Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/CW576_k7SmPA8fIjww96lo2ymBA.roa
File: CW576_k7SmPA8fIjww96lo2ymBA.roa (raw, json)
Hash identifier: Tl7x/cNnV5mOSqeVLetIQT7axZIsJ66HBMColwN4JSg=
Subject key identifier: 09:6E:7B:EB:F9:3B:4A:63:C0:F1:F2:23:C3:0F:7A:96:8D:B2:98:10
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 018571F10F742626308FBCB7B301FC40DF02
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/CW576_k7SmPA8fIjww96lo2ymBA.roa
Signing time: Mon 02 Jan 2023 10:05:01 +0000
ROA not before: Mon 02 Jan 2023 10:05:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 212.116.243.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:f1:0f:74:26:26:30:8f:bc:b7:b3:01:fc:40:df:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Jan 2 10:05:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=096e7bebf93b4a63c0f1f223c30f7a968db29810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6c:76:1d:fe:61:8a:ef:1b:dd:52:c1:6f:4f:
1c:2b:09:67:25:4b:4d:10:f4:ad:22:ce:70:0a:c4:
6f:af:d9:e1:dd:1d:77:a8:61:47:00:fb:7b:dc:90:
ee:3f:f1:8f:3b:71:96:64:0f:7a:48:e9:bb:a1:4e:
71:57:0e:52:a3:1d:fd:42:7b:f3:62:49:cf:08:8e:
69:d7:1b:0b:b4:92:94:d6:71:90:26:20:1a:4b:5e:
f6:54:28:eb:2a:99:c9:e9:f4:bd:9f:73:ac:df:a1:
27:98:4e:3a:eb:f8:6d:a3:13:49:1d:06:ab:b2:f2:
4f:d2:6e:f2:5f:16:d4:f1:4f:d4:09:ac:64:38:c2:
c5:ee:cb:74:6b:37:79:b5:91:53:36:da:be:a4:8e:
1a:e3:1c:3a:96:ae:17:6b:fb:5c:b7:5b:7e:61:bb:
55:4c:c6:fe:78:8d:5e:49:75:fb:d5:75:0b:97:68:
08:a4:c4:fd:0d:ae:5c:77:14:47:60:d2:f7:d8:8b:
2a:5e:c7:42:61:e8:38:90:b4:67:93:ac:24:92:5d:
82:3d:c3:31:f0:1c:a8:ec:49:87:5e:91:7d:43:2a:
7a:f0:49:e1:e6:83:ea:42:b6:97:85:dd:6e:ff:fa:
e9:c3:87:f7:b4:21:89:f3:df:49:09:6e:39:93:13:
6a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:6E:7B:EB:F9:3B:4A:63:C0:F1:F2:23:C3:0F:7A:96:8D:B2:98:10
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/CW576_k7SmPA8fIjww96lo2ymBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.116.243.0/24
Signature Algorithm: sha256WithRSAEncryption
30:70:e5:2d:d8:67:86:b8:20:75:b8:ab:f7:69:c5:5f:f9:39:
16:05:5a:17:79:e3:f8:f3:53:53:57:a7:35:80:b3:a2:20:da:
dc:7f:0c:42:65:f0:31:21:00:8d:32:ec:87:c5:5b:71:c5:38:
97:5a:d1:05:da:3d:61:18:77:33:7b:c5:49:08:80:08:bd:85:
f5:12:13:7f:1a:64:91:8a:47:e5:00:90:44:a4:af:7d:58:4d:
81:de:ed:46:f0:a4:4f:d2:16:99:76:25:90:fc:bf:be:4b:4a:
8c:dd:9e:a3:3d:15:47:3b:1e:ed:98:12:7a:7c:05:ad:5e:c8:
82:eb:10:a3:a6:fc:6a:b4:1e:01:12:ed:86:ee:84:38:af:35:
12:2a:42:f8:43:16:71:c2:5c:0c:be:58:f0:fa:71:68:c4:1f:
f6:68:c8:8e:2b:7c:e3:9d:c0:00:68:ad:d6:eb:40:68:41:a3:
da:dc:3a:b9:ca:55:96:4c:d3:76:be:0c:4e:94:b0:a3:75:f2:
ea:7d:14:21:9b:1a:56:6e:b6:8a:ff:8a:fe:82:5f:10:90:96:
8b:d7:9e:0d:3c:d2:b6:f6:68:53:7b:08:af:d5:3d:56:da:c7:
20:31:a4:83:b7:3e:06:c8:3d:d4:39:b4:d8:ef:75:c9:29:e2:
78:b9:6b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:08:30 2025 by rpki-client