Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/0ac77f-dce6-4eb2-808a-07203cd816b8/1/ywTClYKOOb7pKHKKUb_0xXj-mGE.roa
File: ywTClYKOOb7pKHKKUb_0xXj-mGE.roa (raw, json)
Hash identifier: VzJVlvpZZRFIa3JXe/mGN7N6pTyGpOeexMengaJT9fs=
Subject key identifier: CB:04:C2:95:82:8E:39:BE:E9:28:72:8A:51:BF:F4:C5:78:FE:98:61
Certificate issuer: /CN=175ad33d4f6a4d0539c2770e2b4fbba94fcf1f1d
Certificate serial: 01856D8AD8D2FC22C704AE268ABB047B6703
Authority key identifier: 17:5A:