Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/YURvtWGp8pnAgFZFaffLcb4rl4o.roa
File: YURvtWGp8pnAgFZFaffLcb4rl4o.roa (raw, json)
Hash identifier: oNnsI0yMBq7U2LPJyqoX0R9p3jWhxwK8KRy54VrabEk=
Subject key identifier: 61:44:6F:B5:61:A9:F2:99:C0:80:56:45:69:F7:CB:71:BE:2B:97:8A
Certificate issuer: /CN=bc663c6e779dae9bdb046854f189fe8c5c3c32e1
Certificate serial: 01856F14CE06AF10DFB4BEA86982CE4F2BE2
Authority key identifier: BC:66:3C:6E:77:9D:AE:9B:DB:04:68:54:F1:89:FE:8C:5C:3C:32:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGY8bnedrpvbBGhU8Yn-jFw8MuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/YURvtWGp8pnAgFZFaffLcb4rl4o.roa
Signing time: Sun 01 Jan 2023 20:45:12 +0000
ROA not before: Sun 01 Jan 2023 20:45:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51607
IP address blocks: 109.235.191.0/24 maxlen: 24
185.30.118.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:14:ce:06:af:10:df:b4:be:a8:69:82:ce:4f:2b:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc663c6e779dae9bdb046854f189fe8c5c3c32e1
Validity
Not Before: Jan 1 20:45:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=61446fb561a9f299c080564569f7cb71be2b978a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b5:e5:6e:3b:f8:b3:81:36:65:a1:7b:c5:01:
82:da:1a:8f:88:bb:69:7c:45:5c:18:b3:76:07:d4:
3c:03:45:04:5f:2f:bc:60:8d:24:db:15:55:70:7c:
35:8f:64:4e:f1:d9:05:73:ae:86:e3:ec:e2:5f:df:
84:47:3e:87:a9:d8:0f:ff:d5:ca:ad:00:a1:ad:83:
74:2c:61:35:0a:92:91:a6:62:28:77:60:ab:34:c7:
a1:83:9c:7c:44:60:25:96:a7:1f:47:9b:19:c6:42:
ab:ea:41:74:81:f2:00:2e:fa:92:ca:19:af:61:8d:
e6:f0:90:5d:5d:3c:43:dc:4e:4d:50:19:bf:e0:c6:
83:cd:0f:a0:2c:e2:62:ad:db:4f:4a:73:e8:e2:79:
e2:07:a8:d5:b1:6e:9e:d0:92:c6:66:24:66:46:9c:
90:76:26:ed:3d:d2:1d:41:1b:b3:f2:22:6a:b7:23:
ea:cd:58:e4:02:4c:19:e3:0a:d6:2c:0b:f5:b3:79:
ac:61:76:57:0a:b4:cc:a3:d0:29:de:cd:3e:c6:5f:
c1:3b:45:9b:e3:c1:b9:63:27:1f:2b:2d:6a:ba:84:
6b:59:e5:93:90:f0:c6:57:a7:7c:96:75:3b:6e:5c:
2c:06:b6:dc:5f:31:5d:1f:32:1d:10:de:18:79:2d:
94:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:44:6F:B5:61:A9:F2:99:C0:80:56:45:69:F7:CB:71:BE:2B:97:8A
X509v3 Authority Key Identifier:
keyid:BC:66:3C:6E:77:9D:AE:9B:DB:04:68:54:F1:89:FE:8C:5C:3C:32:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGY8bnedrpvbBGhU8Yn-jFw8MuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/YURvtWGp8pnAgFZFaffLcb4rl4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/vGY8bnedrpvbBGhU8Yn-jFw8MuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.235.191.0/24
