Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/YCY1rxSG0QCNWKRxjkikvKo75Vo.roa
File: YCY1rxSG0QCNWKRxjkikvKo75Vo.roa (raw, json)
Hash identifier: +3pA81qS12nzqXvtAMuP2/KQkup8ULvVpWEyFX9asoE=
Subject key identifier: 60:26:35:AF:14:86:D1:00:8D:58:A4:71:8E:48:A4:BC:AA:3B:E5:5A
Certificate issuer: /CN=5753c06290a371994d7577318685f5bc4a538d47
Certificate serial: 02CA15E2
Authority key identifier: 57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/YCY1rxSG0QCNWKRxjkikvKo75Vo.roa
Signing time: Sat 01 Jan 2022 13:02:32 +0000
ROA not before: Sat 01 Jan 2022 13:02:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3352
IP address blocks: 193.148.144.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46798306 (0x2ca15e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5753c06290a371994d7577318685f5bc4a538d47
Validity
Not Before: Jan 1 13:02:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=602635af1486d1008d58a4718e48a4bcaa3be55a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:38:ed:00:ef:d5:b1:4b:19:64:9b:bf:81:f1:
cc:85:c3:f7:e8:c6:57:42:64:34:e8:e0:d7:0c:9e:
73:1a:29:bd:2d:1f:30:29:33:b3:c6:aa:37:bb:ee:
23:7c:ae:71:53:38:79:21:7e:3e:39:12:43:81:1e:
ef:a2:b3:14:ff:3f:8b:97:1b:9c:ad:50:d1:d8:ed:
dc:7e:a3:f2:19:3d:6d:2a:b5:66:41:6e:44:63:9a:
42:97:8a:a4:4d:d0:cb:1e:75:8b:ce:c6:b0:9f:f2:
7f:ea:3c:ff:2e:1c:de:fd:89:36:f3:1a:15:db:2b:
c8:72:14:d4:34:a5:2c:43:7e:e0:1a:87:6f:df:d2:
97:1a:ef:6b:13:2c:b7:47:c4:65:01:3a:69:ab:98:
d7:4c:60:fd:fb:b1:76:b3:94:17:29:b2:37:bb:27:
30:92:95:fd:63:20:02:c7:28:c5:fb:8c:f1:55:a5:
23:f0:39:58:8d:04:ec:9e:56:f4:8b:3f:a5:68:38:
1b:40:e1:e9:5b:89:ae:8b:80:11:3c:50:6c:f3:8f:
8a:0e:23:80:bf:4c:c0:1d:3b:e5:ae:3c:29:6f:b4:
fe:81:81:29:0b:1a:cd:59:ea:4d:3d:fb:09:47:c0:
13:fe:cb:73:c9:84:88:5a:2a:b1:55:0b:00:11:a9:
0e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:26:35:AF:14:86:D1:00:8D:58:A4:71:8E:48:A4:BC:AA:3B:E5:5A
X509v3 Authority Key Identifier:
keyid:57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/YCY1rxSG0QCNWKRxjkikvKo75Vo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.148.144.0/20
Signature Algorithm: sha256WithRSAEncryption
40:f8:9e:8a:16:1e:8f:62:54:80:b8:1c:8a:5b:17:63:5f:91:
02:81:12:f9:ac:de:43:92:d9:f2:b2:ef:3f:7f:fb:95:4c:85:
19:d6:08:00:81:00:6b:72:db:86:6e:e7:cf:e6:8d:05:18:12:
81:06:23:1d:34:6c:52:08:2a:3c:c5:86:8c:95:4d:3f:8a:2a:
e8:11:0b:ff:0e:0d:64:cc:ca:70:15:6b:47:d8:0c:d0:ef:2c:
0e:75:de:3f:b5:a1:5e:a4:cc:cd:99:12:cd:bb:c0:5e:aa:9a:
3d:50:b0:92:24:fd:75:7a:cb:f5:62:64:d9:f0:9e:49:de:f1:
ab:c3:3b:cb:c5:15:33:4a:08:1e:9a:f0:3b:97:06:df:25:90:
66:76:3c:ad:70:e7:91:9e:0b:79:14:d4:66:84:d5:f6:93:a8:
75:49:91:94:08:ae:9d:b5:e4:71:44:76:d5:d9:ee:56:c2:9d:
5a:11:e8:a9:f4:da:29:30:b1:29:39:f8:6a:ff:5c:c4:2e:52:
57:20:da:59:fa:53:f5:3f:95:f3:86:2f:b2:66:0a:55:1f:d6:
39:73:63:4b:db:99:f8:95:36:19:3d:ac:ff:a2:48:df:3d:5b:
8a:a1:1c:fe:7c:9f:d5:66:48:1c:22:8e:b4:10:94:e4:bd:42:
0c:f0:2c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:58:02 2025 by rpki-client