Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/bb9947-172c-48b1-be8e-4c905adbf076/1/Yd5LMQo51ed4byZ5oTtnhxkYUTg.roa
File: Yd5LMQo51ed4byZ5oTtnhxkYUTg.roa (raw, json)
Hash identifier: IhjB9owdd949tzQ7OlHzZMH6tDu3nTzB6aJgoeai40g=
Subject key identifier: 61:DE:4B:31:0A:39:D5:E7:78:6F:26:79:A1:3B:67:87:19:18:51:38
Certificate issuer: /CN=4345d0773c7ade08d44819e3b611bd297a3989d3
Certificate serial: 01831594E6B10FF7D76779C2B14520A223BB
Authority key identifier: 43:45:D0:77:3C:7A:DE:08:D4:48:19:E3:B6:11:BD:29:7A:39:89:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q0XQdzx63gjUSBnjthG9KXo5idM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/bb9947-172c-48b1-be8e-4c905adbf076/1/Yd5LMQo51ed4byZ5oTtnhxkYUTg.roa
Signing time: Wed 07 Sep 2022 01:33:43 +0000
ROA not before: Wed 07 Sep 2022 01:33:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61430
IP address blocks: 185.237.211.0/24 maxlen: 24
185.237.210.0/24 maxlen: 24
185.237.208.0/23 maxlen: 23
185.126.101.0/24 maxlen: 24
185.126.100.0/22 maxlen: 22
185.126.100.0/24 maxlen: 24
185.126.103.0/24 maxlen: 24
185.126.102.0/24 maxlen: 24
91.213.252.0/24 maxlen: 24
91.228.191.0/24 maxlen: 24
91.228.190.0/23 maxlen: 23
91.228.190.0/24 maxlen: 24
2a06:c040::/32 maxlen: 33
2a06:c041::/32 maxlen: 32
2001:67c:1944::/48 maxlen: 48
2001:67c:2ad4::/48 maxlen: 49
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:15:94:e6:b1:0f:f7:d7:67:79:c2:b1:45:20:a2:23:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4345d0773c7ade08d44819e3b611bd297a3989d3
Validity
Not Before: Sep 7 01:33:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=61de4b310a39d5e7786f2679a13b678719185138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ea:35:32:d1:6f:a4:7d:cf:4a:6c:2c:a1:b6:
95:11:bf:44:3b:d5:8c:c8:da:bf:f0:c7:98:f2:1c:
6e:23:4b:c0:b9:a8:13:97:88:66:e1:b9:a3:0c:57:
08:d7:94:89:2b:8b:83:97:5f:b4:94:49:4c:dd:12:
7b:c4:5f:3c:21:a6:a2:f0:ce:63:8e:e4:c5:f7:61:
75:3e:03:ff:17:66:bf:c9:ea:36:a4:63:cb:8d:b3:
63:c2:a4:35:e1:be:d8:23:42:e7:8e:e2:2f:0a:79:
aa:50:b5:3a:50:01:0e:5f:ae:25:38:30:d3:6e:68:
c3:ff:cb:02:54:f6:34:4e:37:d1:c6:77:85:89:dc:
ab:b1:9d:40:4c:77:38:19:fa:b4:f5:e7:37:c0:b5:
73:24:16:94:88:e1:dc:f1:49:d9:55:18:5f:64:78:
2b:00:1e:ae:84:18:1c:e3:72:e8:c6:21:b2:ae:e5:
b8:72:52:24:2c:e4:3f:62:6d:cc:50:be:69:99:3c:
63:d8:f2:cd:71:84:23:e9:dd:ba:d8:45:3d:3f:15:
a8:47:78:20:da:83:b7:ad:a1:ea:ff:ef:3b:fc:61:
62:f4:e5:f2:a7:b6:3d:d5:46:dd:32:3d:ab:f4:fc:
b8:4c:b2:b8:cb:51:d8:7f:c3:68:58:2d:5e:eb:f7:
da:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:DE:4B:31:0A:39:D5:E7:78:6F:26:79:A1:3B:67:87:19:18:51:38
X509v3 Authority Key Identifier:
keyid:43:45:D0:77:3C:7A:DE:08:D4:48:19:E3:B6:11:BD:29:7A:39:89:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q0XQdzx63gjUSBnjthG9KXo5idM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/bb9947-172c-48b1-be8e-4c905adbf076/1/Yd5LMQo51ed4byZ5oTtnhxkYUTg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/bb9947-172c-48b1-be8e-4c905adbf076/1/Q0XQdzx63gjUSBnjthG9KXo5idM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.252.0/24
91.228.190.0/23
185.126.100.0/22
185.237.208.0/22
IPv6:
2001:67c:1944::/48
2001:67c:2ad4::/48
2a06:c040::/31
Signature Algorithm: sha256WithRSAEncryption
2f:a5:77:dc:da:2f:38:d0:11:7d:1f:66:15:ac:82:90:80:72:
92:87:45:72:cb:ba:b4:61:ac:7a:fe:a0:6d:bf:64:b0:6b:90:
14:af:2c:14:5c:22:3a:a3:26:0d:66:f5:94:9c:43:03:1a:36:
73:ac:0c:f0:19:df:0a:82:ae:1b:ba:fc:39:75:67:1e:9c:d1:
e3:b4:8d:61:c7:94:85:a5:ef:5e:49:b9:e4:5a:fd:9a:df:b4:
78:cc:11:31:53:d6:06:6c:23:9d:f3:70:55:73:86:48:65:ef:
3c:ac:9b:20:b1:07:38:0b:7a:d6:dd:8d:00:79:63:a1:e9:6f:
fb:39:81:eb:b5:f9:15:05:ab:93:46:95:16:3b:66:21:e2:43:
fb:a4:1d:49:d9:3a:a5:fd:86:cc:07:78:6b:be:c8:c9:71:be:
a9:e0:f0:79:93:76:ee:53:82:83:6b:43:24:87:6a:e7:cd:18:
bb:db:f5:45:d6:77:5e:d0:be:58:ba:0c:74:35:b8:16:f5:ef:
83:8f:9a:f5:cc:77:4f:00:d6:50:8b:4f:99:af:d3:01:74:fe:
a7:51:1a:5e:97:b9:f3:c6:fe:83:e6:c8:cd:5e:0b:17:c0:2b:
cf:a6:90:35:5e:64:74:d2:a1:1e:2c:f8:28:51:77:9e:3e:d0:
3d:df:c6:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:45:56 2025 by rpki-client