Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/eeb98f-cf11-449d-a9bb-8d44de54cfa7/1/Y959qonmd4iuEAGBcw9_B-0cpGM.roa
File: Y959qonmd4iuEAGBcw9_B-0cpGM.roa (raw, json)
Hash identifier: EIHfMePcdy32KLM0rnfRpY+rbue/MDvkCwPSpDnvwdA=
Subject key identifier: 63:DE:7D:AA:89:E6:77:88:AE:10:01:81:73:0F:7F:07:ED:1C:A4:63
Certificate issuer: /CN=96545bad39625aea67903f8183f9fbbaeac6c88d
Certificate serial: 01856C53F6350B697C729974CCE90363173E
Authority key identifier: 96:54:5B:AD:39:62:5A:EA:67:90:3F:81:83:F9:FB:BA:EA:C6:C8:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/llRbrTliWupnkD-Bg_n7uurGyI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/eeb98f-cf11-449d-a9bb-8d44de54cfa7/1/Y959qonmd4iuEAGBcw9_B-0cpGM.roa
Signing time: Sun 01 Jan 2023 07:55:19 +0000
ROA not before: Sun 01 Jan 2023 07:55:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 680
IP address blocks: 141.82.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:53:f6:35:0b:69:7c:72:99:74:cc:e9:03:63:17:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96545bad39625aea67903f8183f9fbbaeac6c88d
Validity
Not Before: Jan 1 07:55:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=63de7daa89e67788ae100181730f7f07ed1ca463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:74:e3:89:9a:a6:5f:50:e7:dc:c8:f3:35:c8:
49:d0:07:7b:84:14:6b:56:4a:d9:52:c4:d2:d3:29:
71:6f:cb:84:26:df:60:1b:0e:de:66:e8:52:7f:02:
5e:19:e4:38:a1:f9:b5:8e:d4:2c:e8:8d:be:31:29:
87:47:44:95:30:21:7c:66:5e:bf:2c:42:ef:47:bb:
d4:2b:23:a4:5d:77:57:74:a3:00:87:97:58:ad:a6:
57:54:eb:ab:aa:4c:45:45:b0:ca:85:44:72:88:95:
bf:3c:c0:17:87:ba:13:05:b6:6c:96:a7:78:fe:56:
5d:cb:a0:b7:cb:9f:5c:bd:24:df:44:27:66:c3:c4:
ea:48:01:d7:85:c9:d2:33:cc:da:f4:3a:40:5a:30:
ff:f7:06:12:f9:d8:87:d1:28:a2:c2:92:3d:8d:09:
6e:cd:d2:b7:7a:ff:16:78:38:73:c2:54:e0:27:a8:
62:b3:3e:17:d7:f7:22:ee:e5:af:9c:19:c8:d0:70:
a4:bc:7f:ca:4c:e7:f3:e3:ea:d0:c5:68:6e:ea:aa:
36:12:c0:0d:3c:41:40:e4:3a:94:98:60:20:e6:d4:
9e:32:0a:71:19:d7:0c:2f:cc:08:70:12:18:09:bd:
9c:5a:f8:4b:35:b6:df:f5:2b:59:2a:b1:29:13:d0:
72:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:DE:7D:AA:89:E6:77:88:AE:10:01:81:73:0F:7F:07:ED:1C:A4:63
X509v3 Authority Key Identifier:
keyid:96:54:5B:AD:39:62:5A:EA:67:90:3F:81:83:F9:FB:BA:EA:C6:C8:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/llRbrTliWupnkD-Bg_n7uurGyI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/eeb98f-cf11-449d-a9bb-8d44de54cfa7/1/Y959qonmd4iuEAGBcw9_B-0cpGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/eeb98f-cf11-449d-a9bb-8d44de54cfa7/1/llRbrTliWupnkD-Bg_n7uurGyI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.82.0.0/16
Signature Algorithm: sha256WithRSAEncryption
11:90:2a:cf:11:51:33:38:7c:f4:ca:d5:c2:94:43:1e:a5:2f:
81:ca:94:7a:74:72:55:61:42:9a:7e:4c:00:65:55:16:9c:66:
c4:f1:a6:51:4e:38:9d:79:60:e7:c7:54:a4:2b:d2:55:ef:c9:
1d:7c:7b:ea:a6:45:a1:0e:91:77:2a:53:39:dc:e4:5a:e5:9a:
1b:a0:12:6b:69:c1:f3:3f:a0:98:07:3f:3d:9f:ce:fd:ae:75:
9f:87:0b:c2:5b:c4:94:3d:b9:31:72:8c:36:5a:54:c1:da:0e:
af:3e:a1:9b:f0:42:f3:9a:9a:75:3a:28:a7:b5:b4:17:5b:3f:
86:0e:87:42:b3:23:3f:40:5c:f1:71:c9:8c:fa:63:c4:8f:df:
bc:3a:9c:25:05:be:22:8f:a1:65:f0:3c:5f:5f:0a:85:6a:d3:
62:6a:f9:61:a4:ad:09:82:69:ba:55:31:8f:a0:15:f9:a8:49:
dd:f5:0f:11:88:80:82:9f:d0:eb:64:87:6a:4d:d0:10:58:87:
b8:42:13:52:81:09:c6:ee:9f:66:8a:b8:40:c9:60:6f:87:93:
8d:ea:25:6c:1d:e0:1d:a0:06:c7:c3:d9:17:4f:84:dc:f6:a8:
97:5c:35:10:b2:b3:02:cf:48:d9:ff:15:cd:4b:02:86:f5:45:
06:95:e6:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:45:03 2025 by rpki-client