Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/WO37fl3pK9KQXcGE5fl1Mk1lYZU.roa
File: WO37fl3pK9KQXcGE5fl1Mk1lYZU.roa (raw, json)
Hash identifier: FT8O5gZjPIWc5qkQxRNveHORDyQ5A8Ny5FLtJZIKINg=
Subject key identifier: 58:ED:FB:7E:5D:E9:2B:D2:90:5D:C1:84:E5:F9:75:32:4D:65:61:95
Certificate issuer: /CN=08b0f12f115ad40f2c2b4aad454d2e43611c9a06
Certificate serial: 01856D41AE64298BAF206506F748275A2BB7
Authority key identifier: 08:B0:F1:2F:11:5A:D4:0F:2C:2B:4A:AD:45:4D:2E:43:61:1C:9A:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/WO37fl3pK9KQXcGE5fl1Mk1lYZU.roa
Signing time: Sun 01 Jan 2023 12:14:59 +0000
ROA not before: Sun 01 Jan 2023 12:14:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29240
IP address blocks: 195.225.176.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:41:ae:64:29:8b:af:20:65:06:f7:48:27:5a:2b:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08b0f12f115ad40f2c2b4aad454d2e43611c9a06
Validity
Not Before: Jan 1 12:14:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=58edfb7e5de92bd2905dc184e5f975324d656195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:67:17:0e:d0:03:86:b1:6a:3f:8b:3c:3b:2a:
c0:e6:77:92:9c:a5:51:1c:9c:03:12:7f:6e:86:89:
34:0f:87:8c:df:cf:c0:d2:e1:9c:fd:9d:15:1a:a4:
4e:db:34:1d:1a:2a:48:a8:36:f0:e9:27:45:bf:9e:
5f:58:68:96:0a:7a:d0:23:05:cb:7f:78:72:b6:ff:
16:c6:82:36:b9:6d:9e:81:c9:7b:97:9a:f4:f0:01:
b3:df:fd:57:de:65:a1:1c:81:09:6a:d7:ca:fa:9e:
f3:0e:92:3e:9f:7d:1c:2c:80:2b:fe:76:0d:c4:74:
cb:be:98:4f:d1:61:31:4d:c5:9d:d3:cf:41:fe:b7:
97:d6:f8:7f:ed:13:77:65:62:e3:36:51:04:ca:9d:
28:17:68:58:99:6c:6b:9e:6d:1a:b9:26:ce:c9:36:
a7:be:17:8e:df:4e:30:8a:b8:29:89:95:26:0d:7d:
b7:f5:2d:74:aa:07:52:3c:83:c5:b5:8c:70:7a:43:
0b:d3:3a:2b:96:0d:1c:5e:c9:75:69:0d:a1:40:ee:
c6:5b:20:e0:6f:4d:7e:e9:07:1b:46:1d:d9:e0:97:
83:ba:9f:ee:3a:61:a0:82:ce:68:af:03:b7:e7:3e:
88:06:21:8a:3f:e5:af:cf:54:2f:e0:0a:c3:cb:68:
4d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:ED:FB:7E:5D:E9:2B:D2:90:5D:C1:84:E5:F9:75:32:4D:65:61:95
X509v3 Authority Key Identifier:
keyid:08:B0:F1:2F:11:5A:D4:0F:2C:2B:4A:AD:45:4D:2E:43:61:1C:9A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/WO37fl3pK9KQXcGE5fl1Mk1lYZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.225.176.0/22
Signature Algorithm: sha256WithRSAEncryption
87:3e:c1:f8:1d:e5:02:4d:4d:2d:89:4b:be:43:aa:c5:42:55:
a0:bb:05:98:ad:44:d1:3e:b3:ea:e2:e9:d9:57:7e:93:68:eb:
d7:80:36:fd:7a:7a:20:8d:31:59:85:b2:82:56:f4:0d:bb:df:
47:e0:e2:97:4f:93:3b:0f:5f:aa:49:88:00:af:7b:e2:71:e5:
41:fc:b7:e0:18:c2:05:20:b7:2d:4b:35:ae:03:b7:d4:b7:04:
95:42:89:9b:75:97:6c:85:23:2a:97:b1:76:4c:a6:97:f1:11:
56:f5:08:c3:55:52:1d:48:a9:05:ec:13:51:d0:fc:c6:9e:57:
e9:44:cd:b1:03:11:e4:95:89:99:b6:50:4a:38:5c:62:4c:c4:
79:eb:6d:d6:30:ab:3e:b5:b2:cd:aa:54:26:34:7d:40:c7:be:
07:3e:b7:d8:ef:75:79:23:66:55:75:7f:b8:01:8b:35:95:2e:
91:01:14:c6:2c:9e:97:e7:02:20:a8:c1:d8:e3:8e:88:fa:8e:
1a:6e:ea:50:07:26:28:0f:10:a5:68:50:74:b0:26:52:dd:9e:
ad:61:f0:54:c2:25:12:dd:05:2c:c5:38:f9:12:dc:f1:10:5f:
1f:b0:dd:65:78:d2:ab:fe:14:d1:b2:23:5e:59:c8:0e:e6:df:
98:f8:33:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:49:34 2025 by rpki-client