Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/wOxRZi9XvYhDM2VB0PFeyictAQE.roa
File: wOxRZi9XvYhDM2VB0PFeyictAQE.roa (raw, json)
Hash identifier: 2apCr8QBLd7QmATVtgzDBAuPvcMfwEt+pAJIYNvddts=
Subject key identifier: C0:EC:51:66:2F:57:BD:88:43:33:65:41:D0:F1:5E:CA:27:2D:01:01
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 01881F7B88B329D7DFE9EE968B0CB98A0F56
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/wOxRZi9XvYhDM2VB0PFeyictAQE.roa
Signing time: Mon 15 May 2023 12:56:09 +0000
ROA not before: Mon 15 May 2023 12:56:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 134823
IP address blocks: 109.111.52.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:1f:7b:88:b3:29:d7:df:e9:ee:96:8b:0c:b9:8a:0f:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: May 15 12:56:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c0ec51662f57bd8843336541d0f15eca272d0101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:79:f0:65:6b:7d:ef:fc:5b:07:b4:44:8a:3e:
b5:c9:f4:e3:97:cf:75:be:79:b0:7c:05:4c:e2:16:
3b:ed:ab:d5:55:78:ed:93:58:23:fa:4a:6d:86:61:
4e:41:cb:ca:0f:b1:f7:ee:fe:3c:36:99:8e:d3:f9:
2a:62:f6:88:f3:85:b6:31:6c:3f:6f:6e:50:4b:db:
29:e6:06:47:2d:32:c6:84:ac:3d:3b:ca:7e:61:e7:
e9:a6:0b:29:38:e8:b2:ce:65:6f:b4:4f:49:5c:a8:
ae:23:6c:9f:71:30:9d:dc:3a:79:82:55:e7:02:9a:
ab:16:f1:6c:cc:4b:11:c9:c4:27:1e:e9:3b:89:1d:
a2:6f:be:f0:40:0e:e6:05:52:c5:e1:b9:6d:db:a3:
07:db:fe:e8:65:f7:55:b9:1a:f2:fd:47:44:22:fe:
22:e5:4e:80:53:69:b2:c1:1e:5e:a3:e9:e6:d1:b5:
95:5c:e6:2b:be:85:85:b4:ba:0f:44:20:8c:28:1f:
3d:91:9b:00:7d:7f:0d:24:d2:69:8a:cb:6c:ba:c0:
0d:2a:7a:47:b3:7d:1f:bc:20:2e:33:66:07:17:68:
90:c1:51:5d:cd:2e:cc:96:1c:a4:47:1b:9c:a0:63:
5c:a4:0c:4f:29:ff:2f:b8:03:d6:fa:4f:12:6e:91:
26:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:EC:51:66:2F:57:BD:88:43:33:65:41:D0:F1:5E:CA:27:2D:01:01
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/wOxRZi9XvYhDM2VB0PFeyictAQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.111.52.0/22
Signature Algorithm: sha256WithRSAEncryption
29:0c:c2:dc:8f:ef:eb:ee:79:55:df:d3:0f:c2:24:b3:53:95:
1d:0d:1a:2b:20:f0:5e:06:ab:58:f0:e2:7f:ce:39:fa:87:99:
ad:98:0a:9f:45:ac:6c:bc:3b:ec:d9:0d:31:c2:27:e4:df:ab:
86:f2:10:6a:cf:6c:4c:c8:d4:dd:74:b3:21:6a:e9:41:d4:b5:
92:69:38:4f:01:18:96:68:39:77:23:4a:34:d6:eb:bd:c7:7f:
e2:aa:68:15:e4:1a:c2:c0:74:95:9c:94:a2:da:f5:6e:e9:e0:
83:05:39:7d:a9:34:57:2e:eb:ba:c9:7f:b0:92:72:b5:67:4a:
60:8a:aa:75:1d:45:fd:56:21:f0:ef:56:03:f0:a9:b8:fd:28:
c9:f3:92:45:96:91:be:40:51:8f:60:da:ff:2f:41:25:a7:98:
36:4c:65:48:28:8e:b3:3a:b1:47:64:e0:ab:40:dd:b6:99:54:
d0:fb:82:0d:0f:f6:c6:16:56:5f:14:25:43:d1:df:31:a7:98:
50:29:04:c5:5f:65:4a:d3:db:43:a6:49:f2:71:32:ea:6e:fd:
d4:a2:c2:e0:e7:ec:39:ac:14:ac:df:99:ed:ca:cb:14:e2:d1:
44:e4:47:3a:26:77:7c:67:99:1f:56:42:e3:ac:68:01:94:62:
a1:b8:8e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:15:02 2025 by rpki-client