Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/edecb7-bd59-4ebe-b201-6cf131c1caac/1/W_YC9RBH-cDogJXSalOmLAsl1U0.roa
File: W_YC9RBH-cDogJXSalOmLAsl1U0.roa (raw, json)
Hash identifier: sl3B7WrOQ3ZuU3JziVDe0odSvxdtdJH5W3xCmq3HvsY=
Subject key identifier: 5B:F6:02:F5:10:47:F9:C0:E8:80:95:D2:6A:53:A6:2C:0B:25:D5:4D
Certificate issuer: /CN=6c66d5cb2f9cad3f4843f714a4dc62d7213debe8
Certificate serial: 018572C365CF290487C74078BB75F2858041
Authority key identifier: 6C:66:D5:CB:2F:9C:AD:3F:48:43:F7:14:A4:DC:62:D7:21:3D:EB:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bGbVyy-crT9IQ_cUpNxi1yE96-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/edecb7-bd59-4ebe-b201-6cf131c1caac/1/W_YC9RBH-cDogJXSalOmLAsl1U0.roa
Signing time: Mon 02 Jan 2023 13:54:46 +0000
ROA not before: Mon 02 Jan 2023 13:54:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205042
IP address blocks: 188.74.48.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:c3:65:cf:29:04:87:c7:40:78:bb:75:f2:85:80:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c66d5cb2f9cad3f4843f714a4dc62d7213debe8
Validity
Not Before: Jan 2 13:54:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5bf602f51047f9c0e88095d26a53a62c0b25d54d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4e:26:99:36:8e:93:6a:33:74:09:7b:ee:44:
ce:b7:d4:a4:b9:3f:14:ae:96:42:8a:d1:f0:c0:e0:
85:76:44:bf:e7:47:bf:03:47:55:ef:c7:92:f4:7d:
b7:3a:db:a0:1e:80:41:1c:2e:d0:52:bb:78:9b:f7:
27:42:ce:05:a6:a8:9a:a1:05:b3:5e:04:b5:bd:74:
3e:06:41:9a:dd:c2:a5:d9:eb:b2:98:97:a4:ee:e0:
d5:1a:86:fc:12:53:d7:77:16:aa:2a:43:fa:9b:9b:
de:ac:31:fb:d8:01:b8:4e:67:f1:8f:e0:77:69:7e:
af:33:bf:42:ca:11:42:6b:56:cf:cb:da:b7:fe:21:
b4:3a:a8:60:8e:4d:1c:4e:25:63:a2:58:4d:c5:37:
aa:6b:ef:b2:ef:11:a3:6f:45:48:39:2c:14:5b:eb:
43:e3:ce:a4:08:9e:28:3b:78:ba:ec:ac:a9:1a:5d:
a0:87:3a:a4:b7:fc:52:76:23:39:36:9c:2c:7d:9d:
82:d5:01:42:75:1e:b0:38:3c:45:9a:e5:d6:e3:cf:
69:9b:cd:e1:cc:91:c2:8c:4e:e4:51:ee:dc:08:74:
fb:76:9c:dd:4e:ac:ba:3e:f0:25:71:6f:e9:a8:5e:
c3:ce:5e:6b:b3:54:04:33:38:0b:52:b6:28:56:d8:
2b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:F6:02:F5:10:47:F9:C0:E8:80:95:D2:6A:53:A6:2C:0B:25:D5:4D
X509v3 Authority Key Identifier:
keyid:6C:66:D5:CB:2F:9C:AD:3F:48:43:F7:14:A4:DC:62:D7:21:3D:EB:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bGbVyy-crT9IQ_cUpNxi1yE96-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/edecb7-bd59-4ebe-b201-6cf131c1caac/1/W_YC9RBH-cDogJXSalOmLAsl1U0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/edecb7-bd59-4ebe-b201-6cf131c1caac/1/bGbVyy-crT9IQ_cUpNxi1yE96-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.74.48.0/20
Signature Algorithm: sha256WithRSAEncryption
35:33:89:c8:a1:da:eb:f4:16:1c:93:cc:77:df:f9:e7:00:9c:
47:76:90:11:ad:24:5a:48:1e:cf:86:3e:35:50:91:36:58:70:
b4:a3:59:f5:8f:eb:a0:e0:62:8b:dd:ea:fa:71:86:df:29:49:
cd:06:c6:dc:e0:6f:18:49:52:2c:f5:11:d2:89:61:31:db:15:
cf:d7:8e:34:fc:46:76:c4:3f:f6:d1:d0:eb:b6:78:c4:38:03:
2a:e5:c1:66:00:cf:6b:5d:e6:34:fd:e1:ef:cf:b8:9d:59:65:
7c:3a:f2:0c:8f:ac:9e:04:2a:dd:98:ec:21:c5:db:79:42:1e:
66:22:02:58:29:7c:2f:c3:66:13:99:89:28:d9:a2:da:b4:21:
d7:1e:22:20:f0:a4:a6:9b:4d:12:0a:fe:d1:89:58:e9:ae:cf:
ae:9e:35:53:a8:5d:40:6e:70:ef:1e:95:7e:81:81:df:3d:0a:
34:fd:c6:1f:b0:50:e8:ab:25:65:40:db:37:a3:ca:20:8e:bc:
c6:6b:c3:95:d8:dd:21:25:9a:2c:7e:30:e3:28:f7:7d:37:b6:
71:ea:dd:3e:48:e3:dd:fc:0f:67:01:be:4a:eb:22:e8:24:a3:
33:8a:11:38:88:51:4a:58:eb:b8:c0:3c:93:0a:bd:3f:7d:20:
ef:f9:cb:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:23:23 2025 by rpki-client