Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/yTiNffbZUOH-lQoDDBNULDWVe74.roa
File: yTiNffbZUOH-lQoDDBNULDWVe74.roa (raw, json)
Hash identifier: Wz55fFivbOr4484B67HlHUqEXP+KHc9nBWMY2sT335Y=
Subject key identifier: C9:38:8D:7D:F6:D9:50:E1:FE:95:0A:03:0C:13:54:2C:35:95:7B:BE
Certificate issuer: /CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6
Certificate serial: 01856B8A0FEEB641B0DAB685E7B69AE0F728
Authority key identifier: A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/yTiNffbZUOH-lQoDDBNULDWVe74.roa
Signing time: Sun 01 Jan 2023 04:14:47 +0000
ROA not before: Sun 01 Jan 2023 04:14:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44668
IP address blocks: 185.11.80.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:8a:0f:ee:b6:41:b0:da:b6:85:e7:b6:9a:e0:f7:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6
Validity
Not Before: Jan 1 04:14:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c9388d7df6d950e1fe950a030c13542c35957bbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a4:17:7a:46:96:51:f1:99:bd:a6:f2:63:cd:
27:05:a0:6e:2d:e1:78:cc:37:b2:27:81:6c:d8:f6:
6f:6a:9c:c8:64:88:5f:33:d2:26:07:45:e2:42:1a:
9e:18:84:cc:ee:71:1f:d2:4d:95:1f:19:8b:e8:92:
d8:76:0a:f8:33:c4:92:69:37:7f:5c:06:47:d4:86:
e1:4f:95:85:93:68:60:15:57:53:4a:5b:7e:f6:c6:
17:90:cf:e4:bc:3d:b3:e4:32:2e:d4:f2:4f:79:c2:
8a:59:8d:63:b3:18:e1:f2:8e:ab:75:95:3a:fa:d6:
ab:78:39:cd:c9:20:15:e1:13:cc:b2:d6:e5:f6:6c:
45:77:2c:29:07:07:60:8f:77:0d:1a:5c:ed:6c:a8:
4d:a7:eb:0a:7f:88:6c:bd:99:5a:63:62:05:80:4f:
9e:79:73:52:c6:6e:15:01:8c:4b:bb:c2:ce:02:d3:
4d:ae:b0:bb:27:f5:22:76:d2:8d:08:a6:5f:81:88:
82:0e:f2:77:1a:52:2b:58:a5:00:65:fc:44:d4:ac:
f3:b2:d2:72:d2:52:ab:e9:02:ad:09:4b:8b:c3:b1:
c3:38:92:d8:01:63:56:7e:50:15:68:fe:9e:20:fb:
2f:3e:23:60:db:e2:56:b0:f3:a2:83:73:2d:13:b1:
ac:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:38:8D:7D:F6:D9:50:E1:FE:95:0A:03:0C:13:54:2C:35:95:7B:BE
X509v3 Authority Key Identifier:
keyid:A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/yTiNffbZUOH-lQoDDBNULDWVe74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.11.80.0/22
Signature Algorithm: sha256WithRSAEncryption
03:c6:aa:68:23:eb:e8:d3:da:3b:d8:20:90:8a:6e:bd:d2:4d:
4c:10:e1:5a:f0:19:01:e4:46:14:2d:81:cc:cf:26:e8:43:25:
6d:9d:32:05:f5:32:c2:38:2a:fc:ea:46:8c:e1:9b:e9:66:48:
41:1c:16:1e:58:e1:e6:dc:2e:ca:2d:b4:eb:ad:51:87:b6:aa:
92:f1:6c:e9:1f:30:50:9b:b8:a9:e0:a6:e1:35:a9:c3:b0:ce:
27:02:3a:bd:4a:f9:e8:5e:13:3c:1c:eb:b0:79:bb:8f:ef:31:
f3:39:a7:e0:21:d9:5d:d5:fe:5a:a3:fb:66:14:f6:68:26:42:
ec:c4:29:ea:6b:b4:32:e1:10:ce:9b:a0:0b:34:25:97:a9:ad:
b1:43:9c:6d:f9:cb:e7:a2:a6:0e:43:92:53:26:9b:fb:63:72:
5a:84:c4:d6:ca:4d:59:e7:00:49:7d:5d:6f:47:6f:fc:2e:5d:
6e:3f:5a:72:65:2e:c1:4e:23:7f:1a:1f:a5:d6:03:57:f9:39:
de:ac:db:7e:c9:48:ee:ef:c6:b9:2f:55:db:34:7c:f2:ff:a3:
a2:80:9d:d4:78:c5:9a:f8:9c:a3:0d:b2:4e:ac:2d:55:4c:73:
d9:7b:f2:cc:50:2f:08:6a:09:cc:9c:9c:ea:f5:77:43:8d:ea:
05:ce:9e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:38:18 2025 by rpki-client