Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ymNhm8gC-yN0qAENmtdiSosAlTI.roa
File: ymNhm8gC-yN0qAENmtdiSosAlTI.roa (raw, json)
Hash identifier: EajmuwcwgllypZkBDwwCyhuC4J9yWwV8cXStinRPWyM=
Subject key identifier: CA:63:61:9B:C8:02:FB:23:74:A8:01:0D:9A:D7:62:4A:8B:00:95:32
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0189108E6F9AA8E71AA027C0D012500DAD64
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ymNhm8gC-yN0qAENmtdiSosAlTI.roa
Signing time: Sat 01 Jul 2023 08:25:17 +0000
ROA not before: Sat 01 Jul 2023 08:25:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.14.166.0/24 maxlen: 24
45.14.167.0/24 maxlen: 24
93.123.74.0/24 maxlen: 24
83.219.98.0/24 maxlen: 24
83.219.96.0/24 maxlen: 24
83.219.99.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:10:8e:6f:9a:a8:e7:1a:a0:27:c0:d0:12:50:0d:ad:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 1 08:25:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ca63619bc802fb2374a8010d9ad7624a8b009532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:98:3b:80:f4:90:ba:72:40:e3:ac:e2:76:76:
17:02:67:c1:d7:a4:46:e0:24:6b:ef:d3:71:30:73:
07:96:7c:bc:d4:7c:92:a7:0a:7f:8f:33:02:6a:aa:
5f:85:3c:5b:e3:64:ac:81:01:a9:8f:8c:df:34:c1:
bb:b2:2c:22:ea:c0:9f:c1:71:90:ff:f6:61:18:0f:
c8:61:42:a7:22:1b:8d:2f:63:69:2f:a4:4c:b1:9b:
8b:f1:d1:ed:ad:45:65:bc:3c:b0:3b:5d:cc:81:4f:
55:52:e7:2b:81:af:1d:ab:0a:b4:ad:b3:5e:cc:8b:
7b:57:1f:ec:ae:f3:58:bd:9d:44:82:e4:f3:2d:6a:
c1:29:db:ed:9b:72:f9:8b:95:57:94:03:8d:21:04:
d2:d0:4e:f8:b6:32:f7:57:12:9c:5a:d7:b6:92:11:
b2:90:f3:63:3d:fa:7a:3b:ed:1f:81:f6:61:c6:52:
c2:c8:0c:ef:08:c7:9a:ba:0c:35:6b:6a:52:a4:e7:
c2:f5:7b:b1:c0:89:ef:f1:c6:28:de:96:c4:c9:cd:
fb:70:6e:71:e4:38:4b:51:e0:ab:6c:8a:bf:a0:b1:
f7:7e:19:4f:42:c3:e4:5d:e7:c0:d0:dc:f3:6a:6b:
89:a1:fc:7b:3e:72:37:b8:b8:1b:a4:d6:09:11:35:
7a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:63:61:9B:C8:02:FB:23:74:A8:01:0D:9A:D7:62:4A:8B:00:95:32
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ymNhm8gC-yN0qAENmtdiSosAlTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.166.0/23
83.219.96.0/24
83.219.98.0/23
93.123.74.0/24
Signature Algorithm: sha256WithRSAEncryption
94:d7:a4:40:db:17:3a:2b:37:05:cc:aa:05:8c:dc:7c:6b:54:
50:7b:3c:46:e5:4f:c6:38:da:24:98:02:9a:29:e9:fd:e0:7f:
36:9b:76:ff:4a:f5:5b:e9:46:5e:ff:be:3e:f0:5e:3a:29:93:
45:f0:9d:cf:6b:0d:34:70:d1:a9:81:09:5b:4e:d0:34:43:86:
39:e7:84:2e:a7:30:16:64:94:87:50:a0:93:ad:ef:a2:7b:1f:
44:b6:d0:96:9d:8f:15:d5:e1:c6:80:bd:ff:91:d1:5f:f0:4a:
27:1b:e7:58:06:40:f8:95:3b:44:f1:be:4d:ea:cd:93:3e:62:
82:4b:32:a4:6b:dc:57:bf:50:69:61:9c:f0:f1:d0:ac:58:32:
b8:61:c9:5f:e6:45:1c:77:96:1b:cc:b5:7b:c6:fc:ce:d4:fa:
37:8f:fd:a8:5c:f4:ec:c5:f9:ba:35:cf:f8:e8:6d:8a:a1:be:
25:f2:a8:5c:6d:a7:7f:e9:59:61:14:9c:86:91:dd:50:36:bb:
20:51:bb:12:9a:65:6e:36:c3:da:c6:e9:f5:c6:1c:2e:e7:e6:
99:2e:46:42:38:ac:61:d0:ad:f4:ec:b3:5b:c7:29:4e:fd:dc:
0b:09:b6:f8:24:7b:92:a7:70:71:13:47:54:a3:43:7f:6c:50:
0d:7d:08:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 16:37:47 2025 by rpki-client