Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/YawMB5WrNhTXOdQPkZwU5VAAHck.roa
File: YawMB5WrNhTXOdQPkZwU5VAAHck.roa (raw, json)
Hash identifier: V/Cw3VJLzR6W041UPVEX5mDgKRpNiXge9IntGSYvZMk=
Subject key identifier: 61:AC:0C:07:95:AB:36:14:D7:39:D4:0F:91:9C:14:E5:50:00:1D:C9
Certificate issuer: /CN=b23eb849e0b6940e4ff547de0b41b003f9e1105c
Certificate serial: 0186851905C08E022DFEDC3DA59C05B25B89
Authority key identifier: B2:3E:B8:49:E0:B6:94:0E:4F:F5:47:DE:0B:41:B0:03:F9:E1:10:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sj64SeC2lA5P9UfeC0GwA_nhEFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/YawMB5WrNhTXOdQPkZwU5VAAHck.roa
Signing time: Fri 24 Feb 2023 20:24:14 +0000
ROA not before: Fri 24 Feb 2023 20:24:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8431
IP address blocks: 195.230.1.0/24 maxlen: 24
195.230.4.0/24 maxlen: 24
195.230.3.0/24 maxlen: 24
195.230.0.0/20 maxlen: 20
195.230.5.0/24 maxlen: 24
195.230.16.0/23 maxlen: 23
195.230.18.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:85:19:05:c0:8e:02:2d:fe:dc:3d:a5:9c:05:b2:5b:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b23eb849e0b6940e4ff547de0b41b003f9e1105c
Validity
Not Before: Feb 24 20:24:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=61ac0c0795ab3614d739d40f919c14e550001dc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8a:8b:1d:2c:0b:78:69:d9:c3:86:46:91:b8:
54:e5:f9:c4:79:2f:ed:e1:f6:60:b1:cf:fd:c6:27:
c3:df:65:b2:4c:f7:79:39:64:88:23:25:a1:08:1d:
60:e7:d1:44:f9:6c:5f:01:a4:14:2e:84:a1:29:87:
b5:e0:b1:9d:54:bf:3f:0f:df:6d:2f:1d:fd:9e:56:
b4:bf:f9:71:f7:04:c5:a3:4e:ea:89:fc:04:c9:eb:
73:11:ec:0b:cc:ef:e0:0a:28:89:8e:f4:08:5a:fa:
af:4a:35:14:48:0e:6c:60:30:e0:81:1c:c1:f8:37:
33:02:3f:6b:04:c5:c4:0f:77:a0:f5:fe:3c:57:bb:
f8:b5:07:e8:dd:5f:87:c7:33:32:7a:cd:39:7b:c5:
5d:ac:64:5e:73:46:1e:70:8c:f7:03:fa:ca:ce:7f:
ed:98:57:4a:cf:e3:f0:87:bf:bd:22:9f:cd:d5:e3:
a4:20:d6:85:65:7e:68:d8:e2:3d:e7:4c:3e:f6:dc:
55:32:e2:ef:5a:93:86:94:7d:14:2b:71:ce:42:ea:
84:6d:a3:94:86:a7:a9:6f:2f:2a:c0:08:e4:a9:2d:
02:b6:da:b7:35:0f:8b:e3:b6:d8:56:a1:e9:e1:6e:
10:3d:c8:c7:a8:55:1b:0b:bc:74:60:27:0d:48:68:
12:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:AC:0C:07:95:AB:36:14:D7:39:D4:0F:91:9C:14:E5:50:00:1D:C9
X509v3 Authority Key Identifier:
keyid:B2:3E:B8:49:E0:B6:94:0E:4F:F5:47:DE:0B:41:B0:03:F9:E1:10:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sj64SeC2lA5P9UfeC0GwA_nhEFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/YawMB5WrNhTXOdQPkZwU5VAAHck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/sj64SeC2lA5P9UfeC0GwA_nhEFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.230.0.0-195.230.18.255
