Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/xY5gMAdwVHVTi7G3zJDUwRys580.roa
File: xY5gMAdwVHVTi7G3zJDUwRys580.roa (raw, json)
Hash identifier: aFO36ANoTlBVQzpWwRFzApgMGQB3KUiB3H3DrF8AgAg=
Subject key identifier: C5:8E:60:30:07:70:54:75:53:8B:B1:B7:CC:90:D4:C1:1C:AC:E7:CD
Certificate issuer: /CN=6211901227577807f4b68c8b8f25fbea9c720762
Certificate serial: 01EBB802
Authority key identifier: 62:11:90:12:27:57:78:07:F4:B6:8C:8B:8F:25:FB:EA:9C:72:07:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhGQEidXeAf0toyLjyX76pxyB2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/xY5gMAdwVHVTi7G3zJDUwRys580.roa
Signing time: Sat 01 Jan 2022 05:02:41 +0000
ROA not before: Sat 01 Jan 2022 05:02:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204835
IP address blocks: 195.138.204.0/24 maxlen: 24
91.231.174.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32225282 (0x1ebb802)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6211901227577807f4b68c8b8f25fbea9c720762
Validity
Not Before: Jan 1 05:02:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c58e603007705475538bb1b7cc90d4c11cace7cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c1:ac:0e:02:17:9a:0a:87:21:10:89:fe:60:
6c:08:d6:20:8c:b7:aa:de:1f:cd:3c:6f:4a:2e:00:
1d:c5:c0:d1:67:9c:ff:bd:9d:e9:bb:5d:8e:a8:77:
da:bb:cc:d2:0b:cd:64:bd:7d:bf:7f:fc:c2:b4:c8:
25:39:d9:23:3f:df:1a:17:0e:e4:2c:f8:48:ec:ad:
97:d3:e8:29:93:8d:5b:71:eb:19:f4:05:50:12:16:
ae:14:be:f7:b0:b8:a5:49:a2:8b:36:d2:83:8b:6f:
28:27:39:66:df:ab:e5:26:cb:e4:d8:f7:7c:44:1a:
9f:8b:65:99:8a:64:0f:ca:b1:16:a9:98:3e:6c:fd:
51:c3:f0:5e:79:ca:b6:b2:69:79:d1:56:90:11:7b:
9f:18:9d:64:c7:48:b9:6e:a1:58:f6:48:5d:e2:4e:
58:0c:9b:67:e5:b0:0a:0a:41:70:35:0f:71:4f:aa:
97:4d:04:d5:ba:29:c7:7c:74:85:ea:39:77:a5:af:
03:2f:91:b6:7d:84:ee:89:a7:14:8f:84:84:5c:54:
1f:d3:71:59:7f:9d:80:0a:fd:e7:83:ce:ae:09:f4:
65:4d:03:e2:be:4e:11:7c:d0:27:4b:cd:9d:4c:2b:
8b:1d:74:d7:75:2c:cc:76:26:83:f1:0a:e5:8c:f4:
d7:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:8E:60:30:07:70:54:75:53:8B:B1:B7:CC:90:D4:C1:1C:AC:E7:CD
X509v3 Authority Key Identifier:
keyid:62:11:90:12:27:57:78:07:F4:B6:8C:8B:8F:25:FB:EA:9C:72:07:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhGQEidXeAf0toyLjyX76pxyB2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/xY5gMAdwVHVTi7G3zJDUwRys580.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.174.0/24
195.138.204.0/24
Signature Algorithm: sha256WithRSAEncryption
78:20:13:f8:f6:98:81:b7:41:35:b7:be:73:03:ea:28:7e:d3:
11:7e:69:fe:f1:91:cb:78:4f:b3:18:db:3e:cc:0f:90:bf:c8:
8e:82:87:dd:8b:ec:94:c2:61:fc:4e:80:36:b6:0b:ec:e5:44:
84:b2:60:a3:ff:9c:ab:15:f7:5a:ab:cb:44:7b:01:37:a1:2a:
f3:34:bd:ab:2f:4c:6b:c6:84:58:53:e7:5b:08:bb:ae:2f:ee:
74:ba:6e:80:77:e7:f0:5c:f0:12:b2:8f:26:f0:01:34:d1:97:
0a:47:2e:69:c1:18:7c:78:a6:fc:2f:fa:09:14:e5:18:f8:83:
85:68:3d:04:e1:e7:6f:6b:60:10:b8:f3:19:69:95:b3:aa:cd:
bc:3e:e0:83:b1:ff:01:2f:d8:4d:7a:d9:a4:b8:93:be:e9:87:
3f:68:5a:84:10:cf:d0:79:97:e8:ea:8a:3c:a9:82:93:89:2e:
ee:8d:bd:ee:43:f3:b1:98:70:bf:03:44:e6:d8:85:2c:21:8d:
3a:e5:22:52:d7:02:72:0b:69:f9:28:de:5d:63:9b:54:88:82:
3e:00:0c:df:14:b0:3b:88:e2:e9:52:f1:28:83:2c:f2:00:e4:
4f:8e:e3:5d:20:59:6a:5c:3b:26:10:d3:dd:e7:da:0b:17:e7:
91:85:fa:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 14:40:13 2025 by rpki-client