Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/yzPH2X5iabWXYcBipX7tjAZyef4.roa
File: yzPH2X5iabWXYcBipX7tjAZyef4.roa (raw, json)
Hash identifier: JG1juQVTg2IWRXLDIzblkzoVw4OPiaRnEG4WMSst3nI=
Subject key identifier: CB:33:C7:D9:7E:62:69:B5:97:61:C0:62:A5:7E:ED:8C:06:72:79:FE
Certificate issuer: /CN=08af091858bb99651764399c6565df7a0834dbad
Certificate serial: 018844D931086895E2C21878D95212C557A7
Authority key identifier: 08:AF:09:18:58:BB:99:65:17:64:39:9C:65:65:DF:7A:08:34:DB:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/yzPH2X5iabWXYcBipX7tjAZyef4.roa
Signing time: Mon 22 May 2023 19:04:24 +0000
ROA not before: Mon 22 May 2023 19:04:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60159
IP address blocks: 193.57.46.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:44:d9:31:08:68:95:e2:c2:18:78:d9:52:12:c5:57:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08af091858bb99651764399c6565df7a0834dbad
Validity
Not Before: May 22 19:04:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cb33c7d97e6269b59761c062a57eed8c067279fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:b2:71:f6:cd:97:4e:a9:0c:20:7a:a5:f2:19:
e4:b6:29:e4:47:61:9e:c1:57:84:0d:00:33:e0:51:
15:a3:83:9f:00:4d:a4:e2:14:52:f4:9b:23:d6:05:
77:58:6a:4d:1e:06:0a:d6:5f:d8:6a:6e:d8:6d:78:
d8:b3:3b:e4:7c:4d:82:a1:73:3c:12:42:04:ec:a1:
19:5e:c9:14:17:2a:9a:d3:11:9e:f0:fc:d3:c0:77:
bf:4d:a6:d9:fd:4d:21:0b:2a:a2:71:65:dc:1a:6b:
65:7e:dc:f0:33:70:5b:84:47:9d:f9:a0:71:6f:67:
bb:b0:e3:c5:fe:b5:3c:91:f9:bd:a1:df:4b:c3:ba:
9d:e8:22:09:20:84:b9:46:ed:e7:c3:2c:bc:72:5a:
f8:e0:41:6c:a0:f0:04:0a:ad:a1:98:43:a9:91:3f:
20:6a:d4:23:e7:0d:15:62:aa:75:cf:75:57:84:95:
c8:42:fd:52:95:b1:d7:d6:26:d7:fb:16:9a:7b:87:
28:52:37:86:68:a4:83:09:2d:21:8e:58:a7:b5:43:
6c:c2:c7:e7:34:87:39:98:32:bc:41:2f:ee:4d:68:
4c:9f:59:00:4a:5c:a6:a0:c3:f9:db:26:bc:67:58:
49:62:38:b6:8d:21:19:88:2b:1d:2c:a2:44:71:aa:
2b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:33:C7:D9:7E:62:69:B5:97:61:C0:62:A5:7E:ED:8C:06:72:79:FE
X509v3 Authority Key Identifier:
keyid:08:AF:09:18:58:BB:99:65:17:64:39:9C:65:65:DF:7A:08:34:DB:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/yzPH2X5iabWXYcBipX7tjAZyef4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.46.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:dc:95:98:24:f6:e9:25:5b:05:01:a7:de:cb:82:1c:90:ee:
29:fa:52:32:18:c2:4a:3f:95:2e:7a:bb:fe:4d:ae:d7:3b:87:
40:dd:4b:1b:a0:ec:9a:40:86:97:ba:ab:a7:d8:38:c0:6f:37:
2c:e1:78:da:ed:95:6c:0c:c3:37:55:ce:17:6f:c0:45:16:1c:
1e:fc:e9:2e:d1:1f:cc:2c:22:fe:31:7f:5b:9c:23:d9:1e:92:
5b:62:99:2a:d2:34:62:60:9a:2d:f1:7f:e1:2c:8c:f9:ef:95:
d6:b3:f0:e5:b3:bd:16:a4:d3:38:c5:53:63:b9:35:90:29:af:
6e:75:7d:2f:42:8b:32:36:36:05:21:e7:01:46:14:65:cf:08:
08:b9:45:45:51:60:0e:00:ec:86:6c:e4:af:96:35:07:e1:4c:
65:66:eb:a6:b8:ac:b6:99:11:f5:a3:f0:75:b0:c4:04:a0:bd:
81:4b:ad:22:e2:ee:58:8d:fc:64:f7:1d:b4:c8:b5:eb:d1:4c:
33:f8:bd:a0:22:e7:89:c9:87:bd:88:1c:e1:32:64:93:a4:f7:
2f:b5:23:58:56:1e:34:cf:f6:21:ea:3d:df:28:f3:a8:84:f4:
00:53:e2:35:40:19:61:29:23:50:ae:82:b8:12:79:aa:4e:4c:
c8:d7:c7:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 02:31:34 2025 by rpki-client