185.30.118.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:7e:e8:29:88:4d:79:6b:df:5c:99:e7:b9:c4:8f:18:b8:11:
8c:a8:54:bc:9a:50:53:3f:bd:50:e5:81:04:42:af:86:63:97:
f2:e5:b0:05:e9:fd:81:57:9b:e8:be:30:5a:40:7b:09:d3:dc:
85:b3:10:06:e0:82:0a:e5:a8:68:e1:be:a7:1c:a6:80:35:b2:
5b:48:62:81:4f:07:e1:f5:55:19:bb:ce:3a:9e:2e:5b:05:77:
dd:f2:7b:cf:91:09:77:20:e0:98:b3:8b:22:28:80:2b:66:12:
b0:11:f7:02:44:91:92:2f:7d:4b:33:2c:09:d3:00:2e:2c:b4:
b2:a1:66:e9:d6:5d:18:b8:e3:88:3b:97:a5:28:03:54:70:02:
11:81:61:2c:b6:67:8d:c4:ad:29:08:51:bd:65:0a:9e:f5:bc:
00:3f:c8:1d:fa:5f:ab:2f:94:11:e8:64:49:27:3b:ca:b8:43:
76:33:7c:df:c9:26:7d:0b:b5:5a:ca:8a:92:cc:ef:60:ea:c9:
9f:cd:e2:4d:05:33:27:09:64:b7:b4:d3:a6:d2:91:2a:b0:18:
88:9d:75:c6:b0:ed:02:a6:f3:d3:e2:d1:67:9d:f7:4b:e9:a6:
96:d6:57:cc:12:cb:ba:df:45:39:0b:1c:d3:52:d8:37:45:71:
3c:87:63:53
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVvFM4GrxDftL6oaYLOTyviMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjNjYzYzZlNzc5ZGFlOWJkYjA0Njg1NGYxODlmZThjNWMz
YzMyZTEwHhcNMjMwMTAxMjA0NTEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MTQ0NmZiNTYxYTlmMjk5YzA4MDU2NDU2OWY3Y2I3MWJlMmI5NzhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7Xlbjv4s4E2ZaF7xQGC2hqPiLtp
fEVcGLN2B9Q8A0UEXy+8YI0k2xVVcHw1j2RO8dkFc66G4+ziX9+ERz6HqdgP/9XK
rQChrYN0LGE1CpKRpmIod2CrNMehg5x8RGAllqcfR5sZxkKr6kF0gfIALvqSyhmv
YY3m8JBdXTxD3E5NUBm/4MaDzQ+gLOJirdtPSnPo4nniB6jVsW6e0JLGZiRmRpyQ
dibtPdIdQRuz8iJqtyPqzVjkAkwZ4wrWLAv1s3msYXZXCrTMo9Ap3s0+xl/BO0Wb
48G5YycfKy1quoRrWeWTkPDGV6d8lnU7blwsBrbcXzFdHzIdEN4YeS2UoQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGFEb7VhqfKZwIBWRWn3y3G+K5eKMB8GA1UdIwQY
MBaAFLxmPG53na6b2wRoVPGJ/oxcPDLhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkdZOGJuZWRycHZiQkdoVThZbi1qRnc4TXVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy83YThmM2YtMzA0Yy00YTI2LWFlY2Et
MThiZGZlOGNjMGNkLzEvWVVSdnRXR3A4cG5BZ0ZaRmFmZkxjYjRybDRvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy83YThmM2YtMzA0Yy00YTI2LWFlY2EtMThiZGZlOGNjMGNk
LzEvdkdZOGJuZWRycHZiQkdoVThZbi1qRnc4TXVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAbeu/AwQB
uR52MA0GCSqGSIb3DQEBCwUAA4IBAQBtfugpiE15a99cmee5xI8YuBGMqFS8mlBT
P71Q5YEEQq+GY5fy5bAF6f2BV5vovjBaQHsJ09yFsxAG4IIK5aho4b6nHKaANbJb
SGKBTwfh9VUZu846ni5bBXfd8nvPkQl3IOCYs4siKIArZhKwEfcCRJGSL31LMywJ
0wAuLLSyoWbp1l0YuOOIO5elKANUcAIRgWEstmeNxK0pCFG9ZQqe9bwAP8gd+l+r
L5QR6GRJJzvKuEN2M3zfySZ9C7VayoqSzO9g6smfzeJNBTMnCWS3tNOm0pEqsBiI
nXXGsO0CpvPT4tFnnfdL6aaW1lfMEsu630U5CxzTUtg3RXE8h2NT
-----END CERTIFICATE-----
Generated at Tue Apr 8 04:56:01 2025 by rpki-client