Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/c9e02c-ad51-4314-90fc-4a7cc75e3e6f/1/yvs3EKgRpsZdJQcflxeZdMw6Ghc.roa
File: yvs3EKgRpsZdJQcflxeZdMw6Ghc.roa (raw, json)
Hash identifier: Hb60u1TUgKWJaEyTaXZ+z750xvl8RuiY9erbBqj06Rs=
Subject key identifier: CA:FB:37:10:A8:11:A6:C6:5D:25:07:1F:97:17:99:74:CC:3A:1A:17
Certificate issuer: /CN=d7f66a41bca687b2758cfc7bb1c5f4b3469ed870
Certificate serial: 04393513
Authority key identifier: D7:F6:6A:41:BC:A6:87:B2:75:8C:FC:7B:B1:C5:F4:B3:46:9E:D8:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1_ZqQbymh7J1jPx7scX0s0ae2HA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/c9e02c-ad51-4314-90fc-4a7cc75e3e6f/1/yvs3EKgRpsZdJQcflxeZdMw6Ghc.roa
Signing time: Sat 01 Jan 2022 10:00:53 +0000
ROA not before: Sat 01 Jan 2022 10:00:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213013
IP address blocks: 149.3.169.0/24 maxlen: 24
2a10:a800::/30 maxlen: 30
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70858003 (0x4393513)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7f66a41bca687b2758cfc7bb1c5f4b3469ed870
Validity
Not Before: Jan 1 10:00:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cafb3710a811a6c65d25071f97179974cc3a1a17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e5:7e:90:96:54:46:ae:50:16:46:07:4e:db:
6d:39:38:e6:68:d5:c8:97:49:6d:a8:15:06:21:4e:
27:df:7e:e5:01:4b:11:1e:66:c1:75:a3:60:26:ad:
1a:06:73:92:7b:10:2e:26:b1:e0:54:09:61:67:ed:
06:2e:39:70:80:08:84:a6:42:4d:79:69:84:a3:9a:
f2:ac:17:f8:12:4b:d9:45:30:47:62:8b:10:52:a3:
76:38:78:db:7c:f8:cc:8b:43:4e:45:7a:28:49:26:
48:a8:20:e3:a4:69:0d:8e:d3:a8:b3:9a:b6:eb:73:
25:4b:79:9e:7a:78:7b:b2:8a:48:88:8a:c5:89:ef:
7a:73:d8:58:46:0e:fc:7c:03:94:3b:47:f7:b6:d3:
27:10:42:7e:b1:af:8f:b6:cf:20:4a:b5:4b:f8:5c:
ac:86:0f:03:3e:16:21:b5:8b:ea:6b:04:ce:c2:79:
43:9b:4f:72:66:36:65:ad:d1:c6:1d:36:13:b8:20:
76:a4:01:4e:5f:25:0a:aa:9c:c0:ea:05:32:4a:74:
fd:22:3b:ff:a9:07:bc:cf:2d:3b:73:bc:27:c7:8c:
74:78:f4:b5:69:e1:b7:93:92:83:46:d9:ad:ca:b3:
68:0f:e9:17:78:b3:27:d6:17:ca:b6:16:1b:4c:cf:
e8:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:FB:37:10:A8:11:A6:C6:5D:25:07:1F:97:17:99:74:CC:3A:1A:17
X509v3 Authority Key Identifier:
keyid:D7:F6:6A:41:BC:A6:87:B2:75:8C:FC:7B:B1:C5:F4:B3:46:9E:D8:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1_ZqQbymh7J1jPx7scX0s0ae2HA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/c9e02c-ad51-4314-90fc-4a7cc75e3e6f/1/yvs3EKgRpsZdJQcflxeZdMw6Ghc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/c9e02c-ad51-4314-90fc-4a7cc75e3e6f/1/1_ZqQbymh7J1jPx7scX0s0ae2HA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.3.169.0/24
IPv6:
2a10:a800::/30
Signature Algorithm: sha256WithRSAEncryption
10:bd:5e:05:3f:e3:26:b8:95:28:96:11:f8:9b:58:cf:25:d7:
a2:55:a9:4d:1b:96:f2:93:0e:d8:4f:bf:ca:7f:38:32:e0:a9:
25:17:f5:3e:cf:cb:d2:8d:12:3b:70:7b:77:5b:83:47:da:0c:
90:a9:2f:a4:a0:7d:67:2e:ef:92:38:6f:82:fd:89:3f:d0:48:
97:7b:19:66:e8:3d:95:cd:cc:31:86:73:62:3c:83:b8:35:a9:
b8:c0:ac:29:d5:09:45:41:82:f0:2b:59:89:eb:90:90:6f:d6:
e1:3f:62:53:b7:e1:fb:b6:f3:fc:78:6c:82:ba:fc:a4:60:14:
06:c0:24:fb:31:7f:7b:b8:cd:43:a0:69:b7:89:0e:70:c3:3d:
78:4a:4d:42:56:91:7b:3b:2d:bf:d9:26:c1:22:52:50:a1:37:
1b:b1:39:13:d9:33:8b:1f:87:6b:d6:f3:4a:e7:d0:2b:82:7e:
62:29:93:02:51:e9:51:0f:2d:69:ba:96:85:3e:59:47:1c:c0:
6a:40:83:50:3c:7c:41:aa:d1:23:df:bb:2a:40:6e:56:f3:7d:
23:d5:b7:25:b9:c0:f2:fd:b0:bf:fb:7e:1c:4c:99:f2:ef:15:
69:eb:b6:5a:64:63:87:32:63:be:24:1e:d8:b4:1a:b4:f3:9c:
5d:0b:0e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:24:13 2025 by rpki-client