Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/W_YBLuLJ31frSWvcHf1bVQ3RfgA.roa
File: W_YBLuLJ31frSWvcHf1bVQ3RfgA.roa (raw, json)
Hash identifier: QE/R/qdBEGxs7udj/r3S8/s0oX8Y2DlV6tUyBiOtLWs=
Subject key identifier: 5B:F6:01:2E:E2:C9:DF:57:EB:49:6B:DC:1D:FD:5B:55:0D:D1:7E:00
Certificate issuer: /CN=3e2742496400d810be5b4096fdedec30a231f9ab
Certificate serial: 0185B8B6D64759436C623CBA28566BDBAE4A
Authority key identifier: 3E:27:42:49:64:00:D8:10:BE:5B:40:96:FD:ED:EC:30:A2:31:F9:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PidCSWQA2BC-W0CW_e3sMKIx-as.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/W_YBLuLJ31frSWvcHf1bVQ3RfgA.roa
Signing time: Mon 16 Jan 2023 03:54:28 +0000
ROA not before: Mon 16 Jan 2023 03:54:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200368
IP address blocks: 2001:67c:b44::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:b8:b6:d6:47:59:43:6c:62:3c:ba:28:56:6b:db:ae:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e2742496400d810be5b4096fdedec30a231f9ab
Validity
Not Before: Jan 16 03:54:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5bf6012ee2c9df57eb496bdc1dfd5b550dd17e00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:ff:2d:3d:6d:01:4e:93:5d:c5:4d:7d:7b:9a:
72:86:43:3c:29:df:ce:39:e7:12:b5:0c:34:fc:26:
b0:62:bc:87:7d:ad:3a:d8:95:a8:e3:cf:4d:77:ef:
29:45:b2:f6:d9:df:35:11:33:a3:55:0d:2e:9e:18:
ac:9d:72:d3:e9:2d:b0:ad:b2:96:62:20:d6:74:e3:
92:1d:4d:41:7e:74:40:e3:79:90:e8:4b:2d:0d:77:
06:60:37:53:32:95:f7:95:35:85:37:33:48:af:04:
e9:98:ce:13:3a:02:fa:c1:9b:1b:62:79:d5:f5:88:
6e:ff:75:ab:30:bb:48:e6:83:3f:81:2d:6f:7c:f9:
76:e4:38:58:ec:90:f9:09:c6:8a:4c:2d:84:4c:31:
d8:2d:62:81:c6:6b:59:92:19:0d:ec:95:2f:b2:68:
67:e1:5d:8b:32:1f:47:fe:44:c4:20:e1:d9:bd:f8:
de:af:4e:11:6c:7c:7e:89:18:f0:b5:58:64:11:59:
60:2d:61:e3:af:a0:fa:ef:df:21:b0:03:5e:3c:72:
ab:8b:30:4e:57:13:53:8f:2d:6e:cf:eb:5d:4e:48:
6a:42:68:4d:a5:96:6b:36:d7:20:3d:0c:ba:ad:f6:
56:5d:a6:28:d0:94:6a:ff:09:2b:c2:03:88:50:01:
ed:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:F6:01:2E:E2:C9:DF:57:EB:49:6B:DC:1D:FD:5B:55:0D:D1:7E:00
X509v3 Authority Key Identifier:
keyid:3E:27:42:49:64:00:D8:10:BE:5B:40:96:FD:ED:EC:30:A2:31:F9:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PidCSWQA2BC-W0CW_e3sMKIx-as.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/W_YBLuLJ31frSWvcHf1bVQ3RfgA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:b44::/48
Signature Algorithm: sha256WithRSAEncryption
96:16:2a:7e:d2:6a:36:63:17:4f:eb:7d:f6:c3:fa:3c:d7:4b:
ab:7b:bb:5c:6e:ce:b1:4e:29:ac:5e:b9:b3:44:5b:c3:c9:b9:
6b:e2:6e:bf:71:5b:4f:cc:fb:5c:4c:1c:36:b5:40:5b:df:5c:
f5:cd:4f:4c:54:83:b9:9c:bc:1e:93:50:fb:95:1a:6f:5d:88:
7a:11:cc:4f:9c:7e:64:9c:7e:a5:17:e7:bd:3b:73:75:da:25:
5d:c2:a0:77:f0:01:b8:d2:0e:bf:08:a6:ed:c9:3d:c2:50:27:
2f:84:9c:ca:3e:37:58:9b:96:76:85:23:b9:c5:5e:69:03:6b:
b1:a4:e7:d5:d4:f3:ff:30:49:46:77:8e:28:41:ed:56:c3:29:
d5:b7:f3:d8:cd:5d:74:e7:05:e7:0c:f8:65:99:9d:d8:51:62:
71:9a:9a:59:fa:e9:79:fe:b5:48:85:5c:bd:ea:86:81:e4:62:
83:1d:cd:79:b0:45:26:c7:eb:29:fa:81:ea:6e:d3:41:84:88:
93:cc:47:73:7c:6d:0d:c5:ce:53:3c:2c:f5:6a:a5:9b:4f:d7:
af:fc:3d:77:f3:be:5e:0b:9a:a9:93:cd:e1:39:6c:e2:1f:ad:
ae:bd:e4:d3:4b:c0:64:71:f5:6a:b9:ce:5c:94:65:c5:f3:30:
ae:78:1a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:21:27 2025 by rpki-client