Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/YRLszO9aPYTlRibliqZ-FLjBIUY.roa
File: YRLszO9aPYTlRibliqZ-FLjBIUY.roa (raw, json)
Hash identifier: PaWqUwUT/cfOtUgLv7ObHSlYFSyyjfHea9Kviub0E64=
Subject key identifier: 61:12:EC:CC:EF:5A:3D:84:E5:46:26:E5:8A:A6:7E:14:B8:C1:21:46
Certificate issuer: /CN=3545a7200164912041bb931efb1feac123b43a18
Certificate serial: 447D475F
Authority key identifier: 35:45:A7:20:01:64:91:20:41:BB:93:1E:FB:1F:EA:C1:23:B4:3A:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/YRLszO9aPYTlRibliqZ-FLjBIUY.roa
Signing time: Sat 01 Jan 2022 16:06:42 +0000
ROA not before: Sat 01 Jan 2022 16:06:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20746
IP address blocks: 82.102.4.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1149060959 (0x447d475f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3545a7200164912041bb931efb1feac123b43a18
Validity
Not Before: Jan 1 16:06:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6112ecccef5a3d84e54626e58aa67e14b8c12146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:5b:42:5f:a2:d6:47:cd:f6:58:fa:23:cf:4c:
cf:04:6a:37:23:29:6f:ca:fc:fb:57:d3:9f:c3:26:
f7:08:2e:95:6b:8a:b0:c8:38:65:e1:3d:20:fa:ce:
4a:ee:7b:e4:09:08:d3:77:ff:c4:99:d7:f1:6b:4e:
89:59:6d:7f:9e:47:6a:86:c7:41:2a:74:da:31:3f:
fc:e4:88:55:26:49:37:98:7e:2f:bf:ad:f1:85:00:
a0:4f:65:80:a3:44:2b:6a:b0:8b:00:6e:36:d7:4f:
73:09:12:a8:36:01:f9:a2:a0:4e:b9:1a:c5:34:52:
b3:f5:c4:31:c5:f2:4e:83:f5:b0:eb:7d:a6:d0:88:
76:c4:9f:8d:08:d0:4b:e6:9d:65:7e:c6:47:c9:12:
31:be:5f:81:ae:db:0a:5d:b1:ea:d2:36:0f:20:b6:
07:ca:14:69:81:94:41:a4:88:63:15:c2:bd:7b:25:
c6:ef:57:aa:d8:9b:a0:b2:3b:02:47:7f:cc:bf:f4:
b3:7a:70:02:ce:6c:22:df:da:d7:4a:d1:fb:b5:1f:
69:a0:03:61:08:f1:20:b5:36:ef:00:93:ec:0a:8b:
cc:94:94:0d:58:20:e5:d0:88:8b:72:cd:96:95:c2:
74:ee:71:42:4d:9e:c9:5f:33:86:7d:81:04:8c:27:
8b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:12:EC:CC:EF:5A:3D:84:E5:46:26:E5:8A:A6:7E:14:B8:C1:21:46
X509v3 Authority Key Identifier:
keyid:35:45:A7:20:01:64:91:20:41:BB:93:1E:FB:1F:EA:C1:23:B4:3A:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/YRLszO9aPYTlRibliqZ-FLjBIUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.102.4.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:ca:b8:0d:d2:d9:1b:74:44:fd:b8:cf:f4:77:3a:81:4b:48:
11:23:d1:da:86:24:b0:15:de:ba:07:25:70:ec:77:b0:c0:6b:
67:d0:35:7d:0d:c7:bc:33:c9:cd:22:e1:13:f5:1f:00:0c:3a:
bf:88:3d:ee:81:2f:83:71:ca:93:0a:a9:bc:0c:f9:87:4b:d2:
31:8c:51:63:58:7a:59:dd:53:39:7f:f4:a6:49:9e:04:61:9c:
3b:23:24:28:e3:ab:ff:e6:a9:21:23:a5:42:9e:f5:7f:a2:5f:
24:b0:e3:c6:5a:70:5f:2d:6a:39:a9:3c:94:64:91:43:df:25:
ee:b8:25:9f:5f:e2:21:9d:a2:3c:cb:76:ec:b5:0f:ae:c9:01:
67:fd:e5:1a:ba:b0:ae:c3:84:89:1e:58:10:d7:3a:93:99:4c:
06:ab:5a:32:40:81:2e:45:ff:83:28:e1:6d:9f:e2:3f:d2:0c:
dc:ee:41:6e:69:b3:ca:15:37:91:2e:56:ff:7f:3a:4d:2e:a2:
dc:c7:2b:2e:ad:df:99:00:fb:08:84:4c:bc:8b:10:67:32:2e:
26:2c:c4:f7:ad:a2:fb:06:e9:ea:aa:b1:2a:d5:77:78:75:b6:
ec:a8:cb:50:95:04:0c:40:41:5c:d7:df:85:31:53:51:ee:bc:
63:04:75:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 16:05:54 2025 by rpki-client