Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Y9HC58J_9Qqdh0nSb9tBem2ZCP8.roa
File: Y9HC58J_9Qqdh0nSb9tBem2ZCP8.roa (raw, json)
Hash identifier: xzvmO+3qmlUQ4BrCBQBjcGRld1zKqWVhW0bN3cwh7v4=
Subject key identifier: 63:D1:C2:E7:C2:7F:F5:0A:9D:87:49:D2:6F:DB:41:7A:6D:99:08:FF
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 0187812512C1C747B5AEC057F4D30980EF49
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Y9HC58J_9Qqdh0nSb9tBem2ZCP8.roa
Signing time: Fri 14 Apr 2023 19:01:43 +0000
ROA not before: Fri 14 Apr 2023 19:01:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 109.121.40.0/24 maxlen: 24
212.69.13.0/24 maxlen: 24
79.175.67.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:81:25:12:c1:c7:47:b5:ae:c0:57:f4:d3:09:80:ef:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Apr 14 19:01:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=63d1c2e7c27ff50a9d8749d26fdb417a6d9908ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:00:2c:23:74:46:2e:c6:0f:b7:72:a8:0b:3c:
82:cd:35:bf:a0:9b:62:4e:10:55:ad:23:f7:d1:a5:
7f:bc:6d:2d:86:97:5d:04:34:de:2c:4c:33:7f:45:
57:6f:91:86:58:ea:b6:f3:c1:4f:82:00:f8:5a:ed:
11:06:cc:cc:c5:8a:0b:1f:cc:60:05:7d:1d:04:10:
61:f2:5f:fc:02:bb:ec:cf:3d:d7:a0:00:01:d1:de:
5c:b3:1b:9f:d7:39:7a:ba:63:8f:40:25:6d:68:0d:
38:f7:98:50:f6:12:3b:67:7f:13:b9:38:3f:ed:95:
6c:73:4c:d4:91:3a:33:ba:85:88:21:5e:7c:c2:bb:
59:4d:17:dc:42:34:16:4b:c8:c4:2c:54:02:14:db:
10:e8:b9:db:b7:34:26:86:ab:67:d6:19:dc:1d:20:
4b:d7:64:4e:a0:31:3e:f3:de:c8:86:59:ac:c4:76:
ee:b4:a9:1f:d9:86:62:b0:0c:f4:71:b3:8b:c4:9a:
f6:22:ff:c6:a9:54:99:c6:05:ea:c4:ad:02:32:48:
8f:fd:d3:aa:a6:27:dc:9a:43:88:0e:8e:9c:3f:7b:
45:79:2f:0c:4f:94:da:80:33:50:17:0e:91:75:7d:
e7:ad:a1:c9:53:32:ab:42:cf:de:a9:74:c5:52:38:
65:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:D1:C2:E7:C2:7F:F5:0A:9D:87:49:D2:6F:DB:41:7A:6D:99:08:FF
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Y9HC58J_9Qqdh0nSb9tBem2ZCP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.175.67.0/24
109.121.40.0/24
212.69.13.0/24
Signature Algorithm: sha256WithRSAEncryption
06:7d:69:2c:3c:2a:49:b2:16:84:d3:e5:83:ea:43:05:b8:15:
30:7e:fa:a3:ea:65:fe:e4:f2:c7:cf:23:c8:57:ca:a7:0a:33:
cf:0c:75:bf:71:8b:bd:58:f3:44:a3:21:ee:f4:14:c1:34:14:
28:f2:35:12:7e:31:42:39:e4:a6:9c:c3:68:3d:e7:c4:21:26:
02:94:5f:e8:8b:ad:da:2f:15:c0:da:c8:5f:31:7f:71:d5:11:
4b:0e:89:41:c8:a1:cb:f9:16:be:ff:a9:56:28:2d:06:52:be:
16:86:2d:bd:b8:99:69:2d:13:6c:24:f6:18:26:63:72:d6:79:
d7:63:3a:ed:20:0a:b3:e8:77:1e:7e:6e:e4:1f:17:47:89:c4:
6e:29:8b:39:7a:f6:ca:85:a1:b7:4e:e8:07:9e:b1:03:a9:1e:
35:ee:79:77:cc:39:90:e8:1c:6a:77:8e:c0:a2:52:39:43:f5:
c7:3c:66:2a:20:c5:eb:70:bb:82:46:5c:d8:53:bf:01:e0:3b:
78:32:b8:ee:cd:c4:3e:9f:ba:0a:94:d2:1d:23:5a:af:9b:1a:
81:fa:a1:db:31:4a:52:b9:f4:0f:04:e3:ad:33:1a:ce:26:06:
ff:b2:c1:7f:1d:23:f7:3f:42:e5:e0:3f:17:c2:f0:e4:a7:36:
e4:2f:cd:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:52:19 2025 by rpki-client