Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/YF-89flBUSmgejOl5Yr4pF4aCQo.roa
File: YF-89flBUSmgejOl5Yr4pF4aCQo.roa (raw, json)
Hash identifier: HLPK1vkUZAgHkrvL3szSbXnDHDR6OMV8wo7qa54NHM4=
Subject key identifier: 60:5F:BC:F5:F9:41:51:29:A0:7A:33:A5:E5:8A:F8:A4:5E:1A:09:0A
Certificate issuer: /CN=a71a2a2db4d7418e9bf4f93c8c046a0161663c62
Certificate serial: 01856F5DCA52A3CB838C45A39DB4D3314D9C
Authority key identifier: A7:1A:2A:2D:B4:D7:41:8E:9B:F4:F9:3C:8C:04:6A:01:61:66:3C:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxoqLbTXQY6b9Pk8jARqAWFmPGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/YF-89flBUSmgejOl5Yr4pF4aCQo.roa
Signing time: Sun 01 Jan 2023 22:04:55 +0000
ROA not before: Sun 01 Jan 2023 22:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 185.157.50.0/24 maxlen: 24
185.157.51.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:ca:52:a3:cb:83:8c:45:a3:9d:b4:d3:31:4d:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a71a2a2db4d7418e9bf4f93c8c046a0161663c62
Validity
Not Before: Jan 1 22:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=605fbcf5f9415129a07a33a5e58af8a45e1a090a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:a9:9b:89:02:8c:ca:92:14:6d:98:b5:75:9a:
ff:d8:e7:d2:be:9a:83:7f:38:45:1f:60:2b:a6:9e:
ea:f3:7a:f0:01:55:a0:f6:d4:4a:04:d6:65:e6:67:
96:f3:ea:c0:2d:21:c7:c4:63:bb:f6:82:a6:bd:00:
4d:93:b9:17:01:a1:16:0b:c4:46:33:4a:9e:a5:a8:
d3:cd:8e:1c:ec:ba:0a:09:0a:25:62:0e:48:e9:e6:
36:2a:00:2b:5a:b4:e3:e6:21:87:4b:a9:f1:c7:58:
53:77:ab:fb:91:17:e1:48:4a:14:e5:56:64:69:f6:
41:19:93:e5:fb:c7:f4:aa:ad:ee:16:bc:2c:1b:2e:
ba:ea:f5:5b:db:c5:40:15:c8:13:32:f4:f2:a4:09:
5f:3b:59:46:76:60:aa:1e:ba:d6:a8:96:98:c6:9e:
59:62:b4:0f:f1:2d:b4:8d:04:d5:b3:30:7c:48:fb:
67:e4:34:0a:8b:fb:4f:49:d8:0f:6b:b6:6c:0c:5b:
6a:3d:ec:bd:3a:f8:64:fb:2c:2b:1d:8d:f0:43:ed:
f5:be:10:ce:5c:24:02:ff:a2:6f:2d:05:0f:12:e9:
10:13:67:c2:af:ac:ee:d4:b9:fe:a9:01:23:ed:6d:
05:73:d3:dc:80:67:42:95:49:29:69:ab:b8:c4:5d:
d0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:5F:BC:F5:F9:41:51:29:A0:7A:33:A5:E5:8A:F8:A4:5E:1A:09:0A
X509v3 Authority Key Identifier:
keyid:A7:1A:2A:2D:B4:D7:41:8E:9B:F4:F9:3C:8C:04:6A:01:61:66:3C:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxoqLbTXQY6b9Pk8jARqAWFmPGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/YF-89flBUSmgejOl5Yr4pF4aCQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.157.50.0/23
Signature Algorithm: sha256WithRSAEncryption
