Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/yL0XHEWx3buFUME1hgQg9M9_40s.roa
File: yL0XHEWx3buFUME1hgQg9M9_40s.roa (raw, json)
Hash identifier: ha9BWgd11npxzTQmmfVBYC53M3uBVq7n4pMOcDJOgbM=
Subject key identifier: C8:BD:17:1C:45:B1:DD:BB:85:50:C1:35:86:04:20:F4:CF:7F:E3:4B
Certificate issuer: /CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Certificate serial: 01857082AA987E4C2E7D554262BB7038D1EB
Authority key identifier: D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/yL0XHEWx3buFUME1hgQg9M9_40s.roa
Signing time: Mon 02 Jan 2023 03:24:49 +0000
ROA not before: Mon 02 Jan 2023 03:24:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24580
IP address blocks: 62.81.161.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:82:aa:98:7e:4c:2e:7d:55:42:62:bb:70:38:d1:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Validity
Not Before: Jan 2 03:24:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c8bd171c45b1ddbb8550c135860420f4cf7fe34b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:80:9e:3e:53:48:70:64:e4:14:7d:3a:9a:c3:
59:99:19:be:01:dc:0b:50:73:9d:2c:c6:e3:5e:d6:
84:0e:f4:f1:34:1c:b5:95:78:10:f2:19:31:7d:fb:
29:7a:9d:f4:da:ec:e0:2e:52:77:b2:de:23:cb:83:
de:ab:7b:f2:52:cc:47:65:f2:2b:09:36:6c:de:f4:
a8:d8:97:59:d8:ec:b6:10:0f:29:0f:dc:6b:1d:7a:
15:32:cb:62:40:5a:47:5a:57:15:ff:c7:b5:5f:2c:
74:01:ad:55:50:d9:2e:b2:55:3c:87:58:93:e3:a4:
7b:a6:ce:fb:7a:f6:fb:4d:67:2f:e5:a5:c5:21:43:
bd:a8:65:6a:6d:89:0d:ff:e3:ac:62:65:26:a7:7b:
01:75:17:1f:78:a1:87:15:8f:c4:72:be:d8:7a:cc:
9e:86:73:87:98:89:3f:ae:82:c0:9c:8e:62:a9:4b:
29:24:35:35:d8:96:d1:46:e1:80:20:29:16:c9:02:
96:5f:b9:7c:b7:9d:f2:08:f9:2c:75:3c:84:5f:55:
94:bf:f0:cf:56:7d:f4:9a:1c:e7:66:0d:5e:07:19:
8f:65:c4:95:72:9b:f3:52:90:02:6a:84:40:31:cf:
0b:65:8b:7a:72:7e:25:35:d9:21:8f:27:99:59:be:
65:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:BD:17:1C:45:B1:DD:BB:85:50:C1:35:86:04:20:F4:CF:7F:E3:4B
X509v3 Authority Key Identifier:
keyid:D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/yL0XHEWx3buFUME1hgQg9M9_40s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.81.161.0/24
Signature Algorithm: sha256WithRSAEncryption
05:69:39:71:1a:7f:5d:bc:03:25:64:ff:e4:63:39:8b:e3:9f:
9a:e5:65:38:37:4c:56:8a:03:35:d2:d0:ae:75:1e:af:d3:99:
94:90:cd:23:a3:e0:4d:8d:48:0a:fd:f9:e6:33:60:1a:e1:69:
69:56:d8:f6:48:f0:c0:9a:66:a8:74:35:d0:d9:08:79:c5:49:
da:78:2d:77:a5:2f:56:1f:8d:fc:ba:18:99:d9:dc:48:9e:c9:
f0:8b:b8:63:8f:30:49:30:d9:0f:ce:bb:b1:1e:3f:86:0c:64:
18:14:d9:d5:44:2b:29:fb:77:d3:fd:31:86:e4:ee:90:0d:88:
dc:07:ca:31:b1:e4:d3:ae:b5:88:ba:4d:29:de:c2:17:16:10:
c5:83:bd:7b:bc:56:24:f3:b3:cf:01:7f:52:18:e8:82:5f:7a:
5f:63:14:9f:09:00:65:26:02:c6:ea:36:62:07:32:8e:97:c0:
c3:79:1a:19:64:53:bb:8e:0c:20:8f:d6:89:06:5b:0b:06:2a:
7d:76:01:3e:73:64:2b:f9:35:c9:31:a1:25:ba:40:4f:af:a1:
f4:e9:49:8f:1b:d4:96:79:58:8f:1c:00:79:99:77:12:94:5c:
03:c3:f7:f3:02:49:d6:76:e3:4e:87:65:6f:10:a4:8b:1d:ae:
09:3f:e7:10
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwgqqYfkwufVVCYrtwONHrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0MzRmMTY4NjEwMjg3NmM2MjE2YmNlYTI4YTVlNTAyZWMw
ZDdiNmIwHhcNMjMwMTAyMDMyNDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOGJkMTcxYzQ1YjFkZGJiODU1MGMxMzU4NjA0MjBmNGNmN2ZlMzRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYCePlNIcGTkFH06msNZmRm+AdwL
UHOdLMbjXtaEDvTxNBy1lXgQ8hkxffspep302uzgLlJ3st4jy4Peq3vyUsxHZfIr
CTZs3vSo2JdZ2Oy2EA8pD9xrHXoVMstiQFpHWlcV/8e1Xyx0Aa1VUNkuslU8h1iT
46R7ps77evb7TWcv5aXFIUO9qGVqbYkN/+OsYmUmp3sBdRcfeKGHFY/Ecr7Yesye
hnOHmIk/roLAnI5iqUspJDU12JbRRuGAICkWyQKWX7l8t53yCPksdTyEX1WUv/DP
Vn30mhznZg1eBxmPZcSVcpvzUpACaoRAMc8LZYt6cn4lNdkhjyeZWb5liQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMi9FxxFsd27hVDBNYYEIPTPf+NLMB8GA1UdIwQY
MBaAFNQ08WhhAodsYha86iil5QLsDXtrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMURUeGFHRUNoMnhpRnJ6cUtLWGxBdXdOZTJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC83MjZiYjQtNWQ4Ny00MDJkLTkxY2Ut
NTcxMmQ5NWFlNjM4LzEveUwwWEhFV3gzYnVGVU1FMWhnUWc5TTlfNDBzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC83MjZiYjQtNWQ4Ny00MDJkLTkxY2UtNTcxMmQ5NWFlNjM4
LzEvMURUeGFHRUNoMnhpRnJ6cUtLWGxBdXdOZTJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPlGhMA0G
CSqGSIb3DQEBCwUAA4IBAQAFaTlxGn9dvAMlZP/kYzmL45+a5WU4N0xWigM10tCu
dR6v05mUkM0jo+BNjUgK/fnmM2Aa4WlpVtj2SPDAmmaodDXQ2Qh5xUnaeC13pS9W
H438uhiZ2dxInsnwi7hjjzBJMNkPzruxHj+GDGQYFNnVRCsp+3fT/TGG5O6QDYjc
B8oxseTTrrWIuk0p3sIXFhDFg717vFYk87PPAX9SGOiCX3pfYxSfCQBlJgLG6jZi
BzKOl8DDeRoZZFO7jgwgj9aJBlsLBip9dgE+c2Qr+TXJMaElukBPr6H06UmPG9SW
eViPHAB5mXcSlFwDw/fzAknWduNOh2VvEKSLHa4JP+cQ
-----END CERTIFICATE-----
Generated at Wed Apr 30 08:24:26 2025 by rpki-client