Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/yCfBAf25JP0cRVi4qCTRXNN3LsI.roa
File: yCfBAf25JP0cRVi4qCTRXNN3LsI.roa (raw, json)
Hash identifier: Uxn+yIyRD7uhhhJ5OtNadgQdI7Y1KkbEs6wrYZMAMq4=
Subject key identifier: C8:27:C1:01:FD:B9:24:FD:1C:45:58:B8:A8:24:D1:5C:D3:77:2E:C2
Certificate issuer: /CN=6e542cede53a0c57145a6aff2f58196f02d4a12e
Certificate serial: 01857094F2E17874E3665E068F6226F00152
Authority key identifier: 6E:54:2C:ED:E5:3A:0C:57:14:5A:6A:FF:2F:58:19:6F:02:D4:A1:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/blQs7eU6DFcUWmr_L1gZbwLUoS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/yCfBAf25JP0cRVi4qCTRXNN3LsI.roa
Signing time: Mon 02 Jan 2023 03:44:47 +0000
ROA not before: Mon 02 Jan 2023 03:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207327
IP address blocks: 195.226.218.0/24 maxlen: 24
2a10:2d80::/29 maxlen: 56
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:94:f2:e1:78:74:e3:66:5e:06:8f:62:26:f0:01:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e542cede53a0c57145a6aff2f58196f02d4a12e
Validity
Not Before: Jan 2 03:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c827c101fdb924fd1c4558b8a824d15cd3772ec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:81:d8:fe:5a:0b:34:7f:44:bd:4b:3e:af:0c:
4f:fb:21:1f:0d:79:00:d4:bb:8c:7e:38:38:61:44:
c8:10:6c:6a:5b:33:20:27:82:0a:f8:86:ec:bf:80:
63:7d:fe:d3:a0:d2:67:96:8a:77:87:c7:44:e7:04:
7b:16:f1:89:6e:14:9d:e6:c6:00:d2:17:67:93:7c:
da:cb:10:a0:1a:a5:26:75:25:bf:29:d4:0e:24:63:
1a:8f:22:f0:00:02:79:3c:05:61:0e:77:c3:dc:1b:
19:61:f3:61:46:5b:db:6f:e4:37:03:5d:3d:d7:4c:
ea:db:fa:2c:89:b5:3f:a9:84:ed:6c:83:f7:94:c7:
dd:96:57:96:f9:34:52:79:a8:c2:f9:14:6f:f3:9a:
95:f2:3c:60:ae:1c:3d:34:3c:94:e6:16:ea:72:82:
4d:db:f4:1d:42:9f:a2:1e:8a:a6:24:9a:eb:4d:f8:
ba:2c:73:ad:99:0c:1c:37:05:3f:05:cf:f4:51:37:
11:b9:80:1a:08:cf:71:72:7d:8a:48:41:b0:63:fe:
cb:41:91:27:45:1f:07:17:54:cf:1b:7c:21:2c:4f:
64:67:ad:8a:bf:61:59:cc:2a:42:6f:f4:67:6f:07:
3f:2d:9b:dc:ff:5c:d6:93:5e:2c:bf:bf:35:11:3d:
8b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:27:C1:01:FD:B9:24:FD:1C:45:58:B8:A8:24:D1:5C:D3:77:2E:C2
X509v3 Authority Key Identifier:
keyid:6E:54:2C:ED:E5:3A:0C:57:14:5A:6A:FF:2F:58:19:6F:02:D4:A1:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/blQs7eU6DFcUWmr_L1gZbwLUoS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/yCfBAf25JP0cRVi4qCTRXNN3LsI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.226.218.0/24
IPv6:
2a10:2d80::/29
Signature Algorithm: sha256WithRSAEncryption
