Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/yQDuzSUPThKoZFUO-lD4unpNIRM.roa
File: yQDuzSUPThKoZFUO-lD4unpNIRM.roa (raw, json)
Hash identifier: 69D23fOPvyrEZ0Vb//Twyj+j8WeHgUs3XEmc1M3PehY=
Subject key identifier: C9:00:EE:CD:25:0F:4E:12:A8:64:55:0E:FA:50:F8:BA:7A:4D:21:13
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 0182D3C1483E27C24268759E2B3EE6C9EC03
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/yQDuzSUPThKoZFUO-lD4unpNIRM.roa
Signing time: Thu 25 Aug 2022 06:47:15 +0000
ROA not before: Thu 25 Aug 2022 06:47:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210392
IP address blocks: 178.239.151.0/24 maxlen: 24
178.239.152.0/24 maxlen: 24
185.26.32.0/24 maxlen: 24
185.26.33.0/24 maxlen: 24
178.239.153.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:d3:c1:48:3e:27:c2:42:68:75:9e:2b:3e:e6:c9:ec:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Aug 25 06:47:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c900eecd250f4e12a864550efa50f8ba7a4d2113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a3:75:89:67:99:22:26:90:9e:df:83:06:1c:
cd:7d:cf:06:e0:76:7a:67:f8:30:68:06:5d:42:04:
2e:c4:88:63:9c:da:13:6f:d1:46:46:3e:8a:8b:af:
98:6c:34:13:27:2d:9a:e4:e5:e9:10:cb:d6:f0:6e:
f9:a5:a6:36:7c:90:8a:d2:cb:e4:c1:cf:f0:b9:f7:
8f:df:56:17:0d:6b:50:6b:30:39:20:4b:61:f0:bf:
d2:42:c2:39:ce:02:22:0b:c6:02:1e:36:b2:9e:3c:
eb:bc:e5:67:ce:1d:5d:71:48:df:55:38:64:0e:a7:
cb:63:f7:46:b2:a8:7f:ed:99:ab:bc:f1:9e:d7:e2:
0a:fd:d8:54:11:79:db:6a:fd:6d:20:76:81:e1:71:
df:af:2c:fb:e3:22:07:0e:aa:41:b2:1e:ec:be:22:
fb:d9:29:87:d5:63:1b:93:44:31:ab:2a:1b:1a:f7:
d1:36:c8:27:60:29:36:46:10:e0:2e:17:66:6c:d6:
a9:2f:b7:63:bf:92:3e:5e:a8:37:63:66:ad:d8:03:
49:9e:5b:71:ff:2a:c6:ed:36:de:a5:6f:b9:88:cf:
88:4e:0d:f4:7e:53:c4:08:8a:27:4f:57:14:74:fd:
a6:98:61:3b:dc:bb:51:8b:c6:56:72:dc:86:39:7e:
9a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:00:EE:CD:25:0F:4E:12:A8:64:55:0E:FA:50:F8:BA:7A:4D:21:13
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/yQDuzSUPThKoZFUO-lD4unpNIRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.151.0-178.239.153.255
185.26.32.0/23
Signature Algorithm: sha256WithRSAEncryption
58:00:4d:ac:d7:7c:48:13:6f:f5:f6:96:77:43:a7:a7:c7:0d:
9f:ac:66:cb:34:06:48:26:95:7e:43:1f:32:4a:e6:96:f2:5f:
52:f6:3a:1c:b6:4d:4b:0e:0e:2e:a6:fe:a0:36:b5:39:e5:bd:
68:57:4a:83:eb:2c:b3:3b:8d:9b:f5:26:55:06:77:f6:c2:63:
4d:12:5d:00:ee:1d:76:ec:aa:c1:89:7f:84:31:63:82:51:c3:
56:f7:c2:2a:78:23:10:e2:bb:bc:a1:83:99:0f:5e:91:66:be:
8a:3e:c3:e4:38:a0:f2:89:73:40:2f:f4:4e:48:87:12:8f:c4:
0e:19:b6:1f:26:01:92:7c:09:67:e8:a7:97:fb:a1:5f:df:2e:
49:c2:37:36:66:c5:19:65:30:01:65:fd:f2:70:e4:4b:cc:de:
65:6e:01:89:7e:89:b8:b8:fc:94:23:da:6b:cc:1a:ad:0a:29:
92:8f:66:72:8a:40:f3:87:e1:16:01:f1:84:8b:9c:12:8a:8e:
df:5b:09:8a:03:28:9a:db:7a:25:05:ef:14:e9:4a:8e:08:6f:
63:60:b4:52:fc:0a:75:d9:7d:07:be:59:27:f7:0e:ba:53:80:
31:e9:27:19:0d:4c:cd:f9:6b:1c:9e:4d:e9:0f:58:b6:55:36:
71:65:cc:c6
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYLTwUg+J8JCaHWeKz7myewDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxMzUzMzM5OWY1NWViNTJlNmIyMjAwYzdjYWU0MjcyYjc0
ZDY0NjQwHhcNMjIwODI1MDY0NzE1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOTAwZWVjZDI1MGY0ZTEyYTg2NDU1MGVmYTUwZjhiYTdhNGQyMTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6N1iWeZIiaQnt+DBhzNfc8G4HZ6
Z/gwaAZdQgQuxIhjnNoTb9FGRj6Ki6+YbDQTJy2a5OXpEMvW8G75paY2fJCK0svk
wc/wufeP31YXDWtQazA5IEth8L/SQsI5zgIiC8YCHjaynjzrvOVnzh1dcUjfVThk
DqfLY/dGsqh/7ZmrvPGe1+IK/dhUEXnbav1tIHaB4XHfryz74yIHDqpBsh7sviL7
2SmH1WMbk0QxqyobGvfRNsgnYCk2RhDgLhdmbNapL7djv5I+Xqg3Y2at2ANJnltx
/yrG7TbepW+5iM+ITg30flPECIonT1cUdP2mmGE73LtRi8ZWctyGOX6apwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFMkA7s0lD04SqGRVDvpQ+Lp6TSETMB8GA1UdIwQY
MBaAFPE1MzmfVetS5rIgDHyuQnK3TWRkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEt
OTg5MTY2ODgxOTY5LzEveVFEdXpTVVBUaEtvWkZVTy1sRDR1bnBOSVJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEtOTg5MTY2ODgxOTY5
LzEvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBACy75cD
BAGy75gDBAG5GiAwDQYJKoZIhvcNAQELBQADggEBAFgATazXfEgTb/X2lndDp6fH
DZ+sZss0BkgmlX5DHzJK5pbyX1L2Ohy2TUsODi6m/qA2tTnlvWhXSoPrLLM7jZv1
JlUGd/bCY00SXQDuHXbsqsGJf4QxY4JRw1b3wip4IxDiu7yhg5kPXpFmvoo+w+Q4
oPKJc0Av9E5IhxKPxA4Zth8mAZJ8CWfop5f7oV/fLknCNzZmxRllMAFl/fJw5EvM
3mVuAYl+ibi4/JQj2mvMGq0KKZKPZnKKQPOH4RYB8YSLnBKKjt9bCYoDKJrbeiUF
7xTpSo4Ib2NgtFL8CnXZfQe+WSf3DrpTgDHpJxkNTM35axyeTekPWLZVNnFlzMY=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:46:31 2025 by rpki-client