Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/IYYfGrad5FTPk2JYPH6AU-SLzTY.roa
File: IYYfGrad5FTPk2JYPH6AU-SLzTY.roa (raw, json)
Hash identifier: PbDyKeEOqAq1o8jv5JP+dtcOF0wTKZHbwMhttqcIHHE=
Subject key identifier: 21:86:1F:1A:B6:9D:E4:54:CF:93:62:58:3C:7E:80:53:E4:8B:CD:36
Certificate issuer: /CN=beb12ce6a91030e27d5abad146df27bc2880652b
Certificate serial: 0189CEE36C35C55940EDD7FF3865CF39C100
Authority key identifier: BE:B1:2C:E6:A9:10:30:E2:7D:5A:BA:D1:46:DF:27:BC:28:80:65:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/IYYfGrad5FTPk2JYPH6AU-SLzTY.roa
Signing time: Mon 07 Aug 2023 07:25:58 +0000
ROA not before: Mon 07 Aug 2023 07:25:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42705
IP address blocks: 193.186.198.0/24 maxlen: 24
193.186.196.0/22 maxlen: 22
193.186.196.0/24 maxlen: 24
193.186.197.0/24 maxlen: 24
5.11.23.0/24 maxlen: 24
5.11.20.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ce:e3:6c:35:c5:59:40:ed:d7:ff:38:65:cf:39:c1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beb12ce6a91030e27d5abad146df27bc2880652b
Validity
Not Before: Aug 7 07:25:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=21861f1ab69de454cf9362583c7e8053e48bcd36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1b:61:3a:b9:50:45:b7:3b:d5:ef:59:ec:33:
de:3b:76:e6:86:33:0c:26:67:83:9f:14:08:c0:80:
2b:4d:42:d0:77:33:b5:af:16:35:6a:7b:15:57:59:
98:ca:06:2c:4c:69:39:1f:f3:d5:70:fc:2c:20:e1:
78:32:ab:8f:81:5a:6f:37:be:86:4e:bc:ab:dc:dd:
66:55:59:71:dc:81:33:fd:4a:b3:b5:ab:0f:3d:c6:
d3:97:fe:d6:53:ae:6d:6c:31:2f:5b:d8:3b:32:16:
c7:83:83:7d:1f:23:c8:01:7c:2e:27:c6:d0:ad:7c:
81:05:4b:d7:6f:d1:98:9d:e1:e5:b3:a5:b4:e4:9f:
9f:5c:4f:c8:af:16:6c:3f:74:68:bb:d4:6d:1f:b8:
20:99:3f:12:34:80:12:84:36:39:14:87:5c:fb:33:
7e:61:a0:57:cb:86:3e:af:c9:d3:7b:cf:12:82:cf:
0a:52:87:d1:7d:b2:af:d8:a1:6b:88:3f:ad:ae:4d:
4d:5a:de:ce:09:28:43:a5:1c:74:2c:9a:a9:66:e7:
f3:f3:d1:e8:48:9e:fc:dc:ff:9c:8c:56:bf:fd:fb:
49:fc:af:7c:b8:c0:07:e2:4d:35:ae:cd:74:4c:e8:
dd:04:fb:e1:ac:70:62:ee:f5:a9:84:ba:98:f4:14:
50:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:86:1F:1A:B6:9D:E4:54:CF:93:62:58:3C:7E:80:53:E4:8B:CD:36
X509v3 Authority Key Identifier:
keyid:BE:B1:2C:E6:A9:10:30:E2:7D:5A:BA:D1:46:DF:27:BC:28:80:65:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/IYYfGrad5FTPk2JYPH6AU-SLzTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.11.20.0/24
5.11.23.0/24
193.186.196.0/22
Signature Algorithm: sha256WithRSAEncryption