31:2a:56:40:6e:a2:cc:f9:42:d0:e6:b7:8c:81:28:18:50:06:
32:67:4f:93:60:85:94:10:54:9c:1c:dd:f7:b3:1a:23:c8:4f:
e9:4d:48:db:a0:59:16:c3:e9:7e:49:dc:e3:4a:79:66:99:0a:
32:a0:94:09:52:b1:4b:21:04:f7:41:b3:30:22:48:a0:36:78:
34:53:14:60:61:0f:f4:a2:cc:3d:07:94:1d:3c:ee:7b:c9:05:
e1:be:8c:35:c0:df:0e:6a:00:7b:88:d8:cf:9d:e3:33:d6:67:
eb:45:9d:34:ed:53:78:34:38:1c:79:a5:1e:13:fa:48:4c:12:
bb:fe:91:18:ae:c5:9f:72:64:9d:a4:67:60:69:33:03:a1:72:
80:f7:fb:65:86:89:0b:ca:78:8b:1b:4e:c5:d0:6e:42:25:28:
fe:a5:d6:5b:f9:66:c5:65:8b:a3:5c:d3:00:3d:67:4d:95:27:
a6:2e:dd:e2:f6:1a:32:89:45:a0:fd:e0:40:fa:3d:a0:6d:ac:
86:3a:ec:8c:6d:53:ab:e1:b6:3a:28:ac:83:de:8c:75:89:ea:
1e:aa:97:9b:4a:32:b2:05:2b:10:6d:b1:ac:6b:9c:48:62:af:
54:22:f4:29:02:2b:ff:b3:a9:d7:d0:b7:44:c6:00:bb:40:bb:
d6:e9:83:19
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVwlPLheHTjZl4Gj2Im8AFSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlNTQyY2VkZTUzYTBjNTcxNDVhNmFmZjJmNTgxOTZmMDJk
NGExMmUwHhcNMjMwMTAyMDM0NDQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjODI3YzEwMWZkYjkyNGZkMWM0NTU4YjhhODI0ZDE1Y2QzNzcyZWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4HY/loLNH9EvUs+rwxP+yEfDXkA
1LuMfjg4YUTIEGxqWzMgJ4IK+Ibsv4Bjff7ToNJnlop3h8dE5wR7FvGJbhSd5sYA
0hdnk3zayxCgGqUmdSW/KdQOJGMajyLwAAJ5PAVhDnfD3BsZYfNhRlvbb+Q3A109
10zq2/osibU/qYTtbIP3lMfdlleW+TRSeajC+RRv85qV8jxgrhw9NDyU5hbqcoJN
2/QdQp+iHoqmJJrrTfi6LHOtmQwcNwU/Bc/0UTcRuYAaCM9xcn2KSEGwY/7LQZEn
RR8HF1TPG3whLE9kZ62Kv2FZzCpCb/Rnbwc/LZvc/1zWk14sv781ET2LcQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFMgnwQH9uST9HEVYuKgk0VzTdy7CMB8GA1UdIwQY
MBaAFG5ULO3lOgxXFFpq/y9YGW8C1KEuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmxRczdlVTZERmNVV21yX0wxZ1pid0xVb1M0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8zMjE2OWEtNGE1YS00MTFiLWIwMDYt
MzE4YzcxYjExOWY3LzEveUNmQkFmMjVKUDBjUlZpNHFDVFJYTk4zTHNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi8zMjE2OWEtNGE1YS00MTFiLWIwMDYtMzE4YzcxYjExOWY3
LzEvYmxRczdlVTZERmNVV21yX0wxZ1pid0xVb1M0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAw+LaMA0E
AgACMAcDBQMqEC2AMA0GCSqGSIb3DQEBCwUAA4IBAQAxKlZAbqLM+ULQ5reMgSgY
UAYyZ0+TYIWUEFScHN33sxojyE/pTUjboFkWw+l+SdzjSnlmmQoyoJQJUrFLIQT3
QbMwIkigNng0UxRgYQ/0osw9B5QdPO57yQXhvow1wN8OagB7iNjPneMz1mfrRZ00
7VN4NDgceaUeE/pITBK7/pEYrsWfcmSdpGdgaTMDoXKA9/tlhokLyniLG07F0G5C
JSj+pdZb+WbFZYujXNMAPWdNlSemLt3i9hoyiUWg/eBA+j2gbayGOuyMbVOr4bY6
KKyD3ox1ieoeqpebSjKyBSsQbbGsa5xIYq9UIvQpAiv/s6nX0LdExgC7QLvW6YMZ
-----END CERTIFICATE-----
Generated at Thu Apr 17 19:08:21 2025 by rpki-client