Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/LYW7ipb0CAFvh1037lC0xfm7VSk.roa
File: LYW7ipb0CAFvh1037lC0xfm7VSk.roa (raw, json)
Hash identifier: steoNbGeVeJUgHHc24Kc9zowWkE14W+UmnmeVG2Ahsw=
Subject key identifier: 2D:85:BB:8A:96:F4:08:01:6F:87:5D:37:EE:50:B4:C5:F9:BB:55:29
Certificate issuer: /CN=8050504f4b1776e80b8ad9f8b356e613b585b35a
Certificate serial: 024CC61B
Authority key identifier: 80:50:50:4F:4B:17:76:E8:0B:8A:D9:F8:B3:56:E6:13:B5:85:B3:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gFBQT0sXdugLitn4s1bmE7WFs1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/LYW7ipb0CAFvh1037lC0xfm7VSk.roa
Signing time: Sat 01 Jan 2022 05:56:55 +0000
ROA not before: Sat 01 Jan 2022 05:56:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61232
IP address blocks: 193.135.57.0/24 maxlen: 24
193.135.56.0/24 maxlen: 24
2001:678:e44::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38585883 (0x24cc61b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8050504f4b1776e80b8ad9f8b356e613b585b35a
Validity
Not Before: Jan 1 05:56:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2d85bb8a96f408016f875d37ee50b4c5f9bb5529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:25:ad:6e:61:96:c3:31:bf:62:27:90:95:5e:
18:81:58:ae:5b:ad:08:21:7f:05:41:32:d2:04:10:
dc:9c:40:db:4f:bf:a5:c2:f8:5e:e6:16:f5:f5:f6:
58:ad:ca:a0:fe:83:af:ef:32:4f:3f:60:3f:5d:14:
f5:1e:4e:07:4b:ea:63:6c:66:35:1f:cb:2a:0e:f0:
cb:31:33:c8:0f:bd:46:4d:cd:f4:9e:ee:6c:ca:ee:
91:79:e7:0a:72:02:94:3b:ac:65:a5:60:55:b8:1f:
ab:df:32:0e:af:7f:80:01:db:87:97:e0:96:d3:e2:
70:03:42:81:9d:ed:78:3d:a3:1b:62:14:67:28:65:
9c:68:24:fd:ac:33:a2:ef:dd:cf:2a:b9:33:3d:9c:
cc:84:0f:76:ee:36:f0:32:cc:7a:b2:25:4b:d1:18:
c8:a6:d3:e1:87:86:84:f3:a8:f1:99:4f:38:d8:42:
d6:33:1c:5d:fa:b9:90:95:14:dc:f2:ae:42:17:72:
4c:5c:fb:ac:b2:bd:60:8f:df:f9:27:12:ac:6c:f5:
f9:f6:ce:4a:11:d8:61:60:c1:bd:77:06:2d:bb:67:
46:01:de:a3:dc:d2:b4:08:e3:4d:58:74:37:0b:a2:
55:78:94:eb:11:b4:34:43:76:1b:61:81:e4:6f:31:
61:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:85:BB:8A:96:F4:08:01:6F:87:5D:37:EE:50:B4:C5:F9:BB:55:29
X509v3 Authority Key Identifier:
keyid:80:50:50:4F:4B:17:76:E8:0B:8A:D9:F8:B3:56:E6:13:B5:85:B3:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gFBQT0sXdugLitn4s1bmE7WFs1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/LYW7ipb0CAFvh1037lC0xfm7VSk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.135.56.0/23
IPv6:
2001:678:e44::/48
Signature Algorithm: sha256WithRSAEncryption
3e:02:ce:f0:14:9c:74:e6:fe:60:56:af:53:a1:75:b5:a2:5f:
4c:f0:43:38:7d:8b:80:e3:bf:42:34:aa:7a:91:46:1f:94:0d:
c5:c4:06:e7:f0:a7:77:62:eb:dc:5c:26:ef:51:c1:c6:ed:c4:
f9:06:3a:db:e9:59:58:a8:46:d2:31:31:c0:13:4a:04:a0:14:
f3:82:23:95:f6:a2:5d:65:5c:e6:20:bd:44:a9:2c:63:96:27:
63:b9:f6:29:14:94:69:0a:a2:3f:83:50:b9:62:fa:bf:d8:4f:
3b:bb:28:3f:d7:71:7b:1a:da:43:ca:56:20:b3:53:1e:ec:f2:
7f:a0:08:00:0f:62:25:b9:87:7e:38:54:d3:03:3a:5a:44:69:
f6:f4:ee:ba:20:af:8f:a5:f6:46:b1:19:22:26:88:7a:56:cc:
30:0b:82:6d:d6:1c:b5:5f:f5:04:c6:a4:24:9f:6e:45:da:ed:
40:7e:8a:66:96:08:c2:47:65:18:0a:d0:7c:3d:c0:41:6f:85:
87:16:4f:cf:7b:75:47:31:b5:c8:05:5e:81:ad:c7:7c:1f:4d:
08:a4:82:34:ee:d4:f6:5c:db:a8:d7:e2:11:75:2e:13:ce:1d:
7b:0b:60:ce:a2:9e:2e:f0:48:b0:72:38:d1:dc:5d:f6:23:6c:
fd:47:93:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 17:34:00 2025 by rpki-client