Signature Algorithm: sha256WithRSAEncryption
9b:88:92:a0:70:7d:47:f1:be:dd:12:51:c5:9f:f0:1d:bf:ae:
83:ef:e8:f4:3e:3b:6c:23:eb:d6:d6:96:13:9b:01:9c:d3:01:
11:82:85:99:40:4e:37:58:bb:17:6f:81:6e:bb:77:57:ce:81:
85:1f:69:aa:bf:82:ba:d4:01:b6:72:8c:2e:76:d9:2f:51:10:
dc:39:ad:81:9b:2c:f8:34:f7:16:4f:43:a5:78:2b:ce:1d:9d:
49:09:67:82:2d:f8:3b:92:a5:4a:79:0e:78:b4:84:d7:33:d9:
83:a0:e1:c6:b1:1b:0b:a6:7b:25:9e:dd:4a:3f:7d:41:1c:90:
f4:29:82:05:35:21:59:24:44:9a:24:a7:88:2c:51:1a:e3:03:
da:0b:09:c7:ba:d2:d3:f3:6d:f8:29:e3:93:ab:d4:9e:1c:42:
9d:34:e1:22:bd:75:7e:b6:95:ab:c1:70:ee:41:fb:f3:c6:db:
58:49:c8:ea:49:1d:c3:f2:a4:27:51:4b:a3:96:1b:8a:1e:0c:
d4:76:4a:4b:29:5d:d6:f9:eb:e8:6d:da:e6:41:3a:c4:70:5a:
7b:25:ae:04:45:49:6d:79:09:da:77:90:d4:d1:8b:c5:61:0f:
86:37:3c:b0:ee:aa:a7:b7:2a:87:bf:99:ac:bf:9c:b2:d7:47:
d8:d6:1e:05
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgISAYaFGQXAjgIt/tw9pZwFsluJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyM2ViODQ5ZTBiNjk0MGU0ZmY1NDdkZTBiNDFiMDAzZjll
MTEwNWMwHhcNMjMwMjI0MjAyNDE0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MWFjMGMwNzk1YWIzNjE0ZDczOWQ0MGY5MTljMTRlNTUwMDAxZGM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYqLHSwLeGnZw4ZGkbhU5fnEeS/t
4fZgsc/9xifD32WyTPd5OWSIIyWhCB1g59FE+WxfAaQULoShKYe14LGdVL8/D99t
Lx39nla0v/lx9wTFo07qifwEyetzEewLzO/gCiiJjvQIWvqvSjUUSA5sYDDggRzB
+DczAj9rBMXED3eg9f48V7v4tQfo3V+HxzMyes05e8VdrGRec0YecIz3A/rKzn/t
mFdKz+Pwh7+9Ip/N1eOkINaFZX5o2OI950w+9txVMuLvWpOGlH0UK3HOQuqEbaOU
hqepby8qwAjkqS0Cttq3NQ+L47bYVqHp4W4QPcjHqFUbC7x0YCcNSGgS+QIDAQAB
o4ICEDCCAgwwHQYDVR0OBBYEFGGsDAeVqzYU1znUD5GcFOVQAB3JMB8GA1UdIwQY
MBaAFLI+uEngtpQOT/VH3gtBsAP54RBcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2o2NFNlQzJsQTVQOVVmZUMwR3dBX25oRUZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC8xMWJmMmUtYjU4YS00YTMxLTg5YzAt
MTU1ZjQyZGNhYTczLzEvWWF3TUI1V3JOaFRYT2RRUGtad1U1VkFBSGNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC8xMWJmMmUtYjU4YS00YTMxLTg5YzAtMTU1ZjQyZGNhYTcz
LzEvc2o2NFNlQzJsQTVQOVVmZUMwR3dBX25oRUZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANMAsDAwHD5gME
AMPmEjANBgkqhkiG9w0BAQsFAAOCAQEAm4iSoHB9R/G+3RJRxZ/wHb+ug+/o9D47
bCPr1taWE5sBnNMBEYKFmUBON1i7F2+Bbrt3V86BhR9pqr+CutQBtnKMLnbZL1EQ
3DmtgZss+DT3Fk9DpXgrzh2dSQlngi34O5KlSnkOeLSE1zPZg6DhxrEbC6Z7JZ7d
Sj99QRyQ9CmCBTUhWSREmiSniCxRGuMD2gsJx7rS0/Nt+Cnjk6vUnhxCnTThIr11
fraVq8Fw7kH788bbWEnI6kkdw/KkJ1FLo5Ybih4M1HZKSyld1vnr6G3a5kE6xHBa
eyWuBEVJbXkJ2neQ1NGLxWEPhjc8sO6qp7cqh7+ZrL+cstdH2NYeBQ==
-----END CERTIFICATE-----
Generated at Thu Apr 17 21:54:58 2025 by rpki-client