Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/YUGei_3bXYaLJbMYpaonpKO9PvE.roa
File: YUGei_3bXYaLJbMYpaonpKO9PvE.roa (raw, json)
Hash identifier: QnCdANAr4F3SKX7DCRHM2y+MU2qK0V5KxUn8n06hocE=
Subject key identifier: 61:41:9E:8B:FD:DB:5D:86:8B:25:B3:18:A5:AA:27:A4:A3:BD:3E:F1
Certificate issuer: /CN=89aea6988481cea4b95b65131cc49884f3ed0e3f
Certificate serial: 01856BF7D9F8A5C59369A08FFEEDA4E41B30
Authority key identifier: 89:AE:A6:98:84:81:CE:A4:B9:5B:65:13:1C:C4:98:84:F3:ED:0E:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ia6mmISBzqS5W2UTHMSYhPPtDj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/YUGei_3bXYaLJbMYpaonpKO9PvE.roa
Signing time: Sun 01 Jan 2023 06:14:43 +0000
ROA not before: Sun 01 Jan 2023 06:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 680
IP address blocks: 193.16.4.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:f7:d9:f8:a5:c5:93:69:a0:8f:fe:ed:a4:e4:1b:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89aea6988481cea4b95b65131cc49884f3ed0e3f
Validity
Not Before: Jan 1 06:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=61419e8bfddb5d868b25b318a5aa27a4a3bd3ef1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:14:22:08:93:5f:d3:a1:71:43:65:7f:50:7c:
4e:8d:e0:9d:71:ed:e3:64:ca:60:32:ab:c1:df:f6:
4f:4c:b4:e4:a8:fc:d9:9d:6c:ee:31:1e:2b:bb:ab:
18:25:14:3e:a8:33:7d:2c:18:36:79:1e:72:03:0e:
4b:17:23:21:f2:96:72:0b:91:a3:3f:7c:88:86:7a:
17:f7:14:1b:a3:3c:ae:b4:22:eb:1e:eb:26:42:57:
05:a7:25:d0:90:10:74:41:6a:d1:3c:cf:4c:64:ed:
9b:4a:ea:b4:b4:72:f2:9e:0e:d6:87:d5:3a:f3:71:
6a:d5:c6:a9:56:bd:5b:4e:de:3a:4d:f2:16:9a:7f:
d8:b1:c0:09:4b:09:de:dd:80:28:c6:f1:e3:4f:47:
3f:65:31:06:38:ad:92:aa:3c:0e:8e:cc:5d:54:99:
c0:f2:8f:2c:2f:c6:88:25:ad:46:00:d9:0d:9d:19:
9e:e9:f4:37:d0:30:79:03:5d:6f:52:d2:97:31:3b:
62:01:ef:db:d1:87:39:17:de:f6:19:f2:60:8a:17:
71:89:73:9c:23:ae:4b:eb:a8:2a:dd:a4:34:59:35:
b3:45:14:d7:0c:0a:a0:f4:71:d3:7d:92:18:e2:58:
06:b7:a9:5d:db:40:35:0f:54:3c:06:fe:ab:f6:f9:
aa:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:41:9E:8B:FD:DB:5D:86:8B:25:B3:18:A5:AA:27:A4:A3:BD:3E:F1
X509v3 Authority Key Identifier:
keyid:89:AE:A6:98:84:81:CE:A4:B9:5B:65:13:1C:C4:98:84:F3:ED:0E:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ia6mmISBzqS5W2UTHMSYhPPtDj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/YUGei_3bXYaLJbMYpaonpKO9PvE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.16.4.0/22
Signature Algorithm: sha256WithRSAEncryption
