Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/6149a5-c8de-4c61-beb7-2201203a0bab/1/CyyCViyG9MuAiK0ezKG1YauS5_4.roa
File: CyyCViyG9MuAiK0ezKG1YauS5_4.roa (raw, json)
Hash identifier: VAWdvcBW080QtnQHeQSIUIg2LiEyvNqJsS3P3sEvL3A=
Subject key identifier: 0B:2C:82:56:2C:86:F4:CB:80:88:AD:1E:CC:A1:B5:61:AB:92:E7:FE
Certificate issuer: /CN=57e2b86a33c9f97214536d8ca2919d7f3c3800ce
Certificate serial: 018A086ED0FB5EBA95DBD73DFFE2F3EA52BA
Authority key identifier: 57:E2:B8:6A:33:C9:F9:72:14:53:6D:8C:A2:91:9D:7F:3C:38:00:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V-K4ajPJ-XIUU22MopGdfzw4AM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/6149a5-c8de-4c61-beb7-2201203a0bab/1/CyyCViyG9MuAiK0ezKG1YauS5_4.roa
Signing time: Fri 18 Aug 2023 11:36:34 +0000
ROA not before: Fri 18 Aug 2023 11:36:34 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 28878
IP address blocks: 185.42.72.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:08:6e:d0:fb:5e:ba:95:db:d7:3d:ff:e2:f3:ea:52:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57e2b86a33c9f97214536d8ca2919d7f3c3800ce
Validity
Not Before: Aug 18 11:36:34 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0b2c82562c86f4cb8088ad1ecca1b561ab92e7fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:24:55:56:10:9d:b5:45:a1:69:47:9e:67:f1:
84:bb:f4:ea:65:be:db:01:ef:c0:cb:15:dd:71:96:
1a:d1:75:b1:d3:39:74:cb:2c:0d:20:3d:85:48:ef:
8e:b5:9b:80:15:bd:de:88:f8:2e:9a:96:7a:97:a6:
7d:f1:a4:d5:ac:df:c9:89:26:c8:4b:49:3a:e0:fe:
9c:25:c9:84:14:5e:c8:33:93:f5:1d:bc:1e:8c:fa:
ea:96:6b:f9:e8:43:cb:6b:9f:6d:34:69:26:8d:2c:
aa:a4:8b:55:74:c7:65:2f:53:36:9c:65:6f:c1:7e:
b9:7d:7b:b1:86:7b:4b:ac:c2:e1:dd:e5:c6:01:16:
9f:66:3a:ba:12:a0:bc:3f:9d:ee:04:bf:38:cb:af:
cc:c1:ec:ef:53:4a:ec:72:99:b9:e7:90:c9:19:40:
d2:95:76:7f:ef:0c:12:31:38:d6:a7:98:14:cf:10:
ca:70:fb:de:77:a1:4c:02:f1:9e:20:4d:61:d0:36:
41:cd:4c:96:0e:14:b0:0c:9b:af:71:12:fe:76:9a:
fd:b4:e5:f6:4d:1b:a9:61:db:dc:11:a2:61:f9:02:
a9:90:41:07:ec:35:64:16:94:c2:8b:c5:24:9c:65:
a0:72:75:61:69:30:38:02:49:27:94:41:1c:5b:bb:
0d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:2C:82:56:2C:86:F4:CB:80:88:AD:1E:CC:A1:B5:61:AB:92:E7:FE
X509v3 Authority Key Identifier:
keyid:57:E2:B8:6A:33:C9:F9:72:14:53:6D:8C:A2:91:9D:7F:3C:38:00:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-K4ajPJ-XIUU22MopGdfzw4AM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/6149a5-c8de-4c61-beb7-2201203a0bab/1/CyyCViyG9MuAiK0ezKG1YauS5_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/6149a5-c8de-4c61-beb7-2201203a0bab/1/V-K4ajPJ-XIUU22MopGdfzw4AM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.42.72.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:74:f7:79:b6:43:1b:fc:5d:7f:10:92:d5:6a:b5:e6:69:89:
6c:33:1b:ca:72:9d:10:e8:25:2f:39:b2:e9:7b:d4:bd:4c:d1:
82:f9:e1:6e:d3:89:d3:6e:b9:70:21:bf:6b:02:7b:a7:53:16:
c2:34:37:ed:6f:4d:dc:84:12:b7:28:86:37:0f:09:03:58:be:
a8:c4:e5:e3:4d:4f:63:31:ed:ff:82:3b:24:9c:13:ea:f0:06:
07:71:5c:21:05:d2:70:12:c3:1b:76:f4:a5:f0:af:53:d2:36:
bb:b7:16:51:ca:9f:66:c7:f3:91:3f:25:47:18:62:8f:ee:74:
cc:30:01:4b:5e:b9:21:99:6c:6d:d4:78:06:40:da:b1:da:f5:
49:43:e6:f6:e5:15:06:dd:39:2c:07:89:35:a3:6b:e7:d8:9d:
03:83:62:be:80:1f:5c:bf:ab:d3:db:b2:3d:17:2f:b0:81:78:
09:07:fc:c6:2e:2a:5d:32:90:41:eb:35:ac:c7:bf:5f:74:30:
6a:75:eb:74:8b:74:9a:f8:ea:08:76:d5:3d:f7:df:a3:d7:bc:
8a:7d:84:6f:32:98:42:99:7a:52:76:59:36:fa:b1:5a:b2:d2:
bd:d1:35:30:11:12:71:13:82:5b:3d:78:68:09:3a:6f:a8:52:
2a:72:60:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:41:20 2025 by rpki-client