Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/c39b2f-ce86-40bc-9ee5-9f0ad18f039a/1/y2AouvaIIm1b26Eg-NAbLc4x4oM.roa
File: y2AouvaIIm1b26Eg-NAbLc4x4oM.roa (raw, json)
Hash identifier: pSXhw1aH2H84G337L8pyyHqHfFP2jRzPQy76KzyZLM4=
Subject key identifier: CB:60:28:BA:F6:88:22:6D:5B:DB:A1:20:F8:D0:1B:2D:CE:31:E2:83
Certificate issuer: /CN=9eff47f89521d9b492b7d0421bc27691ebf06efd
Certificate serial: 0853CF31
Authority key identifier: 9E:FF:47:F8:95:21:D9:B4:92:B7:D0:42:1B:C2:76:91:EB:F0:6E:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nv9H-JUh2bSSt9BCG8J2kevwbv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/c39b2f-ce86-40bc-9ee5-9f0ad18f039a/1/y2AouvaIIm1b26Eg-NAbLc4x4oM.roa
Signing time: Sat 01 Jan 2022 04:58:08 +0000
ROA not before: Sat 01 Jan 2022 04:58:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34271
IP address blocks: 185.98.28.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139710257 (0x853cf31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eff47f89521d9b492b7d0421bc27691ebf06efd
Validity
Not Before: Jan 1 04:58:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cb6028baf688226d5bdba120f8d01b2dce31e283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0e:e4:53:53:6b:4e:04:75:34:8a:41:74:5b:
3b:d0:8e:d4:1f:55:2a:ca:74:52:fb:e9:94:b7:e1:
46:9a:55:3e:1a:8a:d2:e6:f0:63:7e:8d:1b:92:68:
46:c8:fb:cc:7f:d0:6f:2b:45:d1:9a:40:3b:5d:bb:
72:3a:f9:d8:13:fb:aa:1a:e2:a0:b9:0f:87:87:1a:
41:f5:9c:28:9f:9a:d2:de:4e:76:3f:56:0a:17:3b:
52:68:34:55:2e:67:4e:d2:b2:75:ef:90:35:55:f9:
66:6c:32:21:8c:0f:7c:6e:a5:3b:71:c6:43:ad:07:
51:65:7c:fb:a5:30:2e:9e:9c:cb:8b:92:8f:e6:c8:
f4:29:d5:f8:de:f1:3a:c6:ef:5c:2d:e3:f9:f9:5d:
88:50:de:14:17:83:e1:5d:53:35:b4:38:79:bb:9f:
c1:11:ba:f6:3d:4f:8d:f1:0f:8a:3b:6b:f9:d6:fd:
c6:80:ca:2a:65:e7:63:4b:02:0a:6d:08:f5:c4:9c:
19:49:bd:86:49:66:cb:1b:9a:30:a0:cd:55:79:e7:
40:98:75:b7:ee:9d:58:42:ff:00:f6:e0:4d:f2:7b:
3c:d8:4b:71:4b:50:47:69:e5:50:94:93:b9:58:29:
3d:31:2d:44:c6:90:cd:ae:e9:ba:6f:fc:03:9c:15:
5f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:60:28:BA:F6:88:22:6D:5B:DB:A1:20:F8:D0:1B:2D:CE:31:E2:83
X509v3 Authority Key Identifier:
keyid:9E:FF:47:F8:95:21:D9:B4:92:B7:D0:42:1B:C2:76:91:EB:F0:6E:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nv9H-JUh2bSSt9BCG8J2kevwbv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/c39b2f-ce86-40bc-9ee5-9f0ad18f039a/1/y2AouvaIIm1b26Eg-NAbLc4x4oM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/c39b2f-ce86-40bc-9ee5-9f0ad18f039a/1/nv9H-JUh2bSSt9BCG8J2kevwbv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.98.28.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:1e:29:69:9a:e5:26:a6:bc:91:f6:3e:f9:df:91:db:3a:09:
b5:a9:46:72:9e:9e:ba:47:43:a6:e8:0a:13:4b:ac:b9:47:42:
a1:b7:51:ae:8b:d2:ac:95:a4:85:bf:f0:c0:f3:b9:da:f4:5d:
45:1a:d3:a3:18:71:11:fb:4e:3a:02:55:12:e4:e9:36:1f:a8:
39:4a:f4:6f:fe:16:91:41:6d:fa:8e:77:b7:02:7f:e8:90:34:
48:f7:b3:aa:b8:03:c5:d6:2b:d5:f9:57:2b:a1:08:0a:ef:02:
e8:d9:38:a4:2b:2b:7f:31:32:8c:f6:75:00:55:6e:f4:64:b1:
84:6a:2c:ac:95:36:3f:77:dd:d0:e0:ff:d8:48:49:4e:69:ad:
ee:e3:23:42:78:2a:6c:03:96:09:6a:51:c5:92:9c:20:14:74:
a1:35:9c:99:f6:b4:73:e8:bd:fd:98:36:82:90:c1:9f:d5:82:
02:89:70:f0:a7:d8:ab:27:f2:22:bb:84:25:d8:96:6d:7e:2d:
11:8f:58:a7:a6:9e:38:0b:5a:f6:0a:11:68:54:f7:d3:5e:89:
cf:01:97:ad:22:3f:80:11:44:fc:8c:fe:af:e8:df:f1:cb:e2:
0a:91:10:0b:15:b7:25:da:b5:a4:5d:62:38:20:aa:7c:f7:92:
16:e5:f2:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 00:46:31 2025 by rpki-client