Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ypEEmdQdY0ZRMBH8z4c7eoNYpDw.roa
File: ypEEmdQdY0ZRMBH8z4c7eoNYpDw.roa (raw, json)
Hash identifier: tY8u5PN1Avbo51WTSqUt0Cc4PkFKYFRYXT3vfHRIpc8=
Subject key identifier: CA:91:04:99:D4:1D:63:46:51:30:11:FC:CF:87:3B:7A:83:58:A4:3C
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018832C86AEDEAEE105A6E8218702FDCE34A
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ypEEmdQdY0ZRMBH8z4c7eoNYpDw.roa
Signing time: Fri 19 May 2023 06:52:55 +0000
ROA not before: Fri 19 May 2023 06:52:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58955
IP address blocks: 45.128.25.0/24 maxlen: 24
45.128.26.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:32:c8:6a:ed:ea:ee:10:5a:6e:82:18:70:2f:dc:e3:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: May 19 06:52:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ca910499d41d6346513011fccf873b7a8358a43c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:31:cd:6b:a7:41:7b:5b:2b:fc:8b:bb:87:80:
43:fe:d5:4f:a1:1e:a1:18:89:ab:16:77:32:af:e5:
9f:93:56:3d:9a:a5:c5:08:22:04:55:e0:e0:66:e5:
ff:84:9b:06:e8:ae:7c:8f:f6:4e:31:63:d6:09:82:
a7:23:c5:aa:4c:9d:28:5d:6f:32:00:8b:5a:f3:97:
b1:2f:e8:96:e6:0a:de:1d:0f:9b:cc:a1:6b:3b:54:
0d:95:fb:7a:e4:c0:8b:61:98:d6:9e:5c:b1:e8:55:
82:05:1d:ac:b7:34:f8:1e:e6:be:77:aa:38:bc:ca:
52:c1:d2:2c:37:6f:34:64:b7:b6:ee:d4:0f:56:a9:
1f:58:5e:59:83:7d:58:00:e8:17:56:b1:d5:6b:0f:
59:08:8f:6b:ac:c1:b0:1c:5c:d2:21:fb:39:4b:3e:
fe:8b:f4:16:b3:a1:22:d6:7b:b2:c5:34:d8:0a:51:
08:ba:49:ce:e3:f3:3a:fa:f0:71:3e:d4:38:dd:22:
c7:48:1a:85:91:80:8f:af:7a:1d:a0:28:83:33:eb:
0a:a2:e3:f3:d2:81:ab:48:fb:59:e5:37:8c:c9:b2:
d9:91:26:96:d9:90:ea:7a:4b:6d:f1:2c:f6:bc:bc:
51:33:b7:69:4c:ff:86:32:af:37:b4:62:18:88:d0:
59:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:91:04:99:D4:1D:63:46:51:30:11:FC:CF:87:3B:7A:83:58:A4:3C
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ypEEmdQdY0ZRMBH8z4c7eoNYpDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.25.0-45.128.26.255
Signature Algorithm: sha256WithRSAEncryption
7a:ff:d5:c8:5e:de:df:28:4e:1c:fd:9e:d7:37:b6:d1:4f:da:
27:d3:28:ab:9a:8b:87:cf:dc:1a:ce:14:33:7d:a9:4d:7f:23:
7c:1f:11:6b:17:e4:e1:ab:0b:20:18:be:b5:a0:6e:ff:4c:2c:
b0:55:bc:eb:ba:e9:82:2d:f3:d0:46:17:03:a9:d6:25:22:55:
8b:04:83:53:75:ef:a9:93:b2:27:9c:9e:2f:c1:25:08:49:48:
ae:fe:ff:f0:58:49:76:d3:fc:14:bd:61:c5:fb:2d:67:07:45:
70:37:d1:09:1b:66:1e:58:70:68:88:7c:f4:8e:27:43:96:10:
b7:12:4e:ef:52:54:3e:e1:27:56:c7:a2:5a:f9:bb:d0:e8:b5:
79:bf:0c:a3:8f:e4:62:22:17:e3:7f:3f:cc:51:23:9e:b1:61:
86:1c:e4:9b:9d:ab:0e:23:e9:14:c6:cb:78:d4:04:9b:2a:60:
e6:d9:03:c6:bc:f8:d9:85:f7:16:b9:6c:bf:e4:d3:30:0f:57:
c7:c4:54:a4:c3:f9:d9:e6:8a:25:df:df:4c:96:20:30:b8:83:
54:39:d4:64:3b:b7:d7:98:5b:70:41:7d:15:55:08:c9:e5:9b:
63:6e:68:f6:b7:2b:a9:2c:41:d2:c6:76:15:a9:3c:3c:ba:63:
67:f7:e3:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:04:41 2025 by rpki-client