35:24:77:19:39:de:d7:5d:93:09:10:ef:51:d7:07:9b:1b:84:
d7:82:90:e4:e8:38:e8:3a:b7:7f:49:9e:82:39:e5:a3:ce:a0:
0c:49:8a:f0:ec:e6:ee:ab:68:67:1e:ef:e9:f0:0d:5d:cd:bf:
b3:a3:19:92:67:7c:e8:80:b6:35:4e:54:d0:20:32:b0:99:2a:
8a:ec:83:01:ac:79:57:40:82:47:75:36:cd:81:3e:b1:8d:d2:
57:a3:4d:9d:c6:85:2e:09:a4:e9:e3:b2:39:86:13:f9:48:1f:
47:8e:d0:fb:46:2d:dc:15:d4:f4:b9:c3:57:1a:61:5d:81:fc:
e3:0e:53:46:8b:f8:04:03:ec:c5:77:21:77:6a:42:78:4f:d3:
7c:eb:65:98:1a:19:25:9f:88:44:1c:51:12:0e:c9:10:5d:37:
eb:c1:5f:51:12:79:4f:74:fa:d3:34:28:5c:a8:eb:03:85:72:
3f:dd:ba:72:06:7f:04:8f:4b:a4:ba:4e:92:0a:bf:50:42:4b:
37:1a:69:91:6f:5d:b3:65:7e:d9:42:92:b5:5c:3f:9f:31:9e:
d5:25:0b:28:18:f2:48:fb:5c:67:80:ec:0c:c4:c7:d6:f9:7d:
4c:55:ba:04:4e:76:d6:7a:2d:06:f9:73:f5:4c:90:f8:24:14:
ea:10:5a:41
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVr99n4pcWTaaCP/u2k5BswMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5YWVhNjk4ODQ4MWNlYTRiOTViNjUxMzFjYzQ5ODg0ZjNl
ZDBlM2YwHhcNMjMwMTAxMDYxNDQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MTQxOWU4YmZkZGI1ZDg2OGIyNWIzMThhNWFhMjdhNGEzYmQzZWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohQiCJNf06FxQ2V/UHxOjeCdce3j
ZMpgMqvB3/ZPTLTkqPzZnWzuMR4ru6sYJRQ+qDN9LBg2eR5yAw5LFyMh8pZyC5Gj
P3yIhnoX9xQbozyutCLrHusmQlcFpyXQkBB0QWrRPM9MZO2bSuq0tHLyng7Wh9U6
83Fq1capVr1bTt46TfIWmn/YscAJSwne3YAoxvHjT0c/ZTEGOK2SqjwOjsxdVJnA
8o8sL8aIJa1GANkNnRme6fQ30DB5A11vUtKXMTtiAe/b0Yc5F972GfJgihdxiXOc
I65L66gq3aQ0WTWzRRTXDAqg9HHTfZIY4lgGt6ld20A1D1Q8Bv6r9vmqkQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGFBnov9212GiyWzGKWqJ6SjvT7xMB8GA1UdIwQY
MBaAFImuppiEgc6kuVtlExzEmITz7Q4/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWE2bW1JU0J6cVM1VzJVVEhNU1loUFB0RGo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8yYTU1YTUtMzMwNC00MTA4LThkOTIt
NGQ4ZTkwZTAzMzNiLzEvWVVHZWlfM2JYWWFMSmJNWXBhb25wS085UHZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC8yYTU1YTUtMzMwNC00MTA4LThkOTItNGQ4ZTkwZTAzMzNi
LzEvaWE2bW1JU0J6cVM1VzJVVEhNU1loUFB0RGo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwRAEMA0G
CSqGSIb3DQEBCwUAA4IBAQA1JHcZOd7XXZMJEO9R1webG4TXgpDk6DjoOrd/SZ6C
OeWjzqAMSYrw7Obuq2hnHu/p8A1dzb+zoxmSZ3zogLY1TlTQIDKwmSqK7IMBrHlX
QIJHdTbNgT6xjdJXo02dxoUuCaTp47I5hhP5SB9HjtD7Ri3cFdT0ucNXGmFdgfzj
DlNGi/gEA+zFdyF3akJ4T9N862WYGhkln4hEHFESDskQXTfrwV9REnlPdPrTNChc
qOsDhXI/3bpyBn8Ej0ukuk6SCr9QQks3GmmRb12zZX7ZQpK1XD+fMZ7VJQsoGPJI
+1xngOwMxMfW+X1MVboETnbWei0G+XP1TJD4JBTqEFpB
-----END CERTIFICATE-----
Generated at Mon Apr 14 01:33:05 2025 by rpki-client