Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/ycHOprUsYZTBXDuZt4fimvK2RK0.roa
File: ycHOprUsYZTBXDuZt4fimvK2RK0.roa (raw, json)
Hash identifier: MqNFLvwrSM0xJqA4ZNzTpzbRQsesskBDMuiHmsPcyc8=
Subject key identifier: C9:C1:CE:A6:B5:2C:61:94:C1:5C:3B:99:B7:87:E2:9A:F2:B6:44:AD
Certificate issuer: /CN=55fad96dd05af8c2d26192c841131f2f97459fed
Certificate serial: 08B209BB
Authority key identifier: 55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/ycHOprUsYZTBXDuZt4fimvK2RK0.roa
Signing time: Sat 01 Jan 2022 13:02:03 +0000
ROA not before: Sat 01 Jan 2022 13:02:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59514
IP address blocks: 45.10.88.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145885627 (0x8b209bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55fad96dd05af8c2d26192c841131f2f97459fed
Validity
Not Before: Jan 1 13:02:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c9c1cea6b52c6194c15c3b99b787e29af2b644ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ad:e1:1b:e4:ce:0c:b2:13:32:89:bb:33:d5:
18:5c:b1:be:91:63:13:d0:11:b0:7f:48:43:a5:3f:
95:0f:d1:5d:2f:16:c5:7b:a7:d3:a7:2d:46:c7:7c:
7a:0f:f4:46:9b:c9:a0:9d:93:ec:41:20:0d:a6:84:
62:1d:48:ec:f7:84:3b:c2:c0:ba:35:d3:ef:a8:f9:
01:ff:9c:46:a1:e7:43:a2:cd:72:24:38:c3:10:76:
a4:8d:a7:72:8a:b1:61:e3:48:ac:4a:9c:a3:7f:04:
6c:1b:b6:a7:3f:bb:30:74:4b:fd:dc:a9:29:63:68:
3f:32:48:d5:0e:9c:eb:c5:1a:cf:05:c9:f2:dc:ac:
a2:79:25:ed:5f:e0:c7:67:25:ee:f4:a9:ab:95:50:
d8:97:6b:72:7f:7a:cd:74:72:1a:04:71:76:81:02:
c0:07:55:39:f9:7a:bc:96:cf:6d:81:92:83:60:c0:
c7:71:1e:b0:7c:b7:1b:ba:f7:5a:0e:f1:48:a6:d9:
95:b2:f3:cb:95:84:55:2f:28:b7:d1:f4:ee:c4:f9:
c0:2c:fa:53:86:01:c5:da:c6:61:75:f9:32:8e:75:
f9:4c:ed:8b:c8:69:d4:7d:9c:c0:8a:5c:ab:26:c0:
4f:89:54:6c:c2:13:ce:5b:c5:60:e0:cc:5f:f5:6b:
e0:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:C1:CE:A6:B5:2C:61:94:C1:5C:3B:99:B7:87:E2:9A:F2:B6:44:AD
X509v3 Authority Key Identifier:
keyid:55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/ycHOprUsYZTBXDuZt4fimvK2RK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.88.0/24
Signature Algorithm: sha256WithRSAEncryption
25:a3:c5:84:c9:21:91:8e:18:bb:42:79:bc:ca:b4:55:80:a7:
94:ad:59:d0:8c:11:c5:0d:11:f6:d9:82:3a:ac:b6:27:a2:a6:
f6:24:3d:fe:b1:39:db:73:25:ae:fa:2e:8b:96:a0:9a:30:20:
2d:50:fa:09:cc:80:a1:0c:cb:8a:db:2e:5b:1a:2b:8f:c3:c2:
c9:c0:cc:ab:6d:e8:d1:0d:54:40:60:5a:8e:5b:c5:0a:51:65:
94:57:5a:b9:6c:5e:a4:9f:a8:36:c7:c0:fd:d2:cb:e2:67:ea:
62:97:04:6c:3a:93:d6:69:40:ea:3f:3e:29:5b:a7:6a:98:3f:
82:09:23:4c:e9:fa:e4:3e:1b:7e:dc:d4:ec:33:cf:b4:97:56:
51:8b:7d:27:1a:fd:1a:10:74:0f:2e:39:72:ac:28:44:ed:d5:
53:46:cd:2d:bb:3f:a6:da:24:78:cf:7a:99:ac:78:2c:6f:db:
13:8f:ef:15:2d:bd:e0:c0:80:c0:08:da:a6:4d:98:66:73:3a:
fd:7f:18:47:d2:48:21:ae:93:cb:1c:93:c3:54:dc:0f:f5:de:
49:ec:6c:f9:42:d2:30:2e:43:7e:19:cd:37:33:40:4f:5d:ae:
f7:5a:fc:7e:bb:91:32:2c:13:03:28:de:2c:4f:b2:66:99:36:
01:5c:9e:e1
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECLIJuzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
NWZhZDk2ZGQwNWFmOGMyZDI2MTkyYzg0MTEzMWYyZjk3NDU5ZmVkMB4XDTIyMDEw
MTEzMDIwM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzljMWNlYTZiNTJj
NjE5NGMxNWMzYjk5Yjc4N2UyOWFmMmI2NDRhZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJOt4RvkzgyyEzKJuzPVGFyxvpFjE9ARsH9IQ6U/lQ/RXS8W
xXun06ctRsd8eg/0RpvJoJ2T7EEgDaaEYh1I7PeEO8LAujXT76j5Af+cRqHnQ6LN
ciQ4wxB2pI2ncoqxYeNIrEqco38EbBu2pz+7MHRL/dypKWNoPzJI1Q6c68UazwXJ
8tysonkl7V/gx2cl7vSpq5VQ2Jdrcn96zXRyGgRxdoECwAdVOfl6vJbPbYGSg2DA
x3EesHy3G7r3Wg7xSKbZlbLzy5WEVS8ot9H07sT5wCz6U4YBxdrGYXX5Mo51+Uzt
i8hp1H2cwIpcqybAT4lUbMITzlvFYODMX/Vr4PUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTJwc6mtSxhlMFcO5m3h+Ka8rZErTAfBgNVHSMEGDAWgBRV+tlt0Fr4wtJh
kshBEx8vl0Wf7TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1ZmclpiZEJhLU1MU1laTElRUk1mTDVkRm4tMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODIvMzBlNTgyLTQ0NDgtNDk1Mi05NGEwLTMwZmYyYzgzZjAwMS8x
L3ljSE9wclVzWVpUQlhEdVp0NGZpbXZLMlJLMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODIv
MzBlNTgyLTQ0NDgtNDk1Mi05NGEwLTMwZmYyYzgzZjAwMS8xL1ZmclpiZEJhLU1M
U1laTElRUk1mTDVkRm4tMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC0KWDANBgkqhkiG9w0BAQsFAAOC
AQEAJaPFhMkhkY4Yu0J5vMq0VYCnlK1Z0IwRxQ0R9tmCOqy2J6Km9iQ9/rE523Ml
rvoui5agmjAgLVD6CcyAoQzLitsuWxorj8PCycDMq23o0Q1UQGBajlvFClFllFda
uWxepJ+oNsfA/dLL4mfqYpcEbDqT1mlA6j8+KVunapg/ggkjTOn65D4bftzU7DPP
tJdWUYt9Jxr9GhB0Dy45cqwoRO3VU0bNLbs/ptokeM96max4LG/bE4/vFS294MCA
wAjapk2YZnM6/X8YR9JIIa6TyxyTw1TcD/XeSexs+ULSMC5DfhnNNzNAT12u91r8
fruRMiwTAyjeLE+yZpk2AVye4Q==
-----END CERTIFICATE-----
Generated at Fri Apr 18 00:49:00 2025 by rpki-client