Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/YFwPrrCDRYcyoa8kh_Wma2SJFMc.roa
File: YFwPrrCDRYcyoa8kh_Wma2SJFMc.roa (raw, json)
Hash identifier: sLzh+2cmBseOS3WaXdHKeV9HljjPhFBq/DqxxF+4u0Y=
Subject key identifier: 60:5C:0F:AE:B0:83:45:87:32:A1:AF:24:87:F5:A6:6B:64:89:14:C7
Certificate issuer: /CN=1372e0c2b83dd5109013c7f1c0bb9716d3618dd2
Certificate serial: 01880EF8C66C987C0B90145C040725B54B20
Authority key identifier: 13:72:E0:C2:B8:3D:D5:10:90:13:C7:F1:C0:BB:97:16:D3:61:8D:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E3Lgwrg91RCQE8fxwLuXFtNhjdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/YFwPrrCDRYcyoa8kh_Wma2SJFMc.roa
Signing time: Fri 12 May 2023 07:59:24 +0000
ROA not before: Fri 12 May 2023 07:59:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9009
IP address blocks: 92.118.44.0/24 maxlen: 24
92.118.47.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:0e:f8:c6:6c:98:7c:0b:90:14:5c:04:07:25:b5:4b:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1372e0c2b83dd5109013c7f1c0bb9716d3618dd2
Validity
Not Before: May 12 07:59:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=605c0faeb083458732a1af2487f5a66b648914c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6e:0c:50:a6:24:bf:e2:ef:01:cc:68:a0:09:
65:34:94:37:ba:38:13:ad:dd:f7:e7:7e:48:56:90:
a0:34:59:9e:fb:c6:d3:a9:fe:6d:cb:14:68:3a:97:
11:d1:44:21:9d:d7:bd:c7:e5:a9:cd:46:d9:c6:84:
54:d0:f3:11:a0:b0:2e:e1:b2:7f:48:57:87:68:11:
14:66:03:30:8e:71:b6:ea:eb:12:ed:c3:d3:84:48:
6c:72:ca:ab:71:54:33:44:f1:88:e4:13:10:97:bc:
53:ea:12:24:6e:a6:02:8c:90:6f:6c:f7:39:3c:b9:
4d:42:eb:36:31:63:11:c1:21:05:c6:e3:d5:ce:e7:
0a:86:8e:04:da:4c:f7:49:d4:1c:b4:65:8b:49:ac:
fd:85:5d:ba:6a:2a:b5:8f:9a:dc:22:44:21:ea:ae:
16:9e:b6:ae:10:14:33:3c:31:fc:8d:d7:09:08:b9:
86:06:2a:ff:01:c8:81:52:dd:81:96:a7:c0:87:89:
ee:d7:8e:84:0a:ff:95:18:8e:c8:15:91:2c:ba:af:
01:c3:2b:b8:c1:8b:93:d2:21:b4:b0:48:7d:4c:be:
07:74:e1:06:36:46:f8:b4:83:58:ed:af:93:2d:2b:
85:66:4f:b3:5d:54:99:53:5b:d9:99:8f:ee:06:a6:
f3:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:5C:0F:AE:B0:83:45:87:32:A1:AF:24:87:F5:A6:6B:64:89:14:C7
X509v3 Authority Key Identifier:
keyid:13:72:E0:C2:B8:3D:D5:10:90:13:C7:F1:C0:BB:97:16:D3:61:8D:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3Lgwrg91RCQE8fxwLuXFtNhjdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/YFwPrrCDRYcyoa8kh_Wma2SJFMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/E3Lgwrg91RCQE8fxwLuXFtNhjdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.44.0/24
92.118.47.0/24
