Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/yKCnnCMDTgXxl2NzJb8kYfC3kUA.roa
File: yKCnnCMDTgXxl2NzJb8kYfC3kUA.roa (raw, json)
Hash identifier: R6SW8SoQBxaoXJPw/69aesThWXCXolUIn1WsQNOS2es=
Subject key identifier: C8:A0:A7:9C:23:03:4E:05:F1:97:63:73:25:BF:24:61:F0:B7:91:40
Certificate issuer: /CN=86ee201c65d655ee9cfe251f951ea91bba154567
Certificate serial: 018AB806545423B124B4509E7A3CF18072CE
Authority key identifier: 86:EE:20:1C:65:D6:55:EE:9C:FE:25:1F:95:1E:A9:1B:BA:15:45:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hu4gHGXWVe6c_iUflR6pG7oVRWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/yKCnnCMDTgXxl2NzJb8kYfC3kUA.roa
Signing time: Thu 21 Sep 2023 13:55:37 +0000
ROA not before: Thu 21 Sep 2023 13:55:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 185.201.17.0/24 maxlen: 24
185.201.16.0/24 maxlen: 24
185.201.19.0/24 maxlen: 24
45.91.121.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b8:06:54:54:23:b1:24:b4:50:9e:7a:3c:f1:80:72:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86ee201c65d655ee9cfe251f951ea91bba154567
Validity
Not Before: Sep 21 13:55:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c8a0a79c23034e05f197637325bf2461f0b79140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a6:ad:ca:65:8b:4a:2a:0a:d1:d2:e2:8e:e4:
6f:57:cd:8a:51:b8:3e:44:55:58:f9:ea:12:07:92:
92:7d:bf:a3:78:c9:e4:a8:e2:30:14:b0:37:c9:f4:
cc:37:c7:ef:8c:f5:f6:d6:f4:a4:42:d5:49:cc:df:
8d:9e:73:61:e3:ea:85:3a:06:d8:18:d6:cb:8c:83:
12:42:be:2c:ec:fe:71:58:1b:43:5c:ed:c6:a2:0f:
b6:89:6e:6f:d2:f6:c0:57:1d:45:87:28:60:56:ae:
75:e1:f3:4a:15:57:0c:7a:24:11:c2:aa:29:88:4f:
13:00:b9:d1:23:56:82:40:78:b5:fc:a6:0c:90:a0:
46:41:cd:f0:0c:80:7f:fc:12:34:1b:af:34:74:8b:
06:5c:6d:69:79:ac:05:09:2c:9b:f7:38:16:4e:47:
cc:be:e1:b9:51:ad:20:a2:d9:fb:c9:23:52:3a:43:
ca:b8:ab:77:d8:73:95:95:e9:42:02:34:df:67:38:
8e:82:c0:df:b6:d3:99:0c:84:33:f7:f4:5c:3c:79:
e6:76:17:74:89:d5:3c:5e:12:4e:e7:71:30:e6:bf:
69:f3:5c:6f:34:28:9e:6d:68:8d:11:75:27:65:6a:
19:5e:67:f7:59:bc:3e:c0:ba:2b:ce:f7:09:49:9b:
04:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:A0:A7:9C:23:03:4E:05:F1:97:63:73:25:BF:24:61:F0:B7:91:40
X509v3 Authority Key Identifier:
keyid:86:EE:20:1C:65:D6:55:EE:9C:FE:25:1F:95:1E:A9:1B:BA:15:45:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hu4gHGXWVe6c_iUflR6pG7oVRWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/yKCnnCMDTgXxl2NzJb8kYfC3kUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.121.0/24
185.201.16.0/23
185.201.19.0/24
Signature Algorithm: sha256WithRSAEncryption
