Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/YB5kBMoT-WD5UzzNxyGu-AK4ZNM.roa
File: YB5kBMoT-WD5UzzNxyGu-AK4ZNM.roa (raw, json)
Hash identifier: IKaYcbS+xPQHTi5g5N6w8ZCZLBbPwUsXyFg/i28xoS0=
Subject key identifier: 60:1E:64:04:CA:13:F9:60:F9:53:3C:CD:C7:21:AE:F8:02:B8:64:D3
Certificate issuer: /CN=c1acf260d23263a7c6bb6c59c19eebc6759b60be
Certificate serial: 018292B17DEF9EF3D1ED02B30362E4AA5A71
Authority key identifier: C1:AC:F2:60:D2:32:63:A7:C6:BB:6C:59:C1:9E:EB:C6:75:9B:60:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wazyYNIyY6fGu2xZwZ7rxnWbYL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/YB5kBMoT-WD5UzzNxyGu-AK4ZNM.roa
Signing time: Fri 12 Aug 2022 15:34:41 +0000
ROA not before: Fri 12 Aug 2022 15:34:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13280
IP address blocks: 95.83.229.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:92:b1:7d:ef:9e:f3:d1:ed:02:b3:03:62:e4:aa:5a:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1acf260d23263a7c6bb6c59c19eebc6759b60be
Validity
Not Before: Aug 12 15:34:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=601e6404ca13f960f9533ccdc721aef802b864d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:24:3d:82:e3:a2:20:2d:38:d7:f9:1a:45:05:
20:22:79:b0:3a:f2:5e:92:88:c8:04:ab:b6:c9:ef:
1f:53:5a:01:38:fa:d4:fb:92:3e:f9:c1:ad:25:58:
a3:f4:bc:63:7f:eb:37:16:7b:53:ff:e6:23:3d:ab:
1b:b4:67:c9:d3:9c:d1:2a:d6:7f:13:ad:b3:fc:eb:
ca:47:4d:d6:b8:07:69:f4:7e:69:88:00:52:ae:53:
38:0b:5c:93:90:17:63:92:50:06:31:c5:9a:0e:21:
ee:c5:9a:4d:e2:1a:cb:be:f4:f0:b5:81:05:3e:ca:
cd:1d:f3:87:4e:8f:91:dc:7b:86:7c:4f:a7:09:64:
94:9b:9e:dd:a4:ce:2a:b2:5a:b7:5d:4c:1b:47:51:
88:1e:8a:54:c0:ca:d5:ac:87:6f:4b:d5:26:d5:d6:
0f:0b:a2:f0:6c:00:10:db:74:a7:4c:85:1d:29:d1:
46:8f:5a:3a:73:4d:72:9a:23:c5:1a:40:75:f1:80:
17:14:aa:42:35:ed:8f:ed:9a:33:d5:13:d9:4e:4a:
f3:4b:68:df:20:4f:3e:03:1f:73:30:a9:22:67:55:
43:18:a7:c3:5a:8b:d5:45:b1:73:c1:be:e4:8d:dd:
e1:37:db:a8:ea:d4:05:d0:db:e7:78:2e:5f:16:da:
cb:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:1E:64:04:CA:13:F9:60:F9:53:3C:CD:C7:21:AE:F8:02:B8:64:D3
X509v3 Authority Key Identifier:
keyid:C1:AC:F2:60:D2:32:63:A7:C6:BB:6C:59:C1:9E:EB:C6:75:9B:60:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wazyYNIyY6fGu2xZwZ7rxnWbYL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/YB5kBMoT-WD5UzzNxyGu-AK4ZNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/wazyYNIyY6fGu2xZwZ7rxnWbYL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.83.229.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:8f:48:2a:41:c6:b3:ac:98:b1:62:e3:3a:b0:77:dd:91:ed:
a2:36:22:ea:aa:37:9f:f4:a7:e0:0c:4d:65:bb:74:48:ae:13:
06:3c:9d:4e:1d:97:dd:6f:7c:c6:b0:67:90:2d:b2:30:c0:eb:
85:83:32:a6:8f:e0:bf:3f:d7:b1:bc:ba:29:7a:00:30:95:78:
94:43:53:b3:aa:e3:63:2e:85:7b:df:52:43:89:d7:17:e8:12:
05:5a:ca:fe:ba:ae:f6:a4:6b:bb:58:2f:28:88:07:0c:bb:8d:
59:0b:12:23:6f:5a:26:28:45:cf:ec:44:be:52:85:68:e7:7e:
bc:85:0e:0a:47:4a:ac:b3:16:a0:c2:95:49:65:30:59:40:13:
2e:21:d6:ba:25:1e:4b:c1:96:f3:2b:ff:93:47:a2:24:f1:e6:
b2:c3:e2:ce:7e:b0:8b:45:c0:85:46:aa:04:c9:53:e3:91:5c:
dc:e0:39:8b:e4:30:cd:b5:15:9b:1f:20:3b:ec:e3:9f:ba:f4:
73:8c:fe:55:83:3d:82:eb:4c:96:9e:af:de:8b:3a:a7:ee:ba:
ab:64:ca:76:ee:e3:84:f9:b3:32:f9:02:bd:c2:36:13:5e:8d:
ad:c1:ee:dc:34:67:66:e0:c5:3f:fc:1e:57:21:22:34:97:b7:
d8:8d:e8:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 16:45:14 2025 by rpki-client