16:49:ce:fe:70:b7:6f:60:b1:44:a7:2a:9d:6f:85:5d:7e:9d:
3f:b2:13:7c:c0:e3:3e:e8:0f:0e:92:1d:28:19:33:5e:b0:b1:
a5:ca:d5:8e:92:77:2d:27:57:40:ba:8a:8c:df:69:47:4f:80:
e8:3a:4a:39:cc:df:57:5c:52:c3:e8:01:a2:6c:ee:45:61:02:
8e:69:92:04:c2:d0:ca:44:49:69:00:42:3f:27:bb:a7:02:cf:
19:24:80:d5:b6:99:8d:ff:3d:94:56:54:1e:c4:07:1c:75:5e:
6d:67:d0:ec:db:3e:92:55:b9:7a:2d:d7:a3:b8:b2:92:32:2b:
72:11:52:57:c8:28:96:e5:21:e8:ab:d9:4c:ba:3b:83:7c:1a:
7e:2e:65:8e:fc:03:ee:7e:78:50:db:f1:f8:07:33:63:99:a6:
25:0e:59:3d:0e:b2:93:1d:1d:78:b6:5a:f7:2a:94:d3:ba:9b:
02:eb:c7:0c:6a:b6:c0:0b:9c:a5:48:75:e8:03:ee:02:75:d8:
52:61:a6:b3:85:63:f2:e3:9b:e2:6b:59:17:d6:ca:95:6d:7b:
e2:57:35:6c:34:85:44:3c:16:23:4e:b3:7c:08:3b:fe:73:4d:
b3:e0:fc:71:ea:dd:dc:a2:73:f6:6e:c3:93:79:e3:ef:81:70:
7f:bd:3c:99
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYnO42w1xVlA7df/OGXPOcEAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlYjEyY2U2YTkxMDMwZTI3ZDVhYmFkMTQ2ZGYyN2JjMjg4
MDY1MmIwHhcNMjMwODA3MDcyNTU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMTg2MWYxYWI2OWRlNDU0Y2Y5MzYyNTgzYzdlODA1M2U0OGJjZDM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxthOrlQRbc71e9Z7DPeO3bmhjMM
JmeDnxQIwIArTULQdzO1rxY1ansVV1mYygYsTGk5H/PVcPwsIOF4MquPgVpvN76G
Tryr3N1mVVlx3IEz/UqztasPPcbTl/7WU65tbDEvW9g7MhbHg4N9HyPIAXwuJ8bQ
rXyBBUvXb9GYneHls6W05J+fXE/IrxZsP3Rou9RtH7ggmT8SNIAShDY5FIdc+zN+
YaBXy4Y+r8nTe88Sgs8KUofRfbKv2KFriD+trk1NWt7OCShDpRx0LJqpZufz89Ho
SJ783P+cjFa//ftJ/K98uMAH4k01rs10TOjdBPvhrHBi7vWphLqY9BRQXwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFCGGHxq2neRUz5NiWDx+gFPki802MB8GA1UdIwQY
MBaAFL6xLOapEDDifVq60UbfJ7wogGUrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnJFczVxa1FNT0o5V3JyUlJ0OG52Q2lBWlNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC83NDk0MGEtZDlmYS00NTUyLWJlNWMt
YTdhZGU0MzRkNDUxLzEvSVlZZkdyYWQ1RlRQazJKWVBINkFVLVNMelRZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC83NDk0MGEtZDlmYS00NTUyLWJlNWMtYTdhZGU0MzRkNDUx
LzEvdnJFczVxa1FNT0o5V3JyUlJ0OG52Q2lBWlNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQABQsUAwQA
BQsXAwQCwbrEMA0GCSqGSIb3DQEBCwUAA4IBAQAWSc7+cLdvYLFEpyqdb4Vdfp0/
shN8wOM+6A8Okh0oGTNesLGlytWOknctJ1dAuoqM32lHT4DoOko5zN9XXFLD6AGi
bO5FYQKOaZIEwtDKRElpAEI/J7unAs8ZJIDVtpmN/z2UVlQexAccdV5tZ9Ds2z6S
Vbl6LdejuLKSMityEVJXyCiW5SHoq9lMujuDfBp+LmWO/APufnhQ2/H4BzNjmaYl
Dlk9DrKTHR14tlr3KpTTupsC68cMarbAC5ylSHXoA+4CddhSYaazhWPy45via1kX
1sqVbXviVzVsNIVEPBYjTrN8CDv+c02z4Pxx6t3conP2bsOTeePvgXB/vTyZ
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:58:10 2025 by rpki-client