Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/YVSSmkMzhgJpYBvikJl8nTISkfY.roa
File: YVSSmkMzhgJpYBvikJl8nTISkfY.roa (raw, json)
Hash identifier: WP3FV3kMBv/is93jR1son4SAexm+fcF4Qb6X74/JdTs=
Subject key identifier: 61:54:92:9A:43:33:86:02:69:60:1B:E2:90:99:7C:9D:32:12:91:F6
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 01856ED4F823238842469DC13EE551A00F1E
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/YVSSmkMzhgJpYBvikJl8nTISkfY.roa
Signing time: Sun 01 Jan 2023 19:35:28 +0000
ROA not before: Sun 01 Jan 2023 19:35:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201465
IP address blocks: 81.3.145.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:f8:23:23:88:42:46:9d:c1:3e:e5:51:a0:0f:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 19:35:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6154929a4333860269601be290997c9d321291f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:52:48:8b:9f:ea:00:cc:f0:c0:e3:ba:ad:4c:
cb:e2:fd:1f:7f:54:9d:3a:0c:1c:0b:41:6b:8e:d4:
61:e7:49:c7:8a:5a:16:30:50:88:17:51:a5:85:f7:
09:79:f6:7a:45:d3:db:e0:5c:07:db:3b:84:e7:30:
fc:39:b4:ea:ab:66:d8:30:44:79:c3:1c:57:37:a9:
eb:99:72:1e:54:86:97:f8:0c:03:f5:09:60:90:21:
8f:d3:67:60:a2:a0:17:a0:18:a2:aa:3e:4e:f3:9d:
f2:58:b1:08:23:f3:0e:c0:00:d5:9b:ba:6a:66:59:
78:18:5c:28:f7:75:dd:97:4e:b4:10:9d:58:dc:b8:
6a:19:51:d6:8a:e6:8e:10:9a:ee:ae:3c:3c:98:08:
d7:f0:59:57:ea:2f:5a:33:d1:dc:ed:85:de:b8:0f:
d1:bd:b8:07:a0:d8:10:f7:b8:a6:4e:12:a3:17:7b:
86:91:1b:08:c8:ee:6b:41:25:48:20:03:a7:76:10:
95:55:ef:f2:42:ce:ee:90:52:bc:8f:b6:07:ab:83:
d1:d3:26:30:f7:28:5c:0e:f2:08:c0:c1:71:e9:2b:
62:4c:d6:14:5c:5d:b9:27:4c:fb:b0:5f:48:43:57:
9b:59:f0:eb:f4:e9:53:44:d0:3f:5b:96:cd:2b:59:
60:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:54:92:9A:43:33:86:02:69:60:1B:E2:90:99:7C:9D:32:12:91:F6
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/YVSSmkMzhgJpYBvikJl8nTISkfY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.3.145.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:9b:17:53:20:10:2f:a5:cf:0f:2e:28:12:7a:74:69:6b:9a:
ee:03:ea:12:d1:22:e4:f7:88:7b:24:55:7d:07:2b:0b:6d:94:
2a:91:06:90:e6:24:15:30:30:b4:13:02:6d:95:a1:cc:65:5b:
88:41:55:f0:87:23:9c:6b:f6:d5:d8:ec:75:2f:d1:79:8c:73:
14:bf:4e:1f:8b:30:d4:8d:0e:4d:c6:49:d5:9f:38:2e:ce:65:
39:8b:43:b6:6b:aa:5b:3d:c7:61:cd:b7:da:08:d3:bb:65:67:
bd:23:eb:87:5d:54:48:28:6c:1a:fc:f2:83:24:f8:0f:b8:1f:
58:3a:76:0b:40:32:07:14:42:b3:68:df:eb:2d:01:06:7c:ef:
85:b9:f8:ca:3b:21:ea:a0:de:30:3f:c0:2f:b0:54:32:93:ff:
7e:cb:19:dc:e2:ff:57:b3:25:f9:f5:fe:a2:58:df:9f:ea:ba:
75:2c:9b:19:66:76:56:83:dc:e2:e8:b0:5a:de:4f:4a:69:0b:
4d:49:b6:be:bd:dd:d4:6a:48:79:cd:97:30:c3:3f:11:1e:15:
62:99:c5:27:3f:98:14:2a:d6:f8:9e:3e:b7:16:e5:22:4c:b7:
f8:72:9b:3c:57:d3:2e:0c:30:8c:95:cb:14:32:de:ef:b2:41:
83:85:71:5a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVu1PgjI4hCRp3BPuVRoA8eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx
Nzg1YzAwHhcNMjMwMTAxMTkzNTI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MTU0OTI5YTQzMzM4NjAyNjk2MDFiZTI5MDk5N2M5ZDMyMTI5MWY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVJIi5/qAMzwwOO6rUzL4v0ff1Sd
OgwcC0FrjtRh50nHiloWMFCIF1GlhfcJefZ6RdPb4FwH2zuE5zD8ObTqq2bYMER5
wxxXN6nrmXIeVIaX+AwD9QlgkCGP02dgoqAXoBiiqj5O853yWLEII/MOwADVm7pq
Zll4GFwo93Xdl060EJ1Y3LhqGVHWiuaOEJrurjw8mAjX8FlX6i9aM9Hc7YXeuA/R
vbgHoNgQ97imThKjF3uGkRsIyO5rQSVIIAOndhCVVe/yQs7ukFK8j7YHq4PR0yYw
9yhcDvIIwMFx6StiTNYUXF25J0z7sF9IQ1ebWfDr9OlTRNA/W5bNK1lg8QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGFUkppDM4YCaWAb4pCZfJ0yEpH2MB8GA1UdIwQY
MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct
ODllNTZjODBkMWQwLzEvWVZTU21rTXpoZ0pwWUJ2aWtKbDhuVElTa2ZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw
LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUQORMA0G
CSqGSIb3DQEBCwUAA4IBAQCgmxdTIBAvpc8PLigSenRpa5ruA+oS0SLk94h7JFV9
BysLbZQqkQaQ5iQVMDC0EwJtlaHMZVuIQVXwhyOca/bV2Ox1L9F5jHMUv04fizDU
jQ5NxknVnzguzmU5i0O2a6pbPcdhzbfaCNO7ZWe9I+uHXVRIKGwa/PKDJPgPuB9Y
OnYLQDIHFEKzaN/rLQEGfO+FufjKOyHqoN4wP8AvsFQyk/9+yxnc4v9XsyX59f6i
WN+f6rp1LJsZZnZWg9zi6LBa3k9KaQtNSba+vd3Uakh5zZcwwz8RHhVimcUnP5gU
Ktb4nj63FuUiTLf4cps8V9MuDDCMlcsUMt7vskGDhXFa
-----END CERTIFICATE-----
Generated at Tue Apr 8 04:48:31 2025 by rpki-client