Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/YfiG6n4S6H5r2VUyWfyEPL7Bpks.roa
File: YfiG6n4S6H5r2VUyWfyEPL7Bpks.roa (raw, json)
Hash identifier: ps/P1n5tFAU0XQMoPSARGCK2xj0MumheC1qVUYjvcsU=
Subject key identifier: 61:F8:86:EA:7E:12:E8:7E:6B:D9:55:32:59:FC:84:3C:BE:C1:A6:4B
Certificate issuer: /CN=700a1231d1c27a754e46ef10e92a730ae15d0f55
Certificate serial: 03C3F9E7
Authority key identifier: 70:0A:12:31:D1:C2:7A:75:4E:46:EF:10:E9:2A:73:0A:E1:5D:0F:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/YfiG6n4S6H5r2VUyWfyEPL7Bpks.roa
Signing time: Sat 01 Jan 2022 12:57:19 +0000
ROA not before: Sat 01 Jan 2022 12:57:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197091
IP address blocks: 217.11.136.0/22 maxlen: 22
217.11.136.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63175143 (0x3c3f9e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=700a1231d1c27a754e46ef10e92a730ae15d0f55
Validity
Not Before: Jan 1 12:57:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=61f886ea7e12e87e6bd9553259fc843cbec1a64b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:90:3c:86:a8:e5:a3:c1:1b:be:a2:79:aa:80:
85:83:d1:6f:e1:5a:a9:e2:2c:3d:f1:ad:bb:b6:a9:
21:46:75:e2:45:7d:ec:17:50:68:32:cf:91:3b:6d:
90:31:b3:80:5c:9f:ce:ca:69:d3:cb:1c:49:25:53:
74:d3:c8:4b:20:26:d1:b0:11:57:22:5f:97:1c:07:
71:cf:05:d5:df:4d:39:cd:6f:41:28:71:b9:53:c1:
77:3a:28:5d:0a:6d:5e:e2:47:5e:ce:20:fe:c0:ae:
3b:b2:74:ee:e2:cf:ea:34:98:d4:8e:67:bf:e2:2f:
42:f5:4e:fa:39:fb:39:7b:4e:3c:fc:c6:35:5c:c3:
b4:ea:88:69:6c:0c:7f:d2:56:d2:f3:3e:ca:82:68:
20:96:eb:b3:e5:6e:c0:90:92:9f:eb:54:90:7f:56:
06:4e:4d:56:31:3c:55:b0:9c:7d:6b:50:2a:1a:7b:
16:9a:43:70:4b:74:c8:fc:3f:4b:65:79:a7:6b:d3:
25:78:fa:7d:be:c3:2f:4e:14:ae:fc:eb:f3:9e:fe:
62:61:3b:1f:d5:9e:1f:02:ce:df:e6:42:f2:8f:d4:
56:aa:29:66:f4:96:8b:20:8b:9c:60:d0:e0:54:59:
cc:ca:65:54:45:50:52:5f:c3:0a:49:60:7e:11:0c:
0b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:F8:86:EA:7E:12:E8:7E:6B:D9:55:32:59:FC:84:3C:BE:C1:A6:4B
X509v3 Authority Key Identifier:
keyid:70:0A:12:31:D1:C2:7A:75:4E:46:EF:10:E9:2A:73:0A:E1:5D:0F:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/YfiG6n4S6H5r2VUyWfyEPL7Bpks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.11.136.0/22
Signature Algorithm: sha256WithRSAEncryption
09:34:c3:4c:f0:bd:8d:98:40:37:38:be:b2:1f:18:d2:40:8c:
ea:8a:19:d3:2a:2f:35:49:44:c4:25:35:8e:eb:d3:ff:cf:c3:
be:28:c0:3e:29:fa:bf:50:d4:21:2f:87:7d:03:a9:89:55:b4:
59:0e:d9:04:9e:b7:68:cf:67:fd:a6:5e:21:d1:9b:d0:8a:52:
e6:04:3d:d0:32:c2:1b:17:2a:d1:16:15:da:91:47:d2:30:7e:
b2:c7:fd:93:3a:4e:7e:9c:3c:d4:a4:75:bc:4a:95:d4:80:3d:
b6:c2:65:28:45:48:f7:63:f4:43:52:c4:cd:54:bf:0a:36:2a:
61:f2:30:e6:08:27:19:d1:37:c7:be:2f:eb:c0:91:0e:98:2b:
93:0f:ad:48:15:57:e6:75:ec:3f:e1:e6:74:e4:18:b7:78:a9:
86:87:d3:a8:14:50:0e:47:76:fd:2d:bd:57:63:f0:5e:ec:df:
43:7e:94:8d:ec:31:8c:06:8f:1d:da:2e:b0:2d:e5:35:61:77:
3c:5b:60:21:f4:b9:78:9b:68:e5:e1:e1:f0:85:92:7b:06:46:
ae:65:36:a7:16:cc:c5:a8:e9:88:d7:17:3c:eb:d8:38:de:3d:
95:52:e4:1a:3c:2e:3d:62:33:7e:93:bd:0f:c9:e8:8f:a7:98:
f1:1c:5f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:21:00 2025 by rpki-client