Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/YTymXphgw-bMLjM5K0i72lF4KF8.roa
File: YTymXphgw-bMLjM5K0i72lF4KF8.roa (raw, json)
Hash identifier: gNZ3cakeYR1iduAe4M5AtUwfM9G1iu2+qFoeA0gYZkE=
Subject key identifier: 61:3C:A6:5E:98:60:C3:E6:CC:2E:33:39:2B:48:BB:DA:51:78:28:5F
Certificate issuer: /CN=eae2653179cafe5ff6651c6058b67ad2d2c8485e
Certificate serial: 0186554B28C2AFB6E9002BB7BB03556BD254
Authority key identifier: EA:E2:65:31:79:CA:FE:5F:F6:65:1C:60:58:B6:7A:D2:D2:C8:48:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6uJlMXnK_l_2ZRxgWLZ60tLISF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/YTymXphgw-bMLjM5K0i72lF4KF8.roa
Signing time: Wed 15 Feb 2023 13:37:13 +0000
ROA not before: Wed 15 Feb 2023 13:37:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 2a13:5941::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:55:4b:28:c2:af:b6:e9:00:2b:b7:bb:03:55:6b:d2:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eae2653179cafe5ff6651c6058b67ad2d2c8485e
Validity
Not Before: Feb 15 13:37:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=613ca65e9860c3e6cc2e33392b48bbda5178285f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:91:14:73:35:33:1b:e4:42:14:81:3c:a9:b0:
1d:73:5f:dc:4e:e5:f5:e1:22:29:d7:8a:6e:1f:50:
9d:84:a2:e3:58:31:de:58:ca:28:4f:61:a3:49:3a:
cd:79:28:b4:df:d5:6f:27:cb:be:09:93:96:0d:b9:
13:f1:de:c8:d5:00:f0:c6:64:b9:7f:7d:20:65:a3:
c3:d4:6a:06:b1:c3:d7:a1:9b:22:eb:50:a6:85:4b:
42:16:fb:74:c8:30:95:6a:2c:16:30:0b:18:5e:2e:
77:4c:b4:f8:13:fc:aa:db:6d:47:2c:2b:be:c9:1e:
92:bc:8e:79:ee:c5:24:41:c6:e4:3f:bc:f6:f0:34:
ff:57:03:83:10:56:b1:6b:ef:93:df:fe:b2:02:52:
66:70:e2:bb:cf:9a:8e:11:7b:f3:d5:bf:a2:6a:06:
88:d9:64:05:75:7f:15:b1:5c:21:ed:96:cd:3a:f5:
35:ea:6a:53:0a:be:15:92:c0:e5:12:1c:00:83:77:
e6:96:a4:cb:ac:16:e8:e1:c7:eb:50:66:de:17:82:
74:d4:10:e5:a3:03:71:2e:fb:45:b8:99:57:8a:19:
96:e7:fd:6b:e5:dc:db:8c:b1:5c:e6:b2:68:e2:a3:
bd:a7:58:59:25:60:77:fc:18:82:c3:2c:34:72:58:
86:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:3C:A6:5E:98:60:C3:E6:CC:2E:33:39:2B:48:BB:DA:51:78:28:5F
X509v3 Authority Key Identifier:
keyid:EA:E2:65:31:79:CA:FE:5F:F6:65:1C:60:58:B6:7A:D2:D2:C8:48:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6uJlMXnK_l_2ZRxgWLZ60tLISF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/YTymXphgw-bMLjM5K0i72lF4KF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/6uJlMXnK_l_2ZRxgWLZ60tLISF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:5941::/32
Signature Algorithm: sha256WithRSAEncryption
9e:45:63:32:f2:3a:bf:29:86:4e:a7:66:ee:c9:16:36:63:bf:
0d:94:b2:9a:04:5d:36:c8:5c:7a:62:b1:8d:eb:ee:b7:54:3f:
a5:a8:e0:d2:9a:18:95:f8:a4:e9:74:ca:98:22:95:5e:67:85:
6b:7b:39:be:15:97:c6:89:f5:ab:de:01:3b:95:c3:48:64:eb:
c5:02:28:70:60:9a:de:65:21:ac:f7:40:42:28:53:53:bb:fc:
4e:9b:2d:e8:11:5d:ff:72:d9:99:80:1e:4c:e8:d0:fa:46:8d:
a2:8c:47:59:9b:24:96:12:4e:86:70:9a:56:94:b8:a4:64:52:
01:a9:11:ec:fa:8b:6d:fc:d8:95:4d:e5:60:8e:74:d1:a2:31:
95:95:80:6d:a3:3b:35:97:68:2f:86:62:fd:32:8b:bb:fa:cf:
b7:10:ad:04:28:59:bd:0d:7f:a5:d2:56:03:e3:d7:61:5a:25:
68:52:92:f2:87:82:1c:50:80:f4:b6:79:fa:1f:50:ed:63:16:
ff:85:ee:ca:45:74:cc:06:2c:e2:31:d7:bd:36:2f:f9:7d:13:
aa:ef:07:f8:65:ca:46:6a:84:b3:fd:2a:c8:16:c9:8c:0a:bf:
0e:e1:99:95:a1:b7:7b:b4:d5:70:9f:57:6a:3a:82:f7:b2:47:
ba:ad:5a:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:54:48 2025 by rpki-client