Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/yzNrO1roxnRhHjU19WOnHrTKAzQ.roa
File: yzNrO1roxnRhHjU19WOnHrTKAzQ.roa (raw, json)
Hash identifier: 6KgnUfUP6Bp44RA8NAGfoyAIGDgTBELkkdN4qkZq3GQ=
Subject key identifier: CB:33:6B:3B:5A:E8:C6:74:61:1E:35:35:F5:63:A7:1E:B4:CA:03:34
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01856CCAEFAD832087724017832A6A048065
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/yzNrO1roxnRhHjU19WOnHrTKAzQ.roa
Signing time: Sun 01 Jan 2023 10:05:17 +0000
ROA not before: Sun 01 Jan 2023 10:05:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49515
IP address blocks: 194.68.231.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:ef:ad:83:20:87:72:40:17:83:2a:6a:04:80:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 10:05:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cb336b3b5ae8c674611e3535f563a71eb4ca0334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:17:78:60:9b:c9:8b:af:e8:9b:cb:5c:ee:bc:
9f:e2:39:c3:91:08:2e:66:3a:49:27:7e:62:57:ab:
e1:1d:0a:2a:03:aa:16:ce:ef:df:d4:71:d6:ef:e5:
23:a9:89:0b:09:0a:c7:cb:95:08:f6:1a:41:ce:0d:
89:df:40:e1:cb:59:21:f6:0a:1b:6d:98:5f:f7:e0:
b2:70:f9:18:29:3a:9f:8f:dd:4f:f4:97:30:85:f7:
96:0a:b2:9a:97:6f:e7:c7:b3:08:e8:cf:78:b4:a3:
e2:13:ed:ab:8e:34:80:22:33:1a:a3:d2:52:37:46:
7e:33:9d:28:a5:2c:f9:06:da:27:84:eb:13:09:e4:
5a:40:23:3d:1f:f3:7e:a3:4f:77:01:2f:bd:2f:75:
bb:49:db:32:3f:45:5d:1f:62:67:a6:b2:11:28:6d:
36:99:4b:37:0b:f1:ab:fc:d8:33:88:c2:14:e2:f7:
00:24:b0:bd:a7:fc:6e:32:fe:89:e7:f8:07:68:90:
f6:6a:d5:c9:96:3a:5e:28:7b:9e:e2:eb:67:d5:88:
5a:6a:dd:e9:a9:4b:0f:ff:ed:b0:fc:39:f4:b2:2d:
74:8d:7b:23:b0:37:71:1d:41:1a:f3:b5:c6:5d:31:
e8:0e:62:39:fa:f2:f1:90:0d:02:10:18:a9:a8:d3:
e6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:33:6B:3B:5A:E8:C6:74:61:1E:35:35:F5:63:A7:1E:B4:CA:03:34
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/yzNrO1roxnRhHjU19WOnHrTKAzQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.68.231.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:85:0c:4d:14:d7:67:f4:8e:e2:0c:bd:f9:e8:59:67:4b:87:
39:05:0f:88:06:2e:0d:e9:4a:0f:57:33:c3:97:81:a0:22:2f:
f4:27:2d:6c:20:b3:f5:7d:bc:83:46:11:24:61:b3:0e:25:c8:
4d:64:2d:06:8a:b8:88:cb:87:b7:3b:a6:3d:69:eb:e7:9a:7b:
7b:e4:38:e6:91:55:6f:86:8a:88:25:18:a0:de:d3:1b:54:ae:
5b:ea:ce:ca:53:45:64:29:86:81:35:0b:0c:13:c0:59:17:8f:
12:12:21:4c:63:fb:fc:bb:f5:a7:75:75:e9:29:dc:6a:cb:38:
24:3f:eb:e0:26:35:98:f1:8b:55:00:9b:2a:45:49:db:35:85:
6c:1a:b6:3b:75:e5:ac:f8:4b:07:71:30:75:91:97:52:4e:a5:
39:2a:17:53:2d:f4:2e:4a:40:5d:a6:8b:57:83:4e:4d:59:bb:
1b:d0:04:86:18:f2:31:0b:7f:53:f1:18:97:17:9b:d3:1b:e7:
3b:d1:2a:ba:18:6c:56:e3:72:62:b3:67:f7:85:e4:07:f3:09:
8a:00:dd:74:72:2f:9a:d3:40:a5:78:48:e3:29:eb:1f:ff:7e:
ed:12:51:20:f6:5c:3e:c8:41:c9:69:a5:0a:a8:4b:6f:b7:5b:
87:12:f8:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:04:33 2025 by rpki-client