Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/ywHkWllA3cxVeP1qF5Xq0029DPM.roa
File: ywHkWllA3cxVeP1qF5Xq0029DPM.roa (raw, json)
Hash identifier: NWH1CegodtLmi13+Ni6hb0shZoYgax+/NVO8s+i64mc=
Subject key identifier: CB:01:E4:5A:59:40:DD:CC:55:78:FD:6A:17:95:EA:D3:4D:BD:0C:F3
Certificate issuer: /CN=c089423af1be03027196d1f81df22992978cda6e
Certificate serial: 07839873
Authority key identifier: C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/ywHkWllA3cxVeP1qF5Xq0029DPM.roa
Signing time: Mon 21 Mar 2022 13:57:35 +0000
ROA not before: Mon 21 Mar 2022 13:57:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 136933
IP address blocks: 85.8.182.0/23 maxlen: 24
84.252.100.0/23 maxlen: 24
84.252.100.0/24 maxlen: 24
84.252.101.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126064755 (0x7839873)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c089423af1be03027196d1f81df22992978cda6e
Validity
Not Before: Mar 21 13:57:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cb01e45a5940ddcc5578fd6a1795ead34dbd0cf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ad:6e:47:83:5f:3a:21:1b:6d:d9:43:1a:cf:
41:b9:10:01:14:28:db:98:34:4d:7b:43:f7:97:53:
54:22:d5:ee:57:42:c9:b7:44:dc:54:58:09:07:cd:
cc:75:d9:b5:bc:54:ed:c2:e3:c3:a0:eb:66:d2:c0:
5e:70:cc:66:63:eb:08:47:a6:bf:75:10:8e:dc:b0:
c0:0e:60:cf:4b:2e:e0:d2:d6:30:87:58:ff:0c:2e:
68:1b:73:6e:e2:20:34:d4:45:e4:f0:0f:9d:75:5b:
09:3a:c8:43:62:a5:a3:0c:8a:2e:dd:b0:46:fb:74:
83:c5:6c:74:4d:c0:a5:a1:0e:56:65:0b:20:92:52:
40:f1:94:32:0c:6d:01:ca:6a:8c:1e:25:88:49:01:
74:d1:15:b1:54:41:4d:1f:9e:30:54:87:cf:bf:b6:
86:18:d3:d5:48:0e:f0:39:2c:1a:e7:a1:1b:dc:d1:
de:3f:30:f7:a8:1a:ca:06:26:9f:ad:4d:1e:c9:24:
81:88:9a:4b:82:58:90:81:9a:10:0b:9c:45:e7:67:
a5:54:36:b8:45:0b:16:02:35:e2:8e:18:8c:a3:a6:
46:dc:bf:5b:f3:6e:62:cc:f3:2b:00:ab:15:5d:bd:
11:89:f1:2d:9a:f7:f3:98:7a:bc:5b:54:a1:33:e7:
7f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:01:E4:5A:59:40:DD:CC:55:78:FD:6A:17:95:EA:D3:4D:BD:0C:F3
X509v3 Authority Key Identifier:
keyid:C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/ywHkWllA3cxVeP1qF5Xq0029DPM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.252.100.0/23
85.8.182.0/23
Signature Algorithm: sha256WithRSAEncryption
01:7d:56:69:b7:37:a5:b9:47:c3:b2:bf:b7:99:a8:af:24:c1:
15:bd:62:2a:a1:76:47:01:e4:ba:a2:b6:e3:2d:54:e1:76:89:
50:2e:27:8f:d9:a8:2a:b2:a2:ee:59:7b:22:cd:8c:8d:e0:62:
d7:80:5a:86:f2:a7:b5:5a:fd:9f:56:25:c5:13:17:78:5f:38:
fa:b9:65:e1:ac:04:3d:ae:43:fc:98:4a:d8:c6:06:49:cc:9f:
89:10:2f:f9:bf:01:15:5a:2a:f1:38:b2:9a:30:df:f7:51:16:
b6:02:fd:bc:d6:87:7a:05:d7:5e:37:34:c5:fa:f8:e0:25:bd:
04:21:4b:e2:6a:3d:48:6f:7b:b5:3c:12:65:6b:7e:55:1b:7d:
09:66:08:24:ce:43:c3:11:56:1f:fd:a2:f8:8b:f9:b1:6d:f7:
aa:85:df:71:b5:fe:94:4a:d9:01:43:c1:e5:6a:4e:04:72:8d:
40:21:54:28:2b:c2:c5:fb:3c:22:73:1a:93:1a:e3:24:3f:af:
96:0f:1e:38:18:5a:4f:58:b3:47:e7:0f:36:ff:77:f4:b7:94:
87:88:95:e0:b4:ed:6b:4e:23:bf:ee:23:e2:e6:41:36:35:0e:
77:1c:8c:6c:7e:7f:b7:7a:0d:d6:2d:a3:79:e4:4e:58:80:bb:
8e:cd:62:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:31:13 2025 by rpki-client