Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/ypkar6X2uUmCXbFbuPeJwRL0zo0.roa
File: ypkar6X2uUmCXbFbuPeJwRL0zo0.roa (raw, json)
Hash identifier: GmUWOPQ77KWNPFloTkWMzoI6+er5B9Ui8/n5hEefb28=
Subject key identifier: CA:99:1A:AF:A5:F6:B9:49:82:5D:B1:5B:B8:F7:89:C1:12:F4:CE:8D
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 039C60EA
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/ypkar6X2uUmCXbFbuPeJwRL0zo0.roa
Signing time: Sun 10 Apr 2022 01:01:25 +0000
ROA not before: Sun 10 Apr 2022 01:01:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 94.177.65.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60580074 (0x39c60ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Apr 10 01:01:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ca991aafa5f6b949825db15bb8f789c112f4ce8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:d8:5f:95:19:68:b4:f1:e0:92:3c:10:8a:8e:
81:93:be:ad:b8:54:83:cf:55:69:ce:d7:26:e9:04:
86:43:e2:dc:8d:4e:ff:b0:3a:a2:b3:bf:b7:d7:ae:
22:20:68:2a:3f:4a:31:61:60:ce:f6:85:dc:be:01:
9f:65:8d:45:25:79:81:61:24:45:fc:a9:f7:45:d2:
9d:6e:66:fb:81:82:9c:28:ce:6c:dd:30:5c:9b:00:
f0:f8:a3:dc:03:ba:07:f5:89:1e:43:f7:49:85:57:
49:18:8f:a9:5d:6c:b0:cc:98:8f:4c:c5:43:92:19:
f2:b9:c7:07:df:0e:b7:e6:e3:7f:bb:e5:16:3a:c7:
f9:f1:a9:2c:92:5b:a0:c6:c9:0e:58:0e:cb:6b:fa:
8f:a7:a1:2e:c3:59:1c:cf:fa:db:5b:f6:8b:9f:dc:
f9:9b:25:4d:85:4a:a1:ff:9a:ed:12:0b:96:6b:b5:
c4:a5:26:be:2a:4b:8c:77:de:c4:85:78:04:5b:5f:
aa:26:0d:ec:31:99:eb:58:a9:f8:87:1e:f4:4e:d2:
3d:4a:f7:fd:2b:de:f0:9b:60:f1:d1:c1:0c:b5:9b:
d9:6b:f6:f7:2c:f4:bb:6d:09:6e:0f:5a:4b:de:12:
e4:e2:f2:14:c0:e8:c4:6c:41:8b:1c:1f:35:b3:cf:
10:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:99:1A:AF:A5:F6:B9:49:82:5D:B1:5B:B8:F7:89:C1:12:F4:CE:8D
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/ypkar6X2uUmCXbFbuPeJwRL0zo0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.177.65.0/24
Signature Algorithm: sha256WithRSAEncryption
38:3c:68:a0:c4:53:e4:17:8a:e2:a2:45:f5:2a:da:03:82:52:
be:01:9e:46:25:ac:45:22:fe:8b:2f:3d:fb:e9:9b:db:84:07:
93:16:c9:0f:0f:2e:bb:d6:95:f6:8d:30:e6:44:6e:79:4b:f7:
97:28:26:dd:a5:6c:b2:f2:9d:63:7d:c8:e2:94:e4:86:d6:b3:
fb:42:15:31:fa:12:89:23:56:53:59:a6:e4:53:43:1c:68:3c:
18:b5:57:67:96:4b:4e:13:16:e5:2e:80:fa:42:51:78:06:a2:
3b:94:e1:6c:c2:b9:7d:86:f7:e7:96:92:8c:91:40:f8:60:f9:
00:47:c7:13:1d:2b:f6:31:e9:86:22:05:9f:82:7f:eb:cf:e2:
bd:4c:dd:0a:5f:17:7e:af:e5:39:81:3b:16:54:9f:e3:07:80:
0f:c9:ee:50:a4:23:ab:cc:6e:51:fd:55:d2:57:9c:6e:72:71:
0c:20:5e:20:31:ee:b0:f7:20:c4:91:55:76:6d:0e:91:4d:84:
37:22:4e:68:40:b7:f6:fc:16:9b:5e:eb:0d:d0:49:79:2a:27:
5b:ba:95:bd:4e:e4:90:75:76:0b:5a:39:2f:55:5b:5a:6b:e7:
78:c6:92:1e:7a:22:09:5c:1f:f8:3f:37:7a:55:51:e7:ed:7a:
7d:50:c1:82
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEA5xg6jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
YTAwZTk4MTk1MzA2MTk3MmM4OTZiZDZkMjc3MzhkMDgzYWFkYjBlMB4XDTIyMDQx
MDAxMDEyNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoY2E5OTFhYWZhNWY2
Yjk0OTgyNWRiMTViYjhmNzg5YzExMmY0Y2U4ZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOzYX5UZaLTx4JI8EIqOgZO+rbhUg89Vac7XJukEhkPi3I1O
/7A6orO/t9euIiBoKj9KMWFgzvaF3L4Bn2WNRSV5gWEkRfyp90XSnW5m+4GCnCjO
bN0wXJsA8Pij3AO6B/WJHkP3SYVXSRiPqV1ssMyYj0zFQ5IZ8rnHB98Ot+bjf7vl
FjrH+fGpLJJboMbJDlgOy2v6j6ehLsNZHM/621v2i5/c+ZslTYVKof+a7RILlmu1
xKUmvipLjHfexIV4BFtfqiYN7DGZ61ip+Ice9E7SPUr3/Sve8Jtg8dHBDLWb2Wv2
9yz0u20Jbg9aS94S5OLyFMDoxGxBixwfNbPPEJsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTKmRqvpfa5SYJdsVu494nBEvTOjTAfBgNVHSMEGDAWgBTaAOmBlTBhlyyJ
a9bSdzjQg6rbDjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzJnRHBnWlV3WVpjc2lXdlcwbmM0MElPcTJ3NC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZmYvODJhN2Q2LTkyYTktNDIwNC05YWUwLTlhNDhlY2Y5ZTE1ZS8x
L3lwa2FyNlgydVVtQ1hiRmJ1UGVKd1JMMHpvMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmYv
ODJhN2Q2LTkyYTktNDIwNC05YWUwLTlhNDhlY2Y5ZTE1ZS8xLzJnRHBnWlV3WVpj
c2lXdlcwbmM0MElPcTJ3NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAF6xQTANBgkqhkiG9w0BAQsFAAOC
AQEAODxooMRT5BeK4qJF9SraA4JSvgGeRiWsRSL+iy89++mb24QHkxbJDw8uu9aV
9o0w5kRueUv3lygm3aVssvKdY33I4pTkhtaz+0IVMfoSiSNWU1mm5FNDHGg8GLVX
Z5ZLThMW5S6A+kJReAaiO5ThbMK5fYb355aSjJFA+GD5AEfHEx0r9jHphiIFn4J/
68/ivUzdCl8Xfq/lOYE7FlSf4weAD8nuUKQjq8xuUf1V0lecbnJxDCBeIDHusPcg
xJFVdm0OkU2ENyJOaEC39vwWm17rDdBJeSonW7qVvU7kkHV2C1o5L1VbWmvneMaS
HnoiCVwf+D83elVR5+16fVDBgg==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:05 2023 by rpki-client on console-fra.rpki-client.org