Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/YU9LsmIQIqVeQpbr5ZKpwgDWycU.roa
File: YU9LsmIQIqVeQpbr5ZKpwgDWycU.roa (raw, json)
Hash identifier: mM2crXHpzZlPdvJICKMd0Bx+Iz3gZFQajnVRJ6Emjb0=
Subject key identifier: 61:4F:4B:B2:62:10:22:A5:5E:42:96:EB:E5:92:A9:C2:00:D6:C9:C5
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 018354E97C4384149D4D77EC1E953EBE2A9F
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/YU9LsmIQIqVeQpbr5ZKpwgDWycU.roa
Signing time: Mon 19 Sep 2022 08:42:11 +0000
ROA not before: Mon 19 Sep 2022 08:42:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210609
IP address blocks: 185.124.172.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:54:e9:7c:43:84:14:9d:4d:77:ec:1e:95:3e:be:2a:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Sep 19 08:42:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=614f4bb2621022a55e4296ebe592a9c200d6c9c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ba:c7:48:cc:c0:a9:31:03:94:d4:bd:d7:86:
90:41:8c:9c:f0:ca:87:2a:d4:72:b0:5a:3a:80:b2:
59:dc:54:28:63:05:61:c8:92:7a:bc:08:55:cb:d3:
d3:53:f7:b7:90:47:f9:67:db:4d:f9:31:dc:7a:b1:
52:4e:3f:3a:75:07:17:24:70:da:53:21:34:f6:4b:
03:f1:f5:e9:d6:c7:f6:31:4e:68:77:6a:c8:24:e2:
a1:9e:75:2a:21:78:28:5f:bc:fd:d5:23:d3:70:bf:
f8:2d:e8:f7:e8:1c:05:18:fe:44:a9:2f:b7:f9:a1:
c7:78:d2:7a:2b:6d:7c:5b:30:89:00:5d:66:f9:a8:
36:86:60:ce:59:b6:f2:4d:a8:ea:b5:fc:56:85:22:
97:c0:bd:7c:88:7f:70:8e:1c:ef:45:91:d5:79:5d:
af:e7:b5:7c:f1:1c:a0:86:73:7d:7c:1e:af:d1:22:
a0:4d:69:8a:29:c5:64:68:96:d4:20:14:c3:f6:ec:
55:11:a3:d3:16:9f:8e:70:47:0b:dd:c4:ca:55:56:
65:0d:40:72:69:ae:c3:55:85:73:73:d5:df:9e:13:
db:6e:31:ad:bf:ef:1a:02:90:e8:17:2b:06:46:ef:
0d:4f:ed:cc:53:eb:79:fd:34:5c:62:d1:24:79:a5:
2d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:4F:4B:B2:62:10:22:A5:5E:42:96:EB:E5:92:A9:C2:00:D6:C9:C5
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/YU9LsmIQIqVeQpbr5ZKpwgDWycU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.124.172.0/24
Signature Algorithm: sha256WithRSAEncryption
33:7c:0d:3d:6f:ef:00:08:46:ad:b9:38:48:cc:f6:f6:94:b3:
ea:5c:98:e3:cc:cf:bf:10:d4:df:68:cc:a7:23:4c:0b:e7:6b:
75:d5:04:50:2f:df:89:c4:8d:91:0c:b9:48:cc:84:32:3b:70:
3f:b9:66:6e:c9:f2:39:83:a5:e5:5a:75:39:c0:20:ee:e3:5f:
de:14:19:28:1d:45:e1:af:a5:ed:9c:60:e6:53:e6:c9:ea:bd:
60:e3:46:78:97:64:e8:1d:71:11:42:28:cd:be:bf:5d:b5:12:
77:e8:81:56:5c:7a:12:2e:42:22:ba:84:aa:fe:df:2d:2e:2b:
9f:05:4e:37:e5:13:4c:a0:a6:b6:ec:2b:e5:ed:16:9b:6f:50:
ef:c4:be:ab:f9:74:fa:54:8f:3d:a2:e9:67:58:f2:9a:3f:4b:
bc:92:8f:25:88:7c:b4:3c:e7:9d:66:6c:f2:43:c8:13:43:ee:
19:d1:2d:98:15:3b:49:5a:af:08:21:b0:35:41:61:08:f0:23:
d3:81:f5:27:b7:f1:26:c1:58:67:1c:06:5a:55:2b:34:28:79:
a4:49:25:d6:9c:0c:d4:b1:0e:40:03:56:bf:a0:58:79:aa:a8:
a2:c7:ac:09:f3:40:09:82:9b:a1:59:33:37:56:94:c5:e1:72:
f6:24:49:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:25:05 2025 by rpki-client