Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/WWT3aCZz2azWXrHBGois6jnZJAk.roa
File: WWT3aCZz2azWXrHBGois6jnZJAk.roa (raw, json)
Hash identifier: setw4Y24cKxlsA+SvplYjqSNepS5P4O9+q/hx1BId+M=
Subject key identifier: 59:64:F7:68:26:73:D9:AC:D6:5E:B1:C1:1A:88:AC:EA:39:D9:24:09
Certificate issuer: /CN=c833a0389592756e415cde348abbc24312b02df6
Certificate serial: 0185720C78736B0A3CF0B7EEF60D8C2ED801
Authority key identifier: C8:33:A0:38:95:92:75:6E:41:5C:DE:34:8A:BB:C2:43:12:B0:2D:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yDOgOJWSdW5BXN40irvCQxKwLfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/WWT3aCZz2azWXrHBGois6jnZJAk.roa
Signing time: Mon 02 Jan 2023 10:34:57 +0000
ROA not before: Mon 02 Jan 2023 10:34:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204254
IP address blocks: 2001:67c:754::/48 maxlen: 48
2001:67c:75c::/48 maxlen: 48
2001:67c:758::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:0c:78:73:6b:0a:3c:f0:b7:ee:f6:0d:8c:2e:d8:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c833a0389592756e415cde348abbc24312b02df6
Validity
Not Before: Jan 2 10:34:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5964f7682673d9acd65eb1c11a88acea39d92409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:93:3c:46:e7:d8:e7:74:14:80:5b:81:34:c9:
17:d7:81:e6:83:4e:84:50:ea:a7:7b:42:cb:cb:6c:
af:2e:9c:07:6a:76:bb:83:f9:4f:60:a7:8b:11:1e:
6e:d5:b0:a6:4e:dc:1b:7b:f9:2d:df:98:f8:25:db:
40:31:26:0f:7b:3d:20:bc:ae:d8:6b:ea:0f:8d:ba:
d4:9c:6d:e7:0f:d4:68:8d:29:ae:7f:40:85:06:66:
bd:5a:fc:42:c1:db:bd:dd:1f:27:0b:77:1a:c2:45:
be:f6:fd:1b:66:de:08:68:b3:33:de:2a:46:f5:d4:
a9:d2:e2:da:5f:4e:af:2a:7c:c2:97:63:3b:66:57:
4c:29:f9:c5:e4:7a:76:b4:58:3b:7a:82:f1:28:55:
b4:b7:13:e7:84:0f:a7:a1:83:1a:d0:b9:cf:63:5f:
bf:3a:a4:57:5c:dd:8c:79:83:43:9a:ff:88:41:1a:
bf:f5:10:56:a7:7d:d9:ec:a3:3c:16:0d:e2:07:35:
11:d4:0b:41:82:be:fb:6b:4b:6a:b4:9d:50:33:e9:
47:bd:b0:f9:80:c5:d8:8b:7b:3d:c2:b8:2c:1f:50:
1e:8e:ca:db:a3:55:fb:12:06:52:8a:0e:17:ff:dc:
ca:39:cd:bb:dc:ec:8c:22:4d:52:6a:9e:cb:ed:bb:
6e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:64:F7:68:26:73:D9:AC:D6:5E:B1:C1:1A:88:AC:EA:39:D9:24:09
X509v3 Authority Key Identifier:
keyid:C8:33:A0:38:95:92:75:6E:41:5C:DE:34:8A:BB:C2:43:12:B0:2D:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yDOgOJWSdW5BXN40irvCQxKwLfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/WWT3aCZz2azWXrHBGois6jnZJAk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:754::/48
2001:67c:758::/48
2001:67c:75c::/48
Signature Algorithm: sha256WithRSAEncryption
96:a9:20:84:1d:52:eb:6f:c7:14:6a:08:1f:ae:68:39:f7:27:
53:83:df:8e:61:f6:1b:3c:a9:c9:a6:6e:ee:bb:ed:af:bd:4d:
1c:d2:6a:a5:73:4c:48:2e:b7:f7:27:40:39:bb:4a:86:c1:a1:
5b:d5:71:5f:56:0c:1a:2d:02:4e:11:3e:0b:9e:f0:74:de:09:
0d:a0:e3:5a:20:62:64:31:d0:bb:0e:47:70:44:d4:d2:fe:f2:
2b:42:c2:0f:60:23:2a:c6:f2:be:55:38:db:ef:ac:68:63:22:
71:37:a4:5c:65:72:4f:0b:d4:a7:71:15:70:f6:c0:6b:ef:47:
b9:2c:f5:49:8e:c1:a8:1f:8d:6a:3d:2d:a0:92:12:0f:5c:b8:
b8:11:58:cb:ad:93:5b:00:b7:53:a6:16:06:61:6f:75:b3:7a:
a2:b7:3a:a3:c9:f8:33:42:b5:6b:13:a7:27:98:12:41:2d:62:
c4:99:77:25:1b:d3:21:5e:49:43:4b:b9:10:52:fc:74:d2:5c:
8a:6b:db:56:0b:e5:9b:af:b9:90:5d:18:32:05:fb:e7:bd:01:
c5:68:56:17:d8:92:da:35:1d:f5:1d:e3:c8:d3:00:83:78:a6:
e5:40:6d:db:8d:03:2b:34:df:98:a5:e1:68:9a:d0:61:72:0c:
ff:34:22:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 02:10:43 2025 by rpki-client