Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/8595c8-4834-4d54-a391-312e5b491146/1/wIsvhp2n9OcsLLy7Vo5YKWS-BfI.roa
File: wIsvhp2n9OcsLLy7Vo5YKWS-BfI.roa (raw, json)
Hash identifier: Vdb3HCWBEfFPni2sRIvRgSETTFwCxYfWAW/xQqIjbSk=
Subject key identifier: C0:8B:2F:86:9D:A7:F4:E7:2C:2C:BC:BB:56:8E:58:29:64:BE:05:F2
Certificate issuer: /CN=a186a76a1899dbf9029e1aefd905177bb09d368d
Certificate serial: 0184800295CE37B07D8F798AC0A5537D01E4
Authority key identifier: A1:86:A7:6A:18:99:DB:F9:02:9E:1A:EF:D9:05:17:7B:B0:9D:36:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oYanahiZ2_kCnhrv2QUXe7CdNo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/8595c8-4834-4d54-a391-312e5b491146/1/wIsvhp2n9OcsLLy7Vo5YKWS-BfI.roa
Signing time: Wed 16 Nov 2022 10:36:03 +0000
ROA not before: Wed 16 Nov 2022 10:36:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6830
IP address blocks: 193.5.121.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:80:02:95:ce:37:b0:7d:8f:79:8a:c0:a5:53:7d:01:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a186a76a1899dbf9029e1aefd905177bb09d368d
Validity
Not Before: Nov 16 10:36:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c08b2f869da7f4e72c2cbcbb568e582964be05f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b9:2c:fa:dc:2a:12:b8:3f:b7:80:da:91:e4:
0d:ad:c4:88:7d:c0:15:26:16:16:41:07:a1:27:37:
38:95:50:11:aa:2a:23:2c:fe:51:00:31:82:91:27:
e4:7b:9a:ee:2b:d1:c9:22:35:ea:a5:e6:10:20:f5:
53:98:b9:3e:c9:a9:30:4f:72:a7:1f:96:35:aa:ba:
d5:90:70:60:87:b6:74:b3:c2:66:83:5e:57:2e:4a:
2e:65:38:c3:28:4a:11:b8:e2:c8:58:4d:db:7a:b6:
38:a5:d3:5f:7d:40:0c:e4:73:b5:b9:86:b7:c4:58:
c3:54:36:b0:9e:56:ea:06:6f:ed:98:3f:be:d4:41:
67:0c:9e:86:09:5d:6b:78:ae:f2:6b:5c:5d:86:35:
31:52:2c:e3:c1:bc:7b:96:10:0f:8c:d4:a1:24:fc:
a5:66:85:e4:ec:4e:5d:d8:d9:37:3a:be:5c:6a:d6:
34:3b:94:02:a4:39:be:05:22:2e:71:81:eb:4f:37:
ed:8f:79:e9:05:ef:52:a2:21:f6:d6:63:48:c6:95:
16:94:01:7b:5d:ce:b1:0f:ef:ad:9e:f6:84:e2:1e:
d3:d1:7c:7f:52:b0:6c:7b:90:ee:50:4b:d4:b0:1b:
ab:df:e4:26:05:53:79:20:1d:83:ea:67:e9:25:43:
39:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:8B:2F:86:9D:A7:F4:E7:2C:2C:BC:BB:56:8E:58:29:64:BE:05:F2
X509v3 Authority Key Identifier:
keyid:A1:86:A7:6A:18:99:DB:F9:02:9E:1A:EF:D9:05:17:7B:B0:9D:36:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYanahiZ2_kCnhrv2QUXe7CdNo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/8595c8-4834-4d54-a391-312e5b491146/1/wIsvhp2n9OcsLLy7Vo5YKWS-BfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/8595c8-4834-4d54-a391-312e5b491146/1/oYanahiZ2_kCnhrv2QUXe7CdNo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.5.121.0/24
Signature Algorithm: sha256WithRSAEncryption
48:9b:b0:cf:93:f1:f2:21:9a:06:07:10:90:e1:c6:2b:2f:d7:
fd:15:be:f7:d0:72:37:6b:43:50:2d:ef:ac:df:b0:ad:aa:b1:
a8:e9:72:12:a4:d4:81:2c:5d:7d:43:25:cb:f7:e9:00:a1:1e:
45:fa:0b:2d:52:80:5d:7c:91:c2:86:84:2a:eb:91:c0:82:14:
22:05:15:15:d4:a3:7a:ab:c4:9e:86:16:55:70:22:46:9c:58:
e0:69:32:d4:6f:9e:8e:2b:c9:91:0b:49:c8:14:62:7d:3f:b9:
75:83:ff:db:c6:d5:9e:9c:88:87:f9:3b:4f:39:a0:b3:40:86:
4d:9b:71:9e:0e:1d:f1:d7:3a:d8:5a:1b:3b:75:11:a3:7b:5e:
07:d0:f8:16:f4:28:11:17:07:c2:d7:8f:57:d9:94:d4:a7:5f:
29:f6:0a:b2:32:7a:f6:3e:05:d9:3c:92:cd:f4:64:62:6c:0a:
fd:2b:df:84:02:a8:eb:b1:56:9d:73:df:01:25:f1:79:c4:cd:
8c:dd:38:bf:d3:e0:b3:ec:61:97:8d:c9:f0:57:bc:7d:d5:7e:
4e:d8:72:94:17:93:9d:48:bd:3f:fa:c6:6e:17:5c:a9:b8:0c:
8a:ac:0b:af:4c:df:31:53:e8:dd:77:1f:1c:d7:19:aa:80:6d:
a3:df:7f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:39:40 2025 by rpki-client