Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/cwyp0aohLS_hAROAdboPreoDFHY.roa
File: cwyp0aohLS_hAROAdboPreoDFHY.roa (raw, json)
Hash identifier: u/R4OIk2Bu2LbKDwmS6CzIFOVAVo3jgl6xtGccsijVE=
Subject key identifier: 73:0C:A9:D1:AA:21:2D:2F:E1:01:13:80:75:BA:0F:AD:EA:03:14:76
Certificate issuer: /CN=6fedf0b7615290aefacc5f6aa6b41d9d1843f1b6
Certificate serial: 018BD24A763656C04902C1F6A4AC50DD6B08
Authority key identifier: 6F:ED:F0:B7:61:52:90:AE:FA:CC:5F:6A:A6:B4:1D:9D:18:43:F1:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b-3wt2FSkK76zF9qprQdnRhD8bY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/cwyp0aohLS_hAROAdboPreoDFHY.roa
Signing time: Wed 15 Nov 2023 09:22:57 +0000
ROA not before: Wed 15 Nov 2023 09:22:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51132
IP address blocks: 83.68.224.0/19 maxlen: 24
185.95.160.0/22 maxlen: 24
62.108.192.0/20 maxlen: 24
91.145.0.0/19 maxlen: 24
62.108.208.0/21 maxlen: 24
2a02:eb8::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d2:4a:76:36:56:c0:49:02:c1:f6:a4:ac:50:dd:6b:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fedf0b7615290aefacc5f6aa6b41d9d1843f1b6
Validity
Not Before: Nov 15 09:22:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=730ca9d1aa212d2fe101138075ba0fadea031476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d9:ef:f5:e6:ca:5c:19:1b:3c:21:72:16:4a:
49:86:f6:02:c9:a1:b9:e6:9b:81:87:95:49:e0:52:
29:c5:14:33:12:b3:e6:95:87:40:4b:c0:a7:35:46:
0b:5c:54:67:3a:c3:22:6a:ba:59:46:96:ae:a5:31:
58:ec:ad:5f:99:03:7c:05:44:5b:c7:ec:fa:ee:be:
18:7c:2e:55:4d:ba:06:0f:fc:46:96:33:ad:28:6c:
69:cb:5c:d6:76:ca:e0:c6:83:2e:3f:83:a4:04:d5:
14:84:56:15:09:99:9e:43:73:d4:48:9f:b1:07:e6:
ae:37:b5:b0:a7:d3:f4:1f:e1:ce:ee:1c:c2:76:32:
37:20:1b:62:16:0f:e5:0e:83:5e:e8:e7:a5:61:29:
11:6c:35:74:b4:b7:21:f1:db:6f:71:59:34:82:c3:
ff:c6:59:a8:eb:91:0c:da:ac:04:64:4f:32:31:e0:
f7:dd:50:5b:dc:95:a2:a1:09:35:89:d8:c4:f6:8c:
44:a1:7b:6d:1a:d2:f2:6e:4e:b8:db:55:79:47:4c:
77:08:16:82:86:8f:04:14:79:3b:bf:46:f3:a0:60:
92:5b:41:d7:e4:e2:31:df:ff:25:40:bc:d1:60:b5:
49:f2:10:e0:1a:b6:12:ee:cd:66:66:00:1d:1d:fd:
1e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:0C:A9:D1:AA:21:2D:2F:E1:01:13:80:75:BA:0F:AD:EA:03:14:76
X509v3 Authority Key Identifier:
keyid:6F:ED:F0:B7:61:52:90:AE:FA:CC:5F:6A:A6:B4:1D:9D:18:43:F1:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-3wt2FSkK76zF9qprQdnRhD8bY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/cwyp0aohLS_hAROAdboPreoDFHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.108.192.0-62.108.215.255
83.68.224.0/19
91.145.0.0/19
185.95.160.0/22
IPv6:
