Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/yhopV0YAt93LJWtnysq48Yx7OEo.roa
File: yhopV0YAt93LJWtnysq48Yx7OEo.roa (raw, json)
Hash identifier: JucNQpxfpTk3xIyB5lwmL7GSS7l2LLBgw7t3M2YXVfs=
Subject key identifier: CA:1A:29:57:46:00:B7:DD:CB:25:6B:67:CA:CA:B8:F1:8C:7B:38:4A
Certificate issuer: /CN=c1233861207a230564ef36f11e0157344731e3f9
Certificate serial: 340E4A2C
Authority key identifier: C1:23:38:61:20:7A:23:05:64:EF:36:F1:1E:01:57:34:47:31:E3:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/yhopV0YAt93LJWtnysq48Yx7OEo.roa
Signing time: Sat 01 Jan 2022 04:02:39 +0000
ROA not before: Sat 01 Jan 2022 04:02:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 46.228.136.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 873351724 (0x340e4a2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1233861207a230564ef36f11e0157344731e3f9
Validity
Not Before: Jan 1 04:02:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ca1a29574600b7ddcb256b67cacab8f18c7b384a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2f:1f:97:04:eb:46:5a:bc:65:5b:49:93:44:
49:f3:57:b0:8c:08:72:fd:bb:7f:47:bd:40:56:62:
57:e9:40:3b:42:16:51:57:c9:d1:39:95:13:e2:1a:
07:cd:12:28:47:e8:5e:e1:dc:95:2f:e0:b6:17:d4:
d1:23:b4:e4:0a:5c:fe:bf:08:ef:7c:77:53:59:e2:
c3:c6:71:d3:2d:99:71:e4:79:e3:f1:1c:9b:4f:c9:
07:87:7a:fa:b5:44:48:d5:a0:88:6e:4e:b2:22:be:
db:dc:ff:bc:91:37:1c:69:26:a6:a2:e3:b7:d7:ae:
6c:21:b9:dd:a4:8e:cb:f5:1f:1e:14:29:d7:a9:e7:
2f:11:bd:e8:6c:ff:3b:95:d2:be:45:48:3d:26:82:
5f:43:80:ba:63:cd:b8:11:19:80:83:b3:2a:62:af:
bd:83:eb:4b:86:e3:4d:53:0e:81:0a:91:e4:d9:53:
4c:8d:fe:58:18:ff:4d:57:8d:77:bd:ab:f4:6e:39:
8e:71:c7:48:be:9c:57:05:60:bd:90:c8:a8:d5:6c:
3a:37:f0:1b:d7:df:5e:c4:8f:f2:71:4c:65:3f:a6:
86:9f:b4:43:d8:d3:fb:65:af:22:4e:e1:75:af:02:
2a:68:e3:5a:90:2c:39:ea:58:68:d0:13:f2:8a:48:
bd:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:1A:29:57:46:00:B7:DD:CB:25:6B:67:CA:CA:B8:F1:8C:7B:38:4A
X509v3 Authority Key Identifier:
keyid:C1:23:38:61:20:7A:23:05:64:EF:36:F1:1E:01:57:34:47:31:E3:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/yhopV0YAt93LJWtnysq48Yx7OEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.228.136.0/23
Signature Algorithm: sha256WithRSAEncryption
26:10:5f:56:f0:ea:ea:1b:7f:d8:0b:48:18:84:0f:1a:95:99:
31:03:91:b4:c9:5e:a2:e7:92:32:c2:58:a7:fd:3c:8d:09:f8:
8c:44:85:2f:f2:6e:9b:e1:58:37:72:88:73:5b:2b:e0:97:60:
b5:5c:b0:b8:e3:85:01:79:dd:e4:06:c6:58:be:e7:e1:f4:d9:
7c:b2:f9:13:2c:20:f2:98:2b:b4:cb:3a:13:6a:f2:f6:ba:bb:
2f:1b:97:00:0a:a8:fa:bb:95:d3:38:3f:f6:c9:ac:96:a6:e4:
73:f5:9c:47:d7:55:90:5a:3b:e9:22:3d:a0:56:e1:41:50:94:
b8:19:e5:2c:9e:f0:f8:ea:23:b4:f4:53:94:5b:9e:49:99:d7:
fe:83:26:49:fa:8b:d4:aa:ca:8f:6e:db:4d:f8:f2:a9:ce:69:
68:fd:cc:2b:41:b3:e8:e6:07:cb:9f:b7:58:4e:ef:fe:e6:91:
59:17:7e:0e:c3:65:dd:b3:63:1b:a4:82:f6:b2:e8:0b:be:aa:
bb:3e:17:5e:7a:94:75:ac:67:89:0c:a2:93:a2:88:0c:69:d0:
8f:01:2f:9b:e4:70:c7:b3:c9:f9:d4:40:04:fb:b1:b9:28:73:
09:93:e5:6f:7a:31:9a:1a:90:78:3c:20:60:d1:67:e2:15:e6:
f9:39:38:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:59:50 2025 by rpki-client