Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/008217-6034-4f8f-8e28-602473de6e3d/1/yYpnX_uPFvHmAAyXrkB-kVad1eE.roa
File: yYpnX_uPFvHmAAyXrkB-kVad1eE.roa (raw, json)
Hash identifier: 0LX7ymaZyPVzK8KF45wFJqjC5dNvWxPWU84pF2mwU5I=
Subject key identifier: C9:8A:67:5F:FB:8F:16:F1:E6:00:0C:97:AE:40:7E:91:56:9D:D5:E1
Certificate issuer: /CN=fc43309bda46e8ed25ec0c1e8a93006f22691e3c
Certificate serial: 0183EB8AB3658BFD068B6AE2561D8F1156C1
Authority key identifier: FC:43:30:9B:DA:46:E8:ED:25:EC:0C:1E:8A:93:00:6F:22:69:1E:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EMwm9pG6O0l7AweipMAbyJpHjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/008217-6034-4f8f-8e28-602473de6e3d/1/yYpnX_uPFvHmAAyXrkB-kVad1eE.roa
Signing time: Tue 18 Oct 2022 14:41:19 +0000
ROA not before: Tue 18 Oct 2022 14:41:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35724
IP address blocks: 194.50.162.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:eb:8a:b3:65:8b:fd:06:8b:6a:e2:56:1d:8f:11:56:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc43309bda46e8ed25ec0c1e8a93006f22691e3c
Validity
Not Before: Oct 18 14:41:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c98a675ffb8f16f1e6000c97ae407e91569dd5e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f4:90:a4:92:df:c6:49:02:d7:cf:db:82:0c:
72:21:d2:9b:03:ea:7a:4c:75:6d:8f:a8:de:64:50:
2c:8f:06:07:75:61:d1:ad:5b:ae:03:c1:3e:b7:a4:
f0:96:91:fb:ea:a3:3a:43:0f:51:cd:bc:01:9b:f9:
6f:1e:99:21:5e:42:34:f2:b6:93:82:78:4f:d5:ff:
2f:f8:9d:2a:a9:cd:25:cb:bc:45:11:4a:72:2d:1c:
5c:9f:9b:52:36:4d:78:2b:31:49:29:aa:e8:8c:79:
d6:1f:42:de:6c:c1:46:e2:f3:77:97:ac:01:6e:1f:
d0:c1:3e:6b:db:48:92:5d:48:be:4a:42:cf:b5:51:
f4:d9:2c:cf:d9:f6:89:2d:61:0a:4d:07:04:95:8e:
6e:58:ce:50:01:8b:55:dc:4f:9b:a8:aa:d4:88:9f:
5f:39:8b:f7:c0:79:d6:06:40:29:a1:92:91:c5:8e:
99:0a:33:67:16:49:74:22:e8:40:6e:b8:d8:91:d1:
c4:c1:27:8f:57:dc:f1:b3:f2:b3:d9:a9:94:b0:8c:
9b:51:2a:1d:2f:14:7c:67:f0:32:b7:05:c4:9d:49:
62:0a:97:92:dd:5a:7f:cb:42:dd:d5:9d:16:31:9d:
3e:f2:67:fb:20:71:22:6b:a2:36:02:52:c2:eb:aa:
0b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:8A:67:5F:FB:8F:16:F1:E6:00:0C:97:AE:40:7E:91:56:9D:D5:E1
X509v3 Authority Key Identifier:
keyid:FC:43:30:9B:DA:46:E8:ED:25:EC:0C:1E:8A:93:00:6F:22:69:1E:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EMwm9pG6O0l7AweipMAbyJpHjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/008217-6034-4f8f-8e28-602473de6e3d/1/yYpnX_uPFvHmAAyXrkB-kVad1eE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/008217-6034-4f8f-8e28-602473de6e3d/1/_EMwm9pG6O0l7AweipMAbyJpHjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.162.0/24
Signature Algorithm: sha256WithRSAEncryption
39:02:86:a9:c7:31:6b:3f:e2:8b:d7:45:6f:f4:2e:f2:e4:f3:
66:d2:af:b3:9b:1c:97:65:bb:d0:ac:92:7e:5e:a9:41:9b:a3:
33:a4:eb:5b:88:23:38:e7:49:20:bf:fe:76:ee:78:25:1e:f9:
25:0f:84:62:b6:5c:8f:9c:10:c6:d8:1d:61:d0:b3:ea:01:a3:
4d:23:29:0d:29:b1:e5:ee:07:9f:9f:b8:10:05:c8:4c:ab:6e:
98:c1:db:dd:8d:31:31:10:c8:3f:60:80:80:9b:24:1b:1b:52:
0a:89:06:bd:8a:f9:2f:ce:de:c0:f9:a5:0b:ed:28:28:03:16:
be:72:dd:94:ef:2d:d5:23:61:da:87:be:20:79:a8:35:6d:f0:
a6:03:aa:d8:51:f2:eb:d7:ff:9e:14:9e:f2:69:f9:7a:92:18:
28:4f:b8:2c:8a:58:48:b6:03:c5:98:ac:58:8d:c1:59:e3:f9:
ab:c9:d2:50:bd:c2:59:89:c5:87:41:a4:61:7e:21:18:8b:fa:
e5:84:6b:6b:f7:27:f6:b7:24:b6:e4:df:52:1c:04:1d:c3:db:
a8:84:8d:02:36:4e:7f:d7:2e:f7:64:f3:22:74:64:7a:a9:49:
98:1c:d9:87:61:56:dc:32:fe:75:45:55:2c:61:12:d8:f1:94:
0a:37:d2:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:34:31 2025 by rpki-client