Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/ww_NUcYPnSk4eg25_kSDtU7EnMM.roa
File: ww_NUcYPnSk4eg25_kSDtU7EnMM.roa (raw, json)
Hash identifier: IPtgFPy7rZByqh0cxmLtuyh3UshWPlFEQ/DDdjD0sbo=
Subject key identifier: C3:0F:CD:51:C6:0F:9D:29:38:7A:0D:B9:FE:44:83:B5:4E:C4:9C:C3
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 01856F024C27E2ED13BC4B3508D647C26479
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/ww_NUcYPnSk4eg25_kSDtU7EnMM.roa
Signing time: Sun 01 Jan 2023 20:24:59 +0000
ROA not before: Sun 01 Jan 2023 20:24:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201315
IP address blocks: 85.254.48.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:02:4c:27:e2:ed:13:bc:4b:35:08:d6:47:c2:64:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 1 20:24:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c30fcd51c60f9d29387a0db9fe4483b54ec49cc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:42:1b:3b:0c:64:05:50:0e:0d:89:cb:2b:32:
61:cd:65:47:b4:95:aa:ca:7a:69:b3:7f:19:be:43:
91:37:6a:ab:31:a0:44:cf:75:34:75:f0:aa:fa:84:
5f:54:36:b7:09:a9:69:0a:c7:6c:f3:f6:52:5d:09:
28:d7:97:2e:bf:94:98:a2:3b:20:03:f9:d6:16:5b:
0a:f1:4c:d5:48:2d:36:41:46:d7:cf:f8:64:c3:e8:
82:75:4d:72:6e:95:49:aa:93:e1:04:c2:1d:53:55:
0e:a1:7e:60:9a:0a:d0:e8:4a:67:03:c3:f1:78:e9:
d0:59:29:f4:cc:c3:1b:7d:c1:c3:4a:1a:43:94:6f:
f9:ff:4a:67:20:13:b7:5e:4d:5f:64:96:a3:3b:5e:
fd:d2:32:c3:63:13:e2:0c:4b:ab:2b:5b:71:b9:e6:
13:7c:32:10:8c:32:f8:28:b6:77:8d:a3:03:70:21:
90:45:f7:4c:12:50:1c:95:78:17:fe:b9:61:d9:b3:
1e:96:2e:21:4b:95:69:46:49:4a:f0:ff:01:4d:0e:
74:13:3d:3a:ed:85:13:cb:ae:5d:4f:d2:e6:7f:bb:
ba:52:ae:74:0f:57:7c:83:91:26:ad:60:80:9f:6a:
2b:7c:73:3e:99:98:d3:1c:bd:93:f8:a8:ad:bf:87:
1b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:0F:CD:51:C6:0F:9D:29:38:7A:0D:B9:FE:44:83:B5:4E:C4:9C:C3
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/ww_NUcYPnSk4eg25_kSDtU7EnMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.254.48.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:57:b3:d0:8c:c5:a5:11:2d:53:75:8c:b3:ea:a1:98:10:6b:
af:5a:bd:db:81:7e:a7:f3:0d:93:0f:ac:20:00:b4:c5:ef:2d:
af:0d:cb:e8:54:30:9f:55:21:2a:3d:de:eb:25:ec:8c:39:dc:
ab:9b:97:e7:9c:16:d7:88:f7:f8:c9:e8:33:1f:10:0b:10:05:
0a:59:95:03:2a:43:6c:0e:9c:12:0b:c9:48:40:d7:e9:49:bf:
d7:14:41:9e:54:78:9b:b3:0b:8a:13:e2:0e:05:f4:46:a9:89:
d5:9d:3b:a0:e9:e6:5b:6b:4a:a0:93:2d:6f:37:e7:a8:9c:4a:
1f:ed:b0:33:b6:2e:d6:df:2f:95:17:47:80:bc:34:97:ba:1c:
a5:f7:43:81:57:52:8f:fa:37:e0:43:17:c1:97:0e:14:c2:4f:
fa:d3:10:ce:d8:2b:32:93:36:2c:65:26:fa:c3:dc:22:5a:3b:
06:44:36:ca:0c:b4:a6:80:bc:a9:19:63:57:19:c5:f4:12:62:
f4:58:38:af:ae:43:2b:fe:71:2f:69:f5:f6:0f:88:e9:e4:5e:
43:59:da:0c:f5:ff:50:16:c5:57:d2:5d:54:ff:e0:b4:9d:5f:
17:32:20:50:94:11:25:57:db:04:12:36:f6:72:f4:91:0a:90:
55:29:04:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:14:50 2025 by rpki-client