Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/woyVpWwUMPrna3JvwyI87MNwqb0.roa
File: woyVpWwUMPrna3JvwyI87MNwqb0.roa (raw, json)
Hash identifier: 9hpFAw1pvbm4Nn8hqeQLRTJbhalcwFb28xahdmhQEvc=
Subject key identifier: C2:8C:95:A5:6C:14:30:FA:E7:6B:72:6F:C3:22:3C:EC:C3:70:A9:BD
Certificate issuer: /CN=3bd9a177bb5dfb6eabe4cad79def8f8b005df656
Certificate serial: 018B85C9C9AE2D71272947B533AD8BC85758
Authority key identifier: 3B:D9:A1:77:BB:5D:FB:6E:AB:E4:CA:D7:9D:EF:8F:8B:00:5D:F6:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9mhd7td-26r5MrXne-PiwBd9lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/woyVpWwUMPrna3JvwyI87MNwqb0.roa
Signing time: Tue 31 Oct 2023 12:51:15 +0000
ROA not before: Tue 31 Oct 2023 12:51:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206720
IP address blocks: 140.94.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:85:c9:c9:ae:2d:71:27:29:47:b5:33:ad:8b:c8:57:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bd9a177bb5dfb6eabe4cad79def8f8b005df656
Validity
Not Before: Oct 31 12:51:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c28c95a56c1430fae76b726fc3223cecc370a9bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:89:aa:34:93:ba:4c:83:4a:1a:a8:62:9c:c7:
d8:1f:61:cf:c7:bc:8b:74:a3:04:ad:33:7a:09:97:
e2:7c:f4:5c:df:ab:73:03:b7:20:da:b5:1b:3d:39:
db:a7:b9:4a:d9:74:ac:22:8f:41:f8:f8:3e:a5:5e:
94:74:33:ee:65:8b:6a:b2:d1:06:75:eb:af:3b:be:
e8:dc:e7:ae:0d:9d:16:6f:66:f9:96:9d:27:77:4c:
db:01:37:91:77:78:e3:1d:d4:ed:a3:9f:ec:8c:1d:
64:8c:67:ba:74:ed:1f:68:6e:38:03:74:06:5a:70:
09:9b:98:33:d7:ed:82:7a:f2:dd:71:70:12:e2:ce:
1c:a7:c8:b8:be:b9:70:29:0b:52:25:15:b1:04:f4:
94:b4:06:0e:6f:6e:cf:48:94:66:df:0a:af:7c:0f:
d9:61:30:ef:ee:d7:f1:3f:84:ca:c0:b9:f9:78:81:
a6:36:a3:8b:de:eb:7e:4e:b2:23:33:29:1b:0f:6d:
d3:8d:4b:65:ce:50:ee:e9:8f:8f:ba:66:72:51:3d:
09:68:7b:a3:b5:79:d5:d4:d0:e1:0d:3b:71:ba:13:
6a:80:16:1e:b9:73:48:8b:27:fe:38:93:d7:bb:7a:
d2:00:81:be:00:90:73:8b:f3:ad:05:88:b6:bb:6f:
8a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:8C:95:A5:6C:14:30:FA:E7:6B:72:6F:C3:22:3C:EC:C3:70:A9:BD
X509v3 Authority Key Identifier:
keyid:3B:D9:A1:77:BB:5D:FB:6E:AB:E4:CA:D7:9D:EF:8F:8B:00:5D:F6:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9mhd7td-26r5MrXne-PiwBd9lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/woyVpWwUMPrna3JvwyI87MNwqb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.94.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a9:9c:92:91:92:da:82:d4:07:02:b6:49:63:b0:63:b0:69:a3:
66:51:5e:10:9b:1a:9c:1c:78:61:e9:f1:95:b7:84:80:79:7c:
e3:4e:9d:6a:41:55:16:44:a9:c9:82:b5:c2:25:49:ea:c3:e5:
9b:5e:93:ff:eb:99:97:4a:bb:a5:3e:cd:14:2d:8d:24:72:6b:
cf:d2:25:1d:3e:01:15:bc:f0:bb:2e:bd:fd:28:11:2b:07:32:
ec:6b:23:b4:8a:92:79:36:3e:e3:ba:0e:7c:05:15:57:67:bf:
0d:52:e6:ea:ae:ac:60:42:a6:70:bd:f4:1e:9b:85:03:45:25:
6a:c6:bb:40:ca:e5:b6:af:be:19:98:f6:73:d8:73:19:49:bf:
8e:e3:05:f7:a4:a6:46:ba:c7:4b:59:2d:7c:c5:3b:74:7e:59:
4a:6e:d5:23:b4:97:15:66:84:74:1b:31:3f:a9:97:1e:4d:cd:
e7:7f:cf:cc:46:f1:0d:3f:46:29:34:4a:be:85:ae:e9:a8:62:
39:38:63:24:57:c5:93:ec:34:d0:aa:40:53:b0:31:ae:89:9a:
75:75:b8:a1:05:f4:8f:97:13:a9:5f:bf:11:6f:22:e9:bc:80:
53:a3:df:0f:52:c3:2a:b4:6f:97:7e:c7:d8:b3:3d:7c:eb:f6:
0c:72:5d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 13:42:37 2025 by rpki-client