Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/y2CL34zOOf5F0zNuSpz4g7xvt1s.roa
File: y2CL34zOOf5F0zNuSpz4g7xvt1s.roa (raw, json)
Hash identifier: Vx7x8046+DCAU0JSXNDxMCuC5PDok65kuuG0J9J86tU=
Subject key identifier: CB:60:8B:DF:8C:CE:39:FE:45:D3:33:6E:4A:9C:F8:83:BC:6F:B7:5B
Certificate issuer: /CN=c089423af1be03027196d1f81df22992978cda6e
Certificate serial: 0185F48A6D4CEAEBA0929223E78B95A85C77
Authority key identifier: C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/y2CL34zOOf5F0zNuSpz4g7xvt1s.roa
Signing time: Fri 27 Jan 2023 18:43:10 +0000
ROA not before: Fri 27 Jan 2023 18:43:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400618
IP address blocks: 93.177.76.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:f4:8a:6d:4c:ea:eb:a0:92:92:23:e7:8b:95:a8:5c:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c089423af1be03027196d1f81df22992978cda6e
Validity
Not Before: Jan 27 18:43:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cb608bdf8cce39fe45d3336e4a9cf883bc6fb75b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:f0:cf:73:e8:99:e3:2d:5a:16:77:7c:7a:e8:
98:6d:c1:58:12:d9:48:04:8f:8a:1b:ae:43:d9:a6:
55:c3:64:65:ea:6d:b4:fe:77:59:dc:eb:25:e6:c2:
f3:24:ab:14:3e:a6:6d:16:2f:88:2b:7f:28:78:56:
f8:62:4c:79:c3:0a:8c:fc:23:e0:2c:3c:03:89:45:
04:71:90:c8:58:50:ff:6e:84:98:22:c8:20:ff:bf:
d6:54:23:c0:f7:f5:c1:42:fc:53:8b:91:70:e0:b1:
6e:51:e9:eb:b3:ad:39:90:b1:6a:03:9a:b3:83:0d:
89:bc:40:ff:ae:ec:1f:13:73:f1:43:1f:fd:61:c9:
2d:b7:98:67:f7:70:3e:ae:70:6e:f7:e5:fb:47:ad:
1b:4d:af:9f:31:0a:9d:27:0b:41:ea:b1:ba:f4:47:
0d:b9:2c:e0:99:7d:87:35:f1:2e:88:75:35:53:ec:
ee:2c:50:bf:31:10:d0:ca:02:3d:a2:c9:b7:c6:c2:
f5:5f:2a:fd:96:ee:b6:bc:bf:9d:a7:06:2b:28:be:
50:7f:07:db:00:36:b4:b8:a7:5b:6c:56:22:48:0f:
70:ea:c2:4e:db:29:ec:f7:a0:40:66:7f:39:31:12:
40:7e:1d:62:bf:8e:8d:68:9b:12:07:db:05:04:94:
d7:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:60:8B:DF:8C:CE:39:FE:45:D3:33:6E:4A:9C:F8:83:BC:6F:B7:5B
X509v3 Authority Key Identifier:
keyid:C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/y2CL34zOOf5F0zNuSpz4g7xvt1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.177.76.0/23
Signature Algorithm: sha256WithRSAEncryption
bb:7f:1f:7c:03:43:b6:56:c3:90:13:65:ea:62:a2:ca:9a:5b:
30:8e:8f:94:86:db:2e:2f:7d:25:f4:a1:43:ab:65:ec:90:a5:
b6:ab:c4:0b:1e:ef:3c:7c:20:87:bd:d0:da:c6:28:3c:2f:54:
a5:28:2e:5b:08:b5:88:9d:8f:95:ee:30:80:02:b7:67:7d:dc:
91:2c:72:08:ae:26:7d:ed:19:95:28:39:35:70:bb:d8:5e:dc:
4b:2f:5f:49:1b:4d:50:02:db:4c:e7:da:00:44:16:d7:71:d3:
56:4c:d3:bd:78:60:44:2f:9e:ee:df:44:4f:fe:c5:9f:b7:de:
8d:96:68:5a:2b:c8:fa:b9:f7:75:11:24:a3:ed:3a:4f:65:90:
16:21:aa:fc:66:5a:eb:1b:ae:c3:e0:d6:cb:84:5f:d3:55:6b:
b4:62:a7:48:de:83:d5:a8:fa:58:ad:93:7e:20:c5:92:9c:7c:
58:92:0c:54:3b:31:27:d2:75:28:e7:4d:dd:cc:0a:ad:33:1d:
44:7a:40:bf:8e:b2:61:d1:04:4a:34:37:12:84:2d:4a:73:8b:
02:df:3e:c4:94:dc:7a:bd:1d:dc:ca:33:e0:32:bb:ad:56:85:
81:8c:db:fb:02:c9:03:f0:2d:39:ef:f4:da:b9:ac:59:fa:c8:
07:20:e6:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:44 2025 by rpki-client