Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/W8c23KH12l-ek0rc-Yl119LAOWk.roa
File: W8c23KH12l-ek0rc-Yl119LAOWk.roa (raw, json)
Hash identifier: XFnBFKxTQjgJ/kIwOLMZFnBcw6FP4DeU2DNp41lMuhc=
Subject key identifier: 5B:C7:36:DC:A1:F5:DA:5F:9E:93:4A:DC:F9:89:75:D7:D2:C0:39:69
Certificate issuer: /CN=b8d251c4bfd526da062d4ce2af56b6e46e925117
Certificate serial: 01857227D92C4685A8A459B86F626DBF952E
Authority key identifier: B8:D2:51:C4:BF:D5:26:DA:06:2D:4C:E2:AF:56:B6:E4:6E:92:51:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNJRxL_VJtoGLUzir1a25G6SURc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/W8c23KH12l-ek0rc-Yl119LAOWk.roa
Signing time: Mon 02 Jan 2023 11:04:52 +0000
ROA not before: Mon 02 Jan 2023 11:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 378
IP address blocks: 132.74.0.0/15 maxlen: 15
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:27:d9:2c:46:85:a8:a4:59:b8:6f:62:6d:bf:95:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8d251c4bfd526da062d4ce2af56b6e46e925117
Validity
Not Before: Jan 2 11:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5bc736dca1f5da5f9e934adcf98975d7d2c03969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:3c:a5:39:81:c1:08:6f:78:ac:5e:b7:36:57:
41:28:ce:bc:a5:64:f0:c0:42:e2:27:37:cd:47:2e:
d2:6f:bf:7b:e6:b0:82:e8:5e:bc:43:cb:00:3d:89:
d0:c5:fd:f6:1b:53:c0:2b:fb:63:42:c5:d8:df:ce:
f3:0b:21:39:42:45:0e:0f:ba:c5:5f:da:fd:cd:52:
52:f8:7f:4b:f4:c7:b9:ad:51:fc:f2:cf:dc:9c:d4:
89:cb:9c:8d:b8:ff:d9:aa:be:2c:b0:83:9c:b8:3d:
a5:ef:14:00:e1:04:7b:40:0c:27:0a:63:5f:45:10:
c5:d0:83:69:d8:1d:c3:83:eb:b3:e9:68:11:38:2a:
51:72:a2:cc:69:1d:84:34:26:38:1b:57:4d:5f:25:
96:1d:a0:69:d2:6b:5a:ff:51:65:fb:3f:de:59:d3:
8c:fe:2c:6a:6f:d9:ef:a5:0f:12:d7:43:fd:7c:41:
96:95:90:3c:70:52:59:35:90:af:e7:92:4c:b4:07:
9f:37:aa:87:51:4b:9f:84:10:0c:1b:aa:25:bc:2b:
eb:a5:ad:9e:1d:2e:88:ff:e5:4a:47:02:8f:e4:52:
b1:86:b8:69:c3:0e:8a:83:f8:89:4b:0e:3b:c1:9c:
81:1e:c5:be:37:e5:88:fa:8d:b9:4f:df:1f:86:5f:
fd:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:C7:36:DC:A1:F5:DA:5F:9E:93:4A:DC:F9:89:75:D7:D2:C0:39:69
X509v3 Authority Key Identifier:
keyid:B8:D2:51:C4:BF:D5:26:DA:06:2D:4C:E2:AF:56:B6:E4:6E:92:51:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNJRxL_VJtoGLUzir1a25G6SURc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/W8c23KH12l-ek0rc-Yl119LAOWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.74.0.0/15
Signature Algorithm: sha256WithRSAEncryption
15:fa:28:bc:f2:ca:ef:50:bd:79:7f:71:4e:1a:5e:04:9f:5e:
86:83:ee:b1:19:c2:b9:6e:45:3b:83:b9:3c:74:1e:05:fc:95:
eb:c1:5b:b4:34:25:5b:83:2a:69:30:eb:f6:06:6f:64:e1:d3:
93:e2:fe:03:36:5c:e2:71:12:77:6b:b0:12:b6:e8:19:9b:1b:
e7:1c:d3:d1:4a:43:f5:54:9b:4e:25:57:46:71:6c:e1:c9:1c:
07:df:8a:5c:2a:a3:37:9a:d7:77:f5:12:dd:1d:a2:ee:f6:d0:
d6:bd:89:75:83:35:b3:21:84:f4:b3:78:4f:42:e0:51:88:4a:
92:50:f7:25:d1:8f:5d:19:77:d1:1e:44:c8:f3:4b:9b:fa:6f:
91:37:5f:23:fa:f9:a1:ce:8f:02:75:16:de:7c:69:64:47:27:
19:36:d1:05:a7:2d:64:1c:5b:78:44:d0:1a:85:d5:20:2d:03:
ec:fe:90:99:8d:26:3c:01:28:e6:cf:a1:d9:c0:e4:cf:80:d6:
4a:3d:73:f4:9f:8e:49:e0:6e:b0:43:83:77:96:93:7f:33:e1:
7f:19:b5:24:8d:d8:ec:b7:ed:c4:07:39:62:56:a4:bf:ba:e6:
6b:50:30:50:81:94:dc:2c:80:51:2d:35:34:4d:0d:1a:c6:51:
0b:06:c5:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:26:41 2025 by rpki-client