70:b0:65:c4:4e:fb:ff:00:a3:8e:cc:48:b5:9b:5c:5a:26:5a:
fe:bf:27:5e:0c:ec:a3:28:89:3a:d8:b3:91:c8:18:cd:3a:dc:
e8:82:ac:92:81:37:50:79:bb:f5:9c:03:85:e3:b9:be:09:56:
ff:1d:57:9d:01:a4:7e:70:9f:7d:46:c9:48:f0:61:8b:a4:11:
07:ad:9d:24:e7:8e:ea:a3:41:4b:8d:4c:0e:06:64:34:6b:d1:
c7:1b:2b:5c:bc:25:9f:84:0d:db:2c:7a:86:93:6b:b8:fa:9f:
56:8a:c3:39:04:c0:e5:32:84:97:e9:d7:a5:17:b0:b3:99:20:
2b:52:ec:93:01:65:50:76:f6:78:01:b5:07:43:63:26:10:51:
5c:04:84:e1:a0:82:82:41:68:bc:1c:f0:28:dd:be:e9:30:72:
c4:91:10:c4:43:40:2e:b4:89:27:06:b5:d3:e2:bf:10:03:17:
67:55:b3:6f:dc:74:de:10:c9:da:68:45:81:36:94:7f:d0:9d:
9f:de:6f:78:73:d2:2b:72:4b:2d:22:e3:4b:81:6a:ad:22:25:
4c:20:11:63:99:64:36:dc:58:98:96:43:95:2a:f2:70:ed:60:
89:df:8c:38:95:b6:9d:1f:6d:2a:9e:04:1b:a4:4c:96:b2:8d:
77:90:5c:c8
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYq4BlRUI7EktFCeejzxgHLOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZWUyMDFjNjVkNjU1ZWU5Y2ZlMjUxZjk1MWVhOTFiYmEx
NTQ1NjcwHhcNMjMwOTIxMTM1NTM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOGEwYTc5YzIzMDM0ZTA1ZjE5NzYzNzMyNWJmMjQ2MWYwYjc5MTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqatymWLSioK0dLijuRvV82KUbg+
RFVY+eoSB5KSfb+jeMnkqOIwFLA3yfTMN8fvjPX21vSkQtVJzN+NnnNh4+qFOgbY
GNbLjIMSQr4s7P5xWBtDXO3Gog+2iW5v0vbAVx1FhyhgVq514fNKFVcMeiQRwqop
iE8TALnRI1aCQHi1/KYMkKBGQc3wDIB//BI0G680dIsGXG1peawFCSyb9zgWTkfM
vuG5Ua0gotn7ySNSOkPKuKt32HOVlelCAjTfZziOgsDfttOZDIQz9/RcPHnmdhd0
idU8XhJO53Ew5r9p81xvNCiebWiNEXUnZWoZXmf3Wbw+wLorzvcJSZsEHQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFMigp5wjA04F8ZdjcyW/JGHwt5FAMB8GA1UdIwQY
MBaAFIbuIBxl1lXunP4lH5UeqRu6FUVnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHU0Z0hHWFdWZTZjX2lVZmxSNnBHN29WUldjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8xM2E3MzUtM2IxYy00ZDljLThjZmEt
YThjYThlNGM3ZTc3LzEveUtDbm5DTURUZ1h4bDJOekpiOGtZZkMza1VBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS8xM2E3MzUtM2IxYy00ZDljLThjZmEtYThjYThlNGM3ZTc3
LzEvaHU0Z0hHWFdWZTZjX2lVZmxSNnBHN29WUldjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALVt5AwQB
uckQAwQAuckTMA0GCSqGSIb3DQEBCwUAA4IBAQBwsGXETvv/AKOOzEi1m1xaJlr+
vydeDOyjKIk62LORyBjNOtzogqySgTdQebv1nAOF47m+CVb/HVedAaR+cJ99RslI
8GGLpBEHrZ0k547qo0FLjUwOBmQ0a9HHGytcvCWfhA3bLHqGk2u4+p9WisM5BMDl
MoSX6delF7CzmSArUuyTAWVQdvZ4AbUHQ2MmEFFcBIThoIKCQWi8HPAo3b7pMHLE
kRDEQ0AutIknBrXT4r8QAxdnVbNv3HTeEMnaaEWBNpR/0J2f3m94c9IrckstIuNL
gWqtIiVMIBFjmWQ23FiYlkOVKvJw7WCJ34w4lbadH20qngQbpEyWso13kFzI
-----END CERTIFICATE-----
Generated at Mon Apr 21 05:27:15 2025 by rpki-client