Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/YraglV2BooCbM8w_oYJFbZnbY8M.roa
File: YraglV2BooCbM8w_oYJFbZnbY8M.roa (raw, json)
Hash identifier: gUN3aOWFg94JlsOaEMC6b63svYSgFAK3FOsjoGzIhvk=
Subject key identifier: 62:B6:A0:95:5D:81:A2:80:9B:33:CC:3F:A1:82:45:6D:99:DB:63:C3
Certificate issuer: /CN=679252b9e21df8176cc538027895f7f4585666ab
Certificate serial: 0182FDCB639E5DE92DBF11EDEEC26FA61841
Authority key identifier: 67:92:52:B9:E2:1D:F8:17:6C:C5:38:02:78:95:F7:F4:58:56:66:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5JSueId-BdsxTgCeJX39FhWZqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/YraglV2BooCbM8w_oYJFbZnbY8M.roa
Signing time: Fri 02 Sep 2022 10:42:21 +0000
ROA not before: Fri 02 Sep 2022 10:42:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51468
IP address blocks: 91.221.196.0/23 maxlen: 23
193.202.110.0/24 maxlen: 24
104.37.32.0/21 maxlen: 21
195.206.121.0/24 maxlen: 24
185.164.12.0/22 maxlen: 22
185.10.10.0/24 maxlen: 24
77.111.240.0/22 maxlen: 22
185.10.11.0/24 maxlen: 24
91.198.169.0/24 maxlen: 24
185.10.8.0/23 maxlen: 23
195.47.247.0/24 maxlen: 24
46.30.208.0/21 maxlen: 21
2001:67c:28cc::/48 maxlen: 48
2a02:2350::/32 maxlen: 32
2a03:53c0::/32 maxlen: 32
2001:67c:3c0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:fd:cb:63:9e:5d:e9:2d:bf:11:ed:ee:c2:6f:a6:18:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=679252b9e21df8176cc538027895f7f4585666ab
Validity
Not Before: Sep 2 10:42:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62b6a0955d81a2809b33cc3fa182456d99db63c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:b2:48:1c:61:e2:5e:35:47:69:cf:43:da:d2:
25:c1:0b:de:fe:96:be:fe:de:e3:43:6f:d9:1f:0c:
30:3a:50:70:6a:70:40:13:1d:3b:f3:ca:91:f8:36:
69:c7:ee:ff:75:2b:5f:30:49:67:af:ce:f1:ce:a6:
6b:53:16:3a:90:8c:8b:7c:6f:bd:b9:e4:9d:6f:59:
c5:b3:8d:99:7d:7d:93:63:90:1e:48:c2:3d:51:91:
26:f4:2b:ae:0b:db:6d:a5:c8:64:42:0a:83:af:61:
c2:5a:40:ec:9e:b7:63:ec:b3:62:7f:64:9a:8b:49:
d6:db:cc:61:8a:b6:b2:4a:9c:16:b1:72:fa:34:07:
8d:a6:82:48:ea:38:6d:32:9c:bb:6b:b7:fa:0c:f2:
7b:13:33:e1:4c:20:ec:93:7b:33:31:f5:7a:f5:fc:
df:94:61:c5:95:d4:22:9b:73:c2:5c:ab:c4:bd:0b:
d3:b7:12:f0:59:09:7c:43:1d:5a:67:01:fd:bd:ca:
82:dc:98:cb:44:48:e7:e2:d9:52:00:2e:51:a9:72:
27:ac:67:40:e0:b8:fb:5e:7f:d7:ee:48:04:16:ee:
37:ac:00:ff:7a:c4:06:c6:ab:a0:16:94:57:46:bb:
56:c1:55:25:24:f9:9a:e6:5a:fc:99:2e:8d:5c:15:
bb:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:B6:A0:95:5D:81:A2:80:9B:33:CC:3F:A1:82:45:6D:99:DB:63:C3
X509v3 Authority Key Identifier:
keyid:67:92:52:B9:E2:1D:F8:17:6C:C5:38:02:78:95:F7:F4:58:56:66:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5JSueId-BdsxTgCeJX39FhWZqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/YraglV2BooCbM8w_oYJFbZnbY8M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.30.208.0/21
77.111.240.0/22
91.198.169.0/24
91.221.196.0/23
104.37.32.0/21
185.10.8.0/22
185.164.12.0/22
193.202.110.0/24
195.47.247.0/24
195.206.121.0/24
IPv6:
2001:67c:3c0::/48
2001:67c:28cc::/48
2a02:2350::/32
2a03:53c0::/32
Signature Algorithm: sha256WithRSAEncryption
22:b3:70:c2:dc:57:e9:c5:0d:86:f4:44:b2:37:9f:a0:68:b1:
f7:92:05:75:ed:cf:d8:da:2a:90:c4:e1:c9:e4:6b:6e:08:02:
07:ab:1c:79:8a:e1:ee:6b:3b:43:40:41:d4:63:a1:fe:96:14:
d8:17:17:43:ea:41:e7:59:db:0b:ac:fc:16:de:3a:5c:46:93:
60:2c:67:54:d2:d1:5a:50:af:90:0e:33:19:cb:13:31:3c:82:
f5:f3:81:20:21:bf:98:ce:ab:72:11:3b:f2:e2:37:b4:c8:53:
99:23:51:f2:71:c1:6b:d3:37:60:36:59:d3:70:1b:7c:0d:cb:
34:e6:42:fc:ac:a9:e4:23:74:67:4a:93:50:58:5a:b0:6c:bb:
85:20:c3:c0:c8:34:ab:3d:0d:86:e6:8b:05:24:f1:6f:13:da:
74:b6:39:46:9b:27:db:67:08:b9:1e:62:34:c0:0f:00:c0:47:
31:f0:13:c6:32:91:47:58:ba:da:da:9b:6a:45:47:ad:1d:c0:
82:31:77:a8:f0:3d:b6:6d:b6:97:20:8a:bd:a9:33:8c:70:b7:
58:60:12:44:43:a6:a5:51:42:f9:1e:7b:8a:4b:ec:cc:92:0d:
81:17:55:44:d4:a2:47:52:12:ae:08:e2:d8:8e:bb:74:40:41:
fb:8f:b4:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:40:19 2025 by rpki-client