Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/yuQHEjXnVmy2nYkjySvJ1i90u5I.roa
File: yuQHEjXnVmy2nYkjySvJ1i90u5I.roa (raw, json)
Hash identifier: AzF2mLFis7jMirlRqOBQysjiygxWbzSz0DktIJxetyc=
Subject key identifier: CA:E4:07:12:35:E7:56:6C:B6:9D:89:23:C9:2B:C9:D6:2F:74:BB:92
Certificate issuer: /CN=5d6f2e49a31e8df9c5aa08aaf240b5c832b9cb93
Certificate serial: 01856FDDC72244AF46FA2A49E217CD3D1820
Authority key identifier: 5D:6F:2E:49:A3:1E:8D:F9:C5:AA:08:AA:F2:40:B5:C8:32:B9:CB:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/yuQHEjXnVmy2nYkjySvJ1i90u5I.roa
Signing time: Mon 02 Jan 2023 00:24:43 +0000
ROA not before: Mon 02 Jan 2023 00:24:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47264
IP address blocks: 80.247.95.0/24 maxlen: 24
185.95.48.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:dd:c7:22:44:af:46:fa:2a:49:e2:17:cd:3d:18:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d6f2e49a31e8df9c5aa08aaf240b5c832b9cb93
Validity
Not Before: Jan 2 00:24:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cae4071235e7566cb69d8923c92bc9d62f74bb92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:dc:45:a9:e0:78:9b:e5:05:33:e7:81:6c:2c:
0a:55:71:3d:13:f3:ca:28:f6:d1:d5:56:38:0f:41:
bc:73:1e:ee:29:91:66:a9:14:6a:6c:1d:14:a3:23:
14:ba:eb:a7:d5:d0:48:d5:91:6d:41:b7:b4:73:c4:
fd:d3:f9:f1:53:7d:40:86:ba:c1:97:58:62:a1:b8:
94:9f:8b:f3:31:0a:ab:26:ff:54:07:5e:5e:21:14:
68:a7:ed:b3:9a:ed:18:ad:6f:c4:2b:82:d3:be:f7:
3e:3e:d8:52:05:58:3e:a1:10:81:6f:34:6b:d2:ae:
24:4a:1a:7b:71:d4:66:b3:73:67:38:23:14:c5:05:
2c:d7:cc:d7:66:1f:49:8e:e9:55:78:89:ce:5f:a7:
75:ad:5d:a0:88:5e:b2:69:fb:4d:dc:c8:f2:9e:a4:
db:89:4e:86:16:ef:f2:af:c6:10:77:b6:72:23:cb:
df:ae:bb:a7:83:3a:26:86:f2:36:64:ba:f1:65:16:
ab:c3:11:ca:27:fa:6c:98:92:61:78:99:a5:73:34:
e7:6c:cd:42:c9:35:5f:f0:1e:c9:97:41:a4:c3:29:
91:de:98:78:d0:09:68:e7:4e:10:13:4d:81:07:48:
45:c6:52:55:3b:df:cc:f9:7a:71:6f:e5:69:48:a6:
37:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:E4:07:12:35:E7:56:6C:B6:9D:89:23:C9:2B:C9:D6:2F:74:BB:92
X509v3 Authority Key Identifier:
keyid:5D:6F:2E:49:A3:1E:8D:F9:C5:AA:08:AA:F2:40:B5:C8:32:B9:CB:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/yuQHEjXnVmy2nYkjySvJ1i90u5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.247.95.0/24
185.95.48.0/22
Signature Algorithm: sha256WithRSAEncryption
22:8b:1e:c2:16:75:9a:1b:80:b8:70:af:1f:b9:67:4d:cd:28:
28:c8:94:68:13:83:20:ef:f3:65:00:db:b0:ad:83:44:03:57:
32:49:7a:0f:eb:59:6f:e8:96:96:3e:e8:25:3e:67:87:41:dd:
81:55:e9:6c:96:8f:22:98:7f:b4:2b:b9:2a:0e:9b:70:c2:d4:
03:de:24:5d:0a:a6:d4:6a:15:4e:1a:60:c0:0f:eb:82:5e:b8:
6f:34:0f:8c:a8:db:ce:8e:99:cf:91:9b:68:cb:8a:ce:9c:6a:
95:9c:f0:68:ed:f3:a7:95:c1:3b:78:9f:aa:58:99:eb:54:6f:
af:79:df:b5:33:95:22:6d:84:9a:56:cb:ac:64:a5:43:e1:8d:
fa:82:c2:ee:c2:10:6e:6a:fc:99:98:dc:d5:7f:3c:87:04:eb:
5f:8e:b9:84:45:04:56:1a:79:52:d8:bd:5b:5f:e2:93:a5:b6:
3d:67:71:c4:fd:46:35:bc:65:75:b0:06:ab:cd:96:52:ee:0c:
61:07:6d:86:de:e9:a0:e8:67:c8:24:1e:89:f8:65:ef:9c:56:
fe:4b:82:5c:98:ea:ce:59:ca:04:28:eb:8a:64:52:dd:88:f7:
5f:8c:55:72:f3:f3:5d:05:50:1e:af:e7:fe:fc:31:0d:33:ed:
83:ce:6b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 19:58:31 2025 by rpki-client