Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/yvJX5aTpS1YmRW19JXlZyxQx4TY.roa
File: yvJX5aTpS1YmRW19JXlZyxQx4TY.roa (raw, json)
Hash identifier: LkffUil0wk1tz8zCJH0ueOzammM015SL3x+//OUPEnI=
Subject key identifier: CA:F2:57:E5:A4:E9:4B:56:26:45:6D:7D:25:79:59:CB:14:31:E1:36
Certificate issuer: /CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6
Certificate serial: 01856F0B435E1D477AAE8283D6ABF3AE5791
Authority key identifier: 48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/yvJX5aTpS1YmRW19JXlZyxQx4TY.roa
Signing time: Sun 01 Jan 2023 20:34:47 +0000
ROA not before: Sun 01 Jan 2023 20:34:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35744
IP address blocks: 91.238.176.0/24 maxlen: 24
185.28.56.0/24 maxlen: 24
2a00:9b60:5353::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:0b:43:5e:1d:47:7a:ae:82:83:d6:ab:f3:ae:57:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6
Validity
Not Before: Jan 1 20:34:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=caf257e5a4e94b5626456d7d257959cb1431e136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:40:b9:c9:47:9c:e7:94:61:2c:96:d8:14:5a:
29:f0:54:0c:2f:8a:c6:6e:9a:0a:86:cd:18:e1:34:
06:ba:b8:fd:ad:eb:96:21:19:e2:96:96:6f:e4:7a:
76:4b:fd:a5:a4:f8:f7:e8:ff:63:f2:ad:d2:fb:1d:
47:c1:8f:23:6f:a8:8b:2e:f4:82:7e:b7:ca:9a:5d:
9b:58:de:b1:cd:a5:1f:d6:25:8c:53:bd:26:6b:c5:
0f:4c:b1:a0:63:e2:7f:03:69:5d:a3:63:bb:4f:a1:
c8:48:b2:72:77:f6:04:61:76:d5:3a:e8:2c:fe:6d:
14:7f:da:c9:99:c6:66:6d:66:80:a6:78:2b:6c:33:
1c:eb:27:13:c3:81:72:bd:42:1f:c8:9e:e6:5f:9a:
58:2d:41:32:02:a2:76:1a:7d:b8:82:ac:e8:7e:e9:
2d:35:4e:1c:16:69:00:27:06:b8:dd:87:df:21:43:
17:e6:ad:9a:fd:80:61:1e:bc:97:95:ea:8f:b7:52:
98:d6:f5:b4:45:b3:06:41:b1:91:c8:4a:54:8a:ca:
47:26:70:35:d2:6a:28:5d:3c:c9:59:37:db:84:c8:
e7:b2:3f:0a:e0:b1:ba:a7:b8:8a:07:d5:9a:d3:f1:
da:ac:c3:0b:70:a8:21:63:55:bf:4a:ad:b0:0d:33:
c7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:F2:57:E5:A4:E9:4B:56:26:45:6D:7D:25:79:59:CB:14:31:E1:36
X509v3 Authority Key Identifier:
keyid:48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/yvJX5aTpS1YmRW19JXlZyxQx4TY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.176.0/24
185.28.56.0/24
IPv6:
2a00:9b60:5353::/48
Signature Algorithm: sha256WithRSAEncryption
40:63:8b:4b:c9:cc:81:1a:bc:fd:90:4b:ba:9a:df:cf:93:69:
07:ee:6b:e7:7a:e3:d3:78:cb:23:14:75:4d:a7:6e:78:92:e4:
02:eb:46:4a:e1:43:ad:3e:0b:77:bf:57:3f:03:b0:0c:5c:e9:
23:19:52:21:98:ea:37:a9:23:a2:a5:c2:cc:6e:61:14:e0:e8:
a3:1d:52:2e:d4:1e:60:82:01:9e:7d:65:3b:a6:6b:64:34:c5:
66:c8:dd:d7:7b:05:27:f7:9d:1d:88:5d:9f:09:fe:0f:cf:00:
8c:b6:49:29:33:dc:0e:80:98:8f:eb:b7:9d:ac:2a:80:b4:05:
8c:eb:84:2c:59:32:36:10:b2:61:98:b5:90:84:da:5a:82:81:
0e:ae:69:1b:28:3d:7d:01:82:8c:1c:63:3f:eb:f4:6b:ed:3d:
84:b7:3c:3a:5d:fb:f8:ca:9f:f0:77:60:1d:0d:56:46:0d:5f:
69:e4:16:20:3d:af:3b:9a:04:04:03:2b:0c:03:ff:0b:02:90:
5b:bd:e2:18:ee:85:a8:89:e7:d4:8b:a4:fa:1d:07:1c:75:fb:
dd:35:dd:da:1c:10:1a:24:b3:7d:49:ff:6f:27:0d:97:b3:06:
58:d9:ea:33:95:18:21:58:e3:a4:62:1d:f9:c7:1c:de:d6:43:
48:8c:6b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:29:19 2025 by rpki-client