a9:48:50:bd:e1:f6:c0:30:42:33:e6:0e:bc:65:e2:0d:50:89:
e0:c2:63:72:18:11:69:70:fb:4c:c9:93:7b:a6:04:8a:59:e4:
66:22:01:fd:1e:e0:6b:8c:2b:a2:8a:e0:f0:0b:b3:d5:80:66:
d9:f3:f8:2b:d2:66:ae:10:a1:20:bb:57:8d:9e:6d:a3:aa:2f:
f6:88:7f:6b:69:29:c7:34:2a:dc:b7:73:c5:1e:94:77:6d:75:
e9:78:33:27:49:dd:81:41:e6:76:e4:c7:b6:39:99:fb:f7:45:
58:1e:d8:8a:9e:97:1a:cf:e3:44:ad:c1:64:24:b8:77:f0:65:
5e:03:62:df:91:e9:f4:4d:ff:77:df:b0:ee:f2:8a:0e:39:fa:
1e:e3:de:ca:9a:6f:c0:8f:b8:f9:dd:0a:1c:b8:a0:0c:34:65:
16:52:35:ad:32:7f:b3:53:05:01:c6:1f:0c:f1:fc:d4:07:75:
72:54:2d:29:e9:38:ba:50:90:4d:67:02:ea:c5:d2:a0:e0:ce:
ef:0a:92:f8:68:69:27:90:58:30:63:a4:ad:f9:c7:45:92:ea:
af:40:14:68:2f:22:b0:a9:80:a3:a3:7c:d0:80:c6:79:31:22:
03:d1:c0:37:da:4f:87:ca:ca:64:57:b3:bd:ec:16:1a:d1:39:
82:28:69:73
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvXcpSo8uDjEWjnbTTMU2cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3MWEyYTJkYjRkNzQxOGU5YmY0ZjkzYzhjMDQ2YTAxNjE2
NjNjNjIwHhcNMjMwMTAxMjIwNDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MDVmYmNmNWY5NDE1MTI5YTA3YTMzYTVlNThhZjhhNDVlMWEwOTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKmbiQKMypIUbZi1dZr/2OfSvpqD
fzhFH2Arpp7q83rwAVWg9tRKBNZl5meW8+rALSHHxGO79oKmvQBNk7kXAaEWC8RG
M0qepajTzY4c7LoKCQolYg5I6eY2KgArWrTj5iGHS6nxx1hTd6v7kRfhSEoU5VZk
afZBGZPl+8f0qq3uFrwsGy666vVb28VAFcgTMvTypAlfO1lGdmCqHrrWqJaYxp5Z
YrQP8S20jQTVszB8SPtn5DQKi/tPSdgPa7ZsDFtqPey9Ovhk+ywrHY3wQ+31vhDO
XCQC/6JvLQUPEukQE2fCr6zu1Ln+qQEj7W0Fc9PcgGdClUkpaau4xF3QbwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGBfvPX5QVEpoHozpeWK+KReGgkKMB8GA1UdIwQY
MBaAFKcaKi2010GOm/T5PIwEagFhZjxiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHhvcUxiVFhRWTZiOVBrOGpBUnFBV0ZtUEdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9iN2FiZGYtM2JlMS00NjQyLTlmM2Ut
ZjFmMGI5NTk4ZjMyLzEvWUYtODlmbEJVU21nZWpPbDVZcjRwRjRhQ1FvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy9iN2FiZGYtM2JlMS00NjQyLTlmM2UtZjFmMGI5NTk4ZjMy
LzEvcHhvcUxiVFhRWTZiOVBrOGpBUnFBV0ZtUEdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuZ0yMA0G
CSqGSIb3DQEBCwUAA4IBAQCpSFC94fbAMEIz5g68ZeINUIngwmNyGBFpcPtMyZN7
pgSKWeRmIgH9HuBrjCuiiuDwC7PVgGbZ8/gr0mauEKEgu1eNnm2jqi/2iH9raSnH
NCrct3PFHpR3bXXpeDMnSd2BQeZ25Me2OZn790VYHtiKnpcaz+NErcFkJLh38GVe
A2Lfken0Tf9337Du8ooOOfoe497Kmm/Aj7j53QocuKAMNGUWUjWtMn+zUwUBxh8M
8fzUB3VyVC0p6Ti6UJBNZwLqxdKg4M7vCpL4aGknkFgwY6St+cdFkuqvQBRoLyKw
qYCjo3zQgMZ5MSID0cA32k+HyspkV7O97BYa0TmCKGlz
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:15:20 2025 by rpki-client