Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/bbfe48-f14d-40d1-9f1a-cb9e45bb0c63/1/WuiTOGNBHd2_ORi_d1XAYHM2O_Y.roa
File: WuiTOGNBHd2_ORi_d1XAYHM2O_Y.roa (raw, json)
Hash identifier: abLKzp9mK4uQ0dhf18U2AfVgP2zhAR1melyENzG23KI=
Subject key identifier: 5A:E8:93:38:63:41:1D:DD:BF:39:18:BF:77:55:C0:60:73:36:3B:F6
Certificate issuer: /CN=17a6fa80b2d1c43ec9ea824e7e8395f79294e38a
Certificate serial: 018572FA79F9C2F93336694A0528E99E186C
Authority key identifier: 17:A6:FA:80:B2:D1:C4:3E:C9:EA:82:4E:7E:83:95:F7:92:94:E3:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F6b6gLLRxD7J6oJOfoOV95KU44o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/bbfe48-f14d-40d1-9f1a-cb9e45bb0c63/1/WuiTOGNBHd2_ORi_d1XAYHM2O_Y.roa
Signing time: Mon 02 Jan 2023 14:54:55 +0000
ROA not before: Mon 02 Jan 2023 14:54:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44336
IP address blocks: 195.93.204.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:fa:79:f9:c2:f9:33:36:69:4a:05:28:e9:9e:18:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17a6fa80b2d1c43ec9ea824e7e8395f79294e38a
Validity
Not Before: Jan 2 14:54:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5ae8933863411dddbf3918bf7755c06073363bf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:36:c3:f8:01:bd:e0:f8:43:05:9e:75:2e:bd:
75:b2:8d:88:0b:ea:ce:55:7d:34:31:fc:96:03:49:
f8:f1:80:a3:e0:69:ae:32:41:ca:7f:a2:ce:28:dc:
62:c2:8e:12:e6:39:b5:8d:64:2c:b3:63:e5:da:38:
7f:fa:b5:4e:aa:96:92:12:c4:80:90:88:07:aa:8a:
bf:8a:38:e7:3b:5a:13:d5:01:b6:81:5c:d9:fb:97:
57:8a:ba:c9:93:c6:10:c3:b8:d8:84:9b:38:63:46:
37:34:fe:f0:82:f4:a6:9a:da:fb:ab:db:15:db:cb:
94:eb:e6:5f:1c:a0:c5:6d:7b:01:8d:b3:04:31:35:
d6:e1:4a:c9:7e:06:36:6e:14:24:3a:a3:97:e3:56:
22:a9:f1:cf:2a:a1:33:31:ec:42:49:54:84:44:ec:
ad:69:d8:d1:74:a2:33:3a:bd:3e:ff:11:a9:fd:24:
b1:e5:f1:7a:d3:df:12:9d:cf:2b:c1:c1:29:0c:19:
e7:82:3a:6f:f1:64:56:92:16:c6:19:a7:02:ea:8c:
14:fd:37:0b:4e:33:9b:8e:e0:8a:42:22:a8:25:86:
3f:6c:63:a2:80:29:12:ea:20:67:88:da:87:da:2a:
3a:ef:d2:55:a2:ff:be:1e:c0:09:f9:39:d9:89:ab:
dd:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E8:93:38:63:41:1D:DD:BF:39:18:BF:77:55:C0:60:73:36:3B:F6
X509v3 Authority Key Identifier:
keyid:17:A6:FA:80:B2:D1:C4:3E:C9:EA:82:4E:7E:83:95:F7:92:94:E3:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F6b6gLLRxD7J6oJOfoOV95KU44o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/bbfe48-f14d-40d1-9f1a-cb9e45bb0c63/1/WuiTOGNBHd2_ORi_d1XAYHM2O_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/bbfe48-f14d-40d1-9f1a-cb9e45bb0c63/1/F6b6gLLRxD7J6oJOfoOV95KU44o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.93.204.0/23
Signature Algorithm: sha256WithRSAEncryption
53:29:65:5e:7f:44:cb:9c:c8:f2:a6:8d:b7:26:e1:1b:37:c7:
11:11:e3:0c:ae:a5:73:84:75:5a:78:42:b2:4f:bc:7c:57:d8:
9c:ae:2f:cf:b7:07:35:7c:2b:40:75:a6:4e:47:df:37:3d:57:
ce:75:cd:fb:88:7c:f8:f7:fc:03:b8:d7:1a:b3:fd:6b:b2:8b:
55:89:24:4d:43:f9:2f:9d:66:aa:a9:7a:bd:c7:99:53:b9:5b:
e1:bc:6f:28:72:7f:30:8d:2d:d5:20:64:53:c4:5c:a8:aa:fe:
73:26:fa:d0:34:e9:37:e8:61:ad:0c:d4:ab:98:25:42:e0:44:
22:ad:b6:70:b0:d1:eb:66:8b:60:f0:31:c2:12:d3:b6:87:e9:
a3:cb:03:3b:a6:14:9b:1a:10:91:44:41:9f:ad:82:9b:86:d2:
3e:94:8c:66:3b:b8:c5:c8:b5:1f:70:94:c1:ed:af:b3:d1:88:
67:19:b7:5e:50:ba:74:34:ee:41:94:ef:6a:de:2e:1b:b3:d3:
69:94:45:35:8d:04:67:8e:02:82:26:4e:95:04:62:b5:4d:13:
a9:a6:e4:a3:42:1d:c4:2c:e6:02:ab:36:b8:7f:13:63:41:11:
f0:ff:aa:6f:20:89:cc:23:0b:22:3f:2a:cb:c9:f4:72:ee:dd:
2c:93:af:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:40:08 2025 by rpki-client