2a02:eb8::/29
Signature Algorithm: sha256WithRSAEncryption
8b:b6:64:97:1e:8c:80:2b:9c:c6:ea:2e:41:94:f2:2e:29:6a:
1c:84:b0:fb:36:72:0a:19:49:c1:46:32:a5:10:0f:c2:f3:97:
82:e3:9f:89:a9:33:1a:d0:6c:58:44:0d:61:ca:c5:7d:67:73:
fa:7d:53:23:a6:3b:b6:15:42:e6:71:41:50:7a:c0:7c:3b:55:
34:8e:80:88:52:a5:ce:88:f6:87:2c:4f:a0:8a:c2:f7:2a:0f:
e9:14:50:c7:4a:9b:c9:8b:8c:52:a6:d3:c7:ee:40:36:3a:ef:
18:c8:2c:b4:57:c8:29:f9:d3:a3:76:d4:cd:52:33:d8:83:60:
23:d0:81:9d:6a:fc:f5:54:02:09:f8:cf:62:0e:0d:46:d8:6f:
e6:59:5c:d9:1e:f0:e9:ce:0f:0a:40:c7:91:16:df:bc:7c:26:
39:6a:ff:af:41:23:78:26:27:c8:d7:b7:bf:5f:65:b7:f1:1d:
51:ee:e4:ac:14:ac:50:28:11:38:52:22:a9:73:00:4b:6d:86:
f7:a0:7a:f3:c9:cf:f7:0d:3d:23:2f:a4:c3:b6:78:a7:db:a3:
e6:09:90:e1:65:cd:19:44:a3:b8:f0:70:bd:55:d5:7a:33:d1:
c6:ed:b2:b5:0e:fa:76:d8:52:29:20:47:2b:53:4b:0c:d3:21:
b4:a3:85:cc
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgISAYvSSnY2VsBJAsH2pKxQ3WsIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmZWRmMGI3NjE1MjkwYWVmYWNjNWY2YWE2YjQxZDlkMTg0
M2YxYjYwHhcNMjMxMTE1MDkyMjU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MzBjYTlkMWFhMjEyZDJmZTEwMTEzODA3NWJhMGZhZGVhMDMxNDc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltnv9ebKXBkbPCFyFkpJhvYCyaG5
5puBh5VJ4FIpxRQzErPmlYdAS8CnNUYLXFRnOsMiarpZRpaupTFY7K1fmQN8BURb
x+z67r4YfC5VTboGD/xGljOtKGxpy1zWdsrgxoMuP4OkBNUUhFYVCZmeQ3PUSJ+x
B+auN7Wwp9P0H+HO7hzCdjI3IBtiFg/lDoNe6OelYSkRbDV0tLch8dtvcVk0gsP/
xlmo65EM2qwEZE8yMeD33VBb3JWioQk1idjE9oxEoXttGtLybk6421V5R0x3CBaC
ho8EFHk7v0bzoGCSW0HX5OIx3/8lQLzRYLVJ8hDgGrYS7s1mZgAdHf0eGwIDAQAB
o4ICMjCCAi4wHQYDVR0OBBYEFHMMqdGqIS0v4QETgHW6D63qAxR2MB8GA1UdIwQY
MBaAFG/t8LdhUpCu+sxfaqa0HZ0YQ/G2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYi0zd3QyRlNrSzc2ekY5cXByUWRuUmhEOGJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9mNGY4OTctODJhNy00YTI3LWIxZjEt
Nzg0ZGI5YjFkYTJiLzEvY3d5cDBhb2hMU19oQVJPQWRib1ByZW9ERkhZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9mNGY4OTctODJhNy00YTI3LWIxZjEtNzg0ZGI5YjFkYTJi
LzEvYi0zd3QyRlNrSzc2ekY5cXByUWRuUmhEOGJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/BDkwNzAmBAIAATAgMAwDBAY+bMAD
BAM+bNADBAVTROADBAVbkQADBAK5X6AwDQQCAAIwBwMFAyoCDrgwDQYJKoZIhvcN
AQELBQADggEBAIu2ZJcejIArnMbqLkGU8i4pahyEsPs2cgoZScFGMqUQD8Lzl4Lj
n4mpMxrQbFhEDWHKxX1nc/p9UyOmO7YVQuZxQVB6wHw7VTSOgIhSpc6I9ocsT6CK
wvcqD+kUUMdKm8mLjFKm08fuQDY67xjILLRXyCn506N21M1SM9iDYCPQgZ1q/PVU
Agn4z2IODUbYb+ZZXNke8OnODwpAx5EW37x8Jjlq/69BI3gmJ8jXt79fZbfxHVHu
5KwUrFAoEThSIqlzAEtthvegevPJz/cNPSMvpMO2eKfbo+YJkOFlzRlEo7jwcL1V
1Xoz0cbtsrUO+nbYUikgRytTSwzTIbSjhcw=
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:34:40 2025 by rpki-client