Signature Algorithm: sha256WithRSAEncryption
20:39:36:7e:0e:6a:36:0e:39:8e:8e:39:f1:9a:96:60:49:0d:
0a:c7:e4:40:3d:e0:0b:6b:a0:6d:02:5b:20:e5:11:94:30:9f:
8d:07:79:9c:77:be:30:dc:64:3a:17:01:c6:ad:05:ff:77:53:
9f:82:44:c9:0a:36:5a:61:e3:b8:f1:c2:e3:95:f7:3c:06:10:
a5:a7:99:06:28:d8:4f:94:5b:0e:9f:db:43:38:62:2d:3b:9a:
f9:db:7f:a0:07:83:d4:fc:02:43:13:b8:e4:1c:5c:62:f0:bd:
ab:77:bd:97:f7:84:25:91:bd:4c:29:91:55:e3:c1:1e:54:44:
3f:ed:ed:8c:1f:57:b5:6f:c3:b9:29:e5:6a:eb:2a:71:b9:38:
58:42:e2:6d:2c:f8:f5:ff:c2:31:a1:a8:d2:98:c6:e2:56:c5:
8f:67:bc:da:50:96:89:50:50:43:3d:30:c8:1b:c7:a0:03:1d:
a6:a9:b4:6d:be:b3:eb:b3:2b:d7:ec:af:df:f7:cd:ed:46:65:
72:74:af:00:6c:92:8b:91:f5:c6:dd:4e:2b:94:52:6e:65:88:
f2:cc:8e:3d:ed:4b:d8:d8:d4:a7:a8:a0:64:fa:57:6f:e1:6b:
78:d7:23:6a:a1:90:19:23:b7:c5:2a:e1:df:4c:27:57:8f:37:
8f:28:98:01
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYgO+MZsmHwLkBRcBAcltUsgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzNzJlMGMyYjgzZGQ1MTA5MDEzYzdmMWMwYmI5NzE2ZDM2
MThkZDIwHhcNMjMwNTEyMDc1OTI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MDVjMGZhZWIwODM0NTg3MzJhMWFmMjQ4N2Y1YTY2YjY0ODkxNGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqG4MUKYkv+LvAcxooAllNJQ3ujgT
rd33535IVpCgNFme+8bTqf5tyxRoOpcR0UQhnde9x+WpzUbZxoRU0PMRoLAu4bJ/
SFeHaBEUZgMwjnG26usS7cPThEhscsqrcVQzRPGI5BMQl7xT6hIkbqYCjJBvbPc5
PLlNQus2MWMRwSEFxuPVzucKho4E2kz3SdQctGWLSaz9hV26aiq1j5rcIkQh6q4W
nrauEBQzPDH8jdcJCLmGBir/AciBUt2BlqfAh4nu146ECv+VGI7IFZEsuq8Bwyu4
wYuT0iG0sEh9TL4HdOEGNkb4tINY7a+TLSuFZk+zXVSZU1vZmY/uBqbzPQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGBcD66wg0WHMqGvJIf1pmtkiRTHMB8GA1UdIwQY
MBaAFBNy4MK4PdUQkBPH8cC7lxbTYY3SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTNMZ3dyZzkxUkNRRThmeHdMdVhGdE5oamRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS8yMjFmZDYtZTRmNi00M2UzLTk0NmQt
ZGQxZWM1N2Q3ZTc0LzEvWUZ3UHJyQ0RSWWN5b2E4a2hfV21hMlNKRk1jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS8yMjFmZDYtZTRmNi00M2UzLTk0NmQtZGQxZWM1N2Q3ZTc0
LzEvRTNMZ3dyZzkxUkNRRThmeHdMdVhGdE5oamRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXHYsAwQA
XHYvMA0GCSqGSIb3DQEBCwUAA4IBAQAgOTZ+Dmo2DjmOjjnxmpZgSQ0Kx+RAPeAL
a6BtAlsg5RGUMJ+NB3mcd74w3GQ6FwHGrQX/d1OfgkTJCjZaYeO48cLjlfc8BhCl
p5kGKNhPlFsOn9tDOGItO5r523+gB4PU/AJDE7jkHFxi8L2rd72X94Qlkb1MKZFV
48EeVEQ/7e2MH1e1b8O5KeVq6ypxuThYQuJtLPj1/8IxoajSmMbiVsWPZ7zaUJaJ
UFBDPTDIG8egAx2mqbRtvrPrsyvX7K/f983tRmVydK8AbJKLkfXG3U4rlFJuZYjy
zI497UvY2NSnqKBk+ldv4Wt41yNqoZAZI7fFKuHfTCdXjzePKJgB
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:51:35 2025 by rpki-client