:ce:18:62:45:e4:00:73:0f:ac:fb:84:01:
7c:45:46:8a:b7:9c:ae:f1:51:7b:6c:23:09:85:fc:
dd:4f:74:bd:36:c7:28:b3:9a:51:41:60:c3:ed:2f:
f0:31:5f:bf:36:fe:a0:ac:c0:f9:c8:f7:65:ad:b7:
3b:f4:2e:ab:b5:7f:64:59:86:3a:54:fe:6e:cd:c3:
8d:a8:8a:0c:d4:e8:38:a8:fc:b5:a4:5e:f6:5e:54:
24:ef:d6:9f:5f:9f:7f:19:49:3e:82:e0:33:85:99:
4e:cc:cd:74:3f:6f:f6:d3:b7:1a:94:28:7d:f0:fa:
bf:e3:bc:fd:32:af:96:fe:e5:47:38:c9:95:53:81:
ec:09:2a:80:de:d1:76:e3:be:99:e2:8e:cc:97:f1:
e9:b3:cd:6e:e5:88:65:42:23:91:59:c4:60:3d:11:
1e:1b:01:98:b7:6c:61:e5:1c:39:17:80:07:99:d0:
07:96:89:e6:29:dc:d1:1b:f8:72:45:79:43:af:29:
fc:3f:4d:2b:26:15:a8:77:4b:23:89:37:92:c5:dc:
ca:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:05:A9:8C:12:68:32:7F:98:93:9F:DA:45:71:AC:EE:EA:5F:3A:DB
X509v3 Authority Key Identifier:
keyid:C2:5C:B7:13:2C:19:F7:D5:1F:00:2E:D4:AD:81:1A:EC:F5:B2:0F:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wly3EywZ99UfAC7UrYEa7PWyD1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b27203-9d48-49a5-af25-49d40a13cbc2/1/ygWpjBJoMn-Yk5_aRXGs7upfOts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b27203-9d48-49a5-af25-49d40a13cbc2/1/wly3EywZ99UfAC7UrYEa7PWyD1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.68.119.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:ef:3d:09:fb:84:66:58:54:29:1c:1e:bf:21:e7:ea:23:36:
63:b7:09:48:51:67:df:98:b2:93:56:2d:7b:c7:33:e8:ac:6e:
5a:7c:b7:d3:4c:98:6f:b2:db:b1:f2:08:21:aa:6f:0b:a4:31:
8e:13:3e:93:36:41:a6:18:5a:af:dc:0f:96:22:80:93:fa:fc:
08:97:65:33:7c:56:97:f1:20:da:16:f3:bc:1a:fe:4b:67:a7:
e9:84:d0:19:14:2b:6b:e2:f3:6e:34:52:67:a2:61:a6:d3:58:
c9:09:ca:7f:57:59:6a:5c:fd:bc:96:1b:3f:34:96:d9:e7:a5:
d6:96:bd:1e:15:36:fd:05:92:aa:9c:49:a8:7c:5a:fb:bc:a1:
d6:d3:9a:6d:49:4e:40:63:6f:cd:82:f0:f2:84:14:9d:26:60:
39:83:02:5c:92:64:57:0b:c4:d7:8c:28:16:41:11:7a:44:a6:
42:91:47:39:04:e3:13:57:0a:47:ca:73:ad:69:4b:65:c7:b4:
39:7f:0a:fb:2f:5e:70:b5:c3:1c:93:18:16:a8:95:51:41:d5:
dd:3f:78:18:9e:50:48:16:1e:4e:3f:c9:17:cf:c1:0e:64:5c:
4b:de:86:c1:27:f0:24:83:7c:f1:ba:61:17:bc:6c:42:a0:27:
38:97:02:77
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYqtzt40bYyXKhQNLaUv6XSnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyNWNiNzEzMmMxOWY3ZDUxZjAwMmVkNGFkODExYWVjZjVi
MjBmNTcwHhcNMjMwOTE5MTQxODUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYTA1YTk4YzEyNjgzMjdmOTg5MzlmZGE0NTcxYWNlZWVhNWYzYWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunuirBybTNFIEXtKYs/YBbVY1vpl
yf7JOVkZl0ZBSSXXIh6CsAZ7qxUHUYwuS67OGGJF5ABzD6z7hAF8RUaKt5yu8VF7
bCMJhfzdT3S9Nscos5pRQWDD7S/wMV+/Nv6grMD5yPdlrbc79C6rtX9kWYY6VP5u
zcONqIoM1Og4qPy1pF72XlQk79afX59/GUk+guAzhZlOzM10P2/207calCh98Pq/
47z9Mq+W/uVHOMmVU4HsCSqA3tF2476Z4o7Ml/Hps81u5YhlQiORWcRgPREeGwGY
t2xh5Rw5F4AHmdAHlonmKdzRG/hyRXlDryn8P00rJhWod0sjiTeSxdzKGwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMoFqYwSaDJ/mJOf2kVxrO7qXzrbMB8GA1UdIwQY
MBaAFMJctxMsGffVHwAu1K2BGuz1sg9XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2x5M0V5d1o5OVVmQUM3VXJZRWE3UFd5RDFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9iMjcyMDMtOWQ0OC00OWE1LWFmMjUt
NDlkNDBhMTNjYmMyLzEveWdXcGpCSm9Nbi1ZazVfYVJYR3M3dXBmT3RzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS9iMjcyMDMtOWQ0OC00OWE1LWFmMjUtNDlkNDBhMTNjYmMy
LzEvd2x5M0V5d1o5OVVmQUM3VXJZRWE3UFd5RDFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwUR3MA0G
CSqGSIb3DQEBCwUAA4IBAQC17z0J+4RmWFQpHB6/IefqIzZjtwlIUWffmLKTVi17
xzPorG5afLfTTJhvstux8gghqm8LpDGOEz6TNkGmGFqv3A+WIoCT+vwIl2UzfFaX
8SDaFvO8Gv5LZ6fphNAZFCtr4vNuNFJnomGm01jJCcp/V1lqXP28lhs/NJbZ56XW
lr0eFTb9BZKqnEmofFr7vKHW05ptSU5AY2/NgvDyhBSdJmA5gwJckmRXC8TXjCgW
QRF6RKZCkUc5BOMTVwpHynOtaUtlx7Q5fwr7L15wtcMckxgWqJVRQdXdP3gYnlBI
Fh5OP8kXz8EOZFxL3obBJ/Akg3zxumEXvGxCoCc4lwJ3
-----END CERTIFICATE-----
Generated at Thu Mar 13 19:59:42 2025 by rpki-client