Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/YKRzgzsadz21NUAKDjjzqTR-Irg.roa
File: YKRzgzsadz21NUAKDjjzqTR-Irg.roa (raw, json)
Hash identifier: i03ygZso3/KVwXYz0RLhTYMkJst9XBiQJ55LyHwcZ00=
Subject key identifier: 60:A4:73:83:3B:1A:77:3D:B5:35:40:0A:0E:38:F3:A9:34:7E:22:B8
Certificate issuer: /CN=7b08e16878744b88b84203eefe2d77a87dab90b1
Certificate serial: BF3465
Authority key identifier: 7B:08:E1:68:78:74:4B:88:B8:42:03:EE:FE:2D:77:A8:7D:AB:90:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ewjhaHh0S4i4QgPu_i13qH2rkLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/YKRzgzsadz21NUAKDjjzqTR-Irg.roa
Signing time: Wed 11 May 2022 10:17:15 +0000
ROA not before: Wed 11 May 2022 10:17:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34903
IP address blocks: 45.130.208.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12530789 (0xbf3465)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b08e16878744b88b84203eefe2d77a87dab90b1
Validity
Not Before: May 11 10:17:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=60a473833b1a773db535400a0e38f3a9347e22b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:72:a1:3b:c3:8f:4d:bf:2d:a4:e1:1b:f1:91:
fa:a2:80:aa:de:13:88:7d:aa:c4:be:1f:c6:03:3e:
05:a7:3e:fa:de:f9:85:89:5f:bf:f1:67:ec:3c:90:
5e:48:99:1e:6d:d7:f9:b0:7e:7b:76:f3:a0:49:7f:
69:17:08:fb:ad:58:d7:ff:4b:17:e3:78:52:0a:f3:
59:aa:f0:c9:af:cf:2b:22:3f:48:cc:a7:4d:3c:53:
a5:08:16:09:b4:fc:d3:e2:2c:05:46:1d:fc:1a:85:
22:70:a1:e6:6f:81:28:af:11:5e:72:07:38:3e:c1:
0a:0e:42:53:50:7d:2f:d1:23:f6:08:ea:60:bf:fc:
7f:9d:ed:db:51:bb:3c:47:db:eb:62:f9:15:b2:7a:
e2:b3:53:6e:4d:c0:8a:d1:cc:f4:5b:b9:ae:f7:17:
68:a5:c7:ee:2d:aa:87:fa:12:21:bd:11:61:c2:08:
c6:13:24:4f:bf:71:f4:0a:36:b7:8b:62:21:16:81:
2c:f5:a9:bd:6f:9b:6a:b6:f4:26:03:0c:6d:e7:8a:
9b:be:d2:a8:d6:91:d5:23:ab:9b:61:8b:20:55:e8:
ef:54:b2:67:8d:37:38:48:52:a8:e1:98:a8:ec:17:
2d:13:04:c5:82:aa:4d:da:b1:2b:83:2a:b7:ab:92:
51:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:A4:73:83:3B:1A:77:3D:B5:35:40:0A:0E:38:F3:A9:34:7E:22:B8
X509v3 Authority Key Identifier:
keyid:7B:08:E1:68:78:74:4B:88:B8:42:03:EE:FE:2D:77:A8:7D:AB:90:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ewjhaHh0S4i4QgPu_i13qH2rkLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/YKRzgzsadz21NUAKDjjzqTR-Irg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/ewjhaHh0S4i4QgPu_i13qH2rkLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.208.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:d5:36:a5:5f:ce:b8:1b:5a:a5:fa:30:05:42:b6:52:8e:94:
a9:2b:c6:9a:85:a9:4d:94:de:e9:c6:75:25:62:91:d2:1e:ee:
57:08:91:18:30:59:61:38:9a:4e:14:33:d6:5c:b6:dd:9e:18:
f8:d6:df:97:6e:43:67:b7:0f:00:aa:90:e5:87:f1:f1:4a:6c:
24:bc:ef:bf:b4:29:c6:1b:98:ad:1c:5e:dd:86:2f:8d:d2:2f:
b8:d0:1a:7b:be:76:a5:55:9d:b6:e9:e0:85:fe:15:76:fe:31:
82:18:0d:4a:dc:3d:c2:50:4c:84:50:4b:ac:1d:fc:0f:53:ec:
c5:5e:7b:f6:8e:f1:b2:2c:d6:d9:9d:83:f5:31:d3:5d:12:8e:
24:e5:ee:33:51:2d:32:f5:e4:e5:84:ab:02:37:f1:d7:72:73:
0a:6a:09:2c:9c:24:35:cd:18:6f:55:ed:a3:9f:94:e4:c9:42:
87:1e:88:01:8a:4e:c1:3f:4d:eb:94:60:6a:2f:77:0e:48:4e:
a2:c7:af:fd:89:89:c7:f9:da:ab:db:57:10:31:9a:a8:13:9a:
88:43:d7:fb:45:12:d6:48:53:d0:85:b2:4b:1d:bd:42:b3:77:
e0:08:28:43:b1:c4:7d:e4:a0:c3:a1:cf:4d:01:e2:dc:c6:54:
a7:14:60:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 07:05:20 2025 by rpki-client