Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/YKZV_lQfer9G4FqdT_K1Kb3WxNE.roa
File: YKZV_lQfer9G4FqdT_K1Kb3WxNE.roa (raw, json)
Hash identifier: dFKKMwkXkjDml87K1725ITal69wY7Y9tT4QWVSBXxBo=
Subject key identifier: 60:A6:55:FE:54:1F:7A:BF:46:E0:5A:9D:4F:F2:B5:29:BD:D6:C4:D1
Certificate issuer: /CN=1127b8d5a5040209b8993bf2031789c3b2bab7c7
Certificate serial: 0823B9C1
Authority key identifier: 11:27:B8:D5:A5:04:02:09:B8:99:3B:F2:03:17:89:C3:B2:BA:B7:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ESe41aUEAgm4mTvyAxeJw7K6t8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/YKZV_lQfer9G4FqdT_K1Kb3WxNE.roa
Signing time: Sat 01 Jan 2022 04:51:21 +0000
ROA not before: Sat 01 Jan 2022 04:51:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43202
IP address blocks: 45.128.4.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136559041 (0x823b9c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1127b8d5a5040209b8993bf2031789c3b2bab7c7
Validity
Not Before: Jan 1 04:51:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=60a655fe541f7abf46e05a9d4ff2b529bdd6c4d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ed:af:0f:16:b0:a5:3b:56:59:99:2f:99:f8:
0b:4e:dc:16:ea:3a:b6:28:a3:4e:37:44:bb:58:d2:
4b:63:d4:da:0e:42:cd:52:97:e9:3b:b0:ac:a4:9b:
25:70:ec:e4:b2:e2:af:5e:6a:92:56:67:48:15:98:
54:31:09:1f:17:21:3d:1c:e8:2b:e1:0a:a8:35:be:
f0:5f:33:22:43:25:3b:0c:3f:a0:26:95:2f:b8:44:
64:a4:b0:04:e5:76:c7:b3:ab:95:8a:b7:d8:6b:e0:
96:1d:2a:2c:34:c1:3b:1b:b9:54:a4:95:1c:21:ca:
4b:c6:fc:10:90:53:9f:91:af:1e:59:24:73:40:0b:
5c:3e:19:ee:e1:78:9e:fe:51:c3:44:38:64:ba:b5:
63:b4:47:de:69:42:4e:49:5e:66:a6:f4:05:2c:b9:
23:03:b4:ea:53:78:74:64:c2:73:ee:04:e4:c4:98:
33:93:72:30:dd:ff:66:8f:55:e9:bf:07:19:4e:77:
94:b3:a0:89:96:af:c6:e7:be:06:a2:be:2e:ef:6d:
ba:6f:4b:17:e3:9f:ae:d2:0d:9e:d7:55:01:12:69:
49:c2:ce:18:38:c4:d6:2e:43:3a:41:71:1a:ff:be:
96:c1:ab:3e:88:38:9c:52:b9:23:91:da:18:65:43:
96:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:A6:55:FE:54:1F:7A:BF:46:E0:5A:9D:4F:F2:B5:29:BD:D6:C4:D1
X509v3 Authority Key Identifier:
keyid:11:27:B8:D5:A5:04:02:09:B8:99:3B:F2:03:17:89:C3:B2:BA:B7:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESe41aUEAgm4mTvyAxeJw7K6t8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/YKZV_lQfer9G4FqdT_K1Kb3WxNE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.4.0/22
Signature Algorithm: sha256WithRSAEncryption
c1:a4:e5:62:27:97:21:d1:61:9a:96:47:36:82:d5:39:be:8a:
8c:15:ca:cc:08:ea:12:94:18:ce:d8:5a:87:a1:13:5b:2d:9b:
b2:98:88:e0:14:a7:ba:fe:a2:c6:0d:17:5c:2c:96:92:ea:6f:
bf:f4:8a:9d:74:29:ab:d5:c1:5c:1f:d1:3b:54:f6:03:83:8e:
47:89:72:9d:99:6d:aa:d0:ef:87:d1:38:b2:8d:3a:16:48:01:
57:23:9d:0b:c8:23:2a:af:4d:cc:04:c4:8e:f4:27:be:6e:98:
e6:9c:12:c1:1d:2b:95:75:16:7f:ee:7b:73:c2:75:cc:fe:46:
5d:49:55:bf:7e:e0:b5:0c:36:16:ef:67:10:a9:21:42:15:cc:
2b:8c:4b:02:1e:97:c3:78:c3:31:d8:f2:07:3b:e8:38:1c:4a:
d8:cf:2f:2a:66:9e:f4:82:f8:7a:e4:a5:c2:99:90:c9:cd:c3:
82:9d:f1:d4:e8:78:3b:63:ea:f2:07:87:5f:08:43:b6:c0:a6:
6a:2d:ac:5c:5f:e9:bb:a8:fa:fa:50:69:de:e6:70:03:3d:be:
18:de:ee:be:2e:d7:e8:20:ff:22:7f:cf:02:de:55:57:8a:a7:
c4:ef:26:e3:61:8a:5d:9e:66:54:80:6e:4a:d0:f4:a9:dc:40:
f8:7f:ff:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 05:00:45 2025 by rpki-client