Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/YboAlf6NTCIqbnj4tgD5eJzMHtw.roa
File: YboAlf6NTCIqbnj4tgD5eJzMHtw.roa (raw, json)
Hash identifier: KnETy42CQJedyhzfx9EIZDxORsocfz6hahz74xYe0Rw=
Subject key identifier: 61:BA:00:95:FE:8D:4C:22:2A:6E:78:F8:B6:00:F9:78:9C:CC:1E:DC
Certificate issuer: /CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
Certificate serial: 01896FFB98561395DC8A44B8743DFD52DDC4
Authority key identifier: AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/YboAlf6NTCIqbnj4tgD5eJzMHtw.roa
Signing time: Wed 19 Jul 2023 21:08:26 +0000
ROA not before: Wed 19 Jul 2023 21:08:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44477
IP address blocks: 77.83.152.0/22 maxlen: 24
2a0e:9846::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:6f:fb:98:56:13:95:dc:8a:44:b8:74:3d:fd:52:dd:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
Validity
Not Before: Jul 19 21:08:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=61ba0095fe8d4c222a6e78f8b600f9789ccc1edc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d3:9e:86:77:73:f9:c2:5a:52:35:d7:74:5f:
2e:d3:bb:cf:6f:fc:fe:3c:5a:0d:ec:35:f0:8f:76:
ef:9b:61:6a:61:8e:c1:6d:15:7e:30:84:d2:a8:7b:
e8:5d:64:4e:75:7a:48:52:b4:65:41:84:37:ae:c7:
32:9b:68:39:71:52:67:8b:60:e5:aa:70:d1:b8:09:
7a:46:38:ef:e5:dd:17:b7:43:40:d1:94:e3:6b:57:
02:35:11:00:fc:76:75:b1:e1:e7:32:48:de:e9:b8:
b5:8f:85:13:b5:6a:c9:d5:11:ce:cf:ba:c3:47:03:
bf:8b:36:8b:9a:63:61:56:55:0f:6f:37:7d:ab:20:
9e:39:e9:1f:ac:e2:e6:80:de:2b:f0:c4:ae:08:c4:
b5:65:f5:16:bb:fc:29:02:3b:a5:3e:c4:52:d3:be:
cc:28:62:78:bc:a8:9b:f9:42:85:eb:8d:2d:1e:83:
ab:af:81:bf:88:fe:ce:d3:ec:1e:e2:be:3d:05:bc:
b2:d2:89:ed:28:ef:b6:f8:7e:56:f4:57:d7:ab:95:
f0:90:6c:52:56:1a:2c:58:3d:3e:04:ce:01:02:fd:
6d:74:ab:3b:00:78:2d:3f:ab:a2:db:64:e3:f8:52:
b5:73:a3:b4:db:6b:24:22:4c:5d:34:bc:2b:80:9b:
18:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:BA:00:95:FE:8D:4C:22:2A:6E:78:F8:B6:00:F9:78:9C:CC:1E:DC
X509v3 Authority Key Identifier:
keyid:AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/YboAlf6NTCIqbnj4tgD5eJzMHtw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.152.0/22
IPv6:
2a0e:9846::/32
Signature Algorithm: sha256WithRSAEncryption
5b:2f:f9:a7:81:aa:8a:91:db:4c:e9:64:81:85:8d:32:12:77:
c3:6c:01:92:67:7f:84:f6:3d:3c:26:f3:74:7e:1e:e9:e1:cd:
6f:ce:15:0c:f8:3f:c3:51:6a:88:2d:8e:a2:dd:09:41:a8:8d:
14:33:55:d1:7b:7e:dd:6c:53:d0:99:c1:f1:5b:c6:0f:28:c0:
91:00:d4:57:b8:5b:2b:2c:d5:24:c7:be:88:c0:de:fe:55:53:
5c:92:06:30:f4:b3:7c:c8:25:5c:51:9a:47:f6:97:e6:86:5f:
43:20:3b:b9:de:77:24:3a:6c:76:88:d5:06:d3:ce:65:0d:9c:
c3:95:e3:3e:ba:92:a3:7e:c5:b3:04:82:e8:f3:fc:7d:fc:a5:
a3:35:39:44:fc:0d:29:11:f5:d0:89:9a:0c:90:4c:48:1e:f7:
8a:ab:f5:e2:5b:98:84:bb:1c:25:f9:c8:73:99:3d:88:48:25:
a7:b9:00:ab:db:f1:c1:b2:70:77:98:36:4a:5f:02:55:f8:35:
bc:ad:3d:1e:dc:11:05:21:dd:97:94:ab:08:27:a0:04:c6:2a:
bd:fb:3d:d2:0c:c2:6f:68:a9:24:17:98:8a:36:19:7c:e6:de:
43:3b:d0:f9:45:3f:29:78:08:29:43:a7:d6:6e:11:31:b0:11:
41:60:69:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 04:59:19 2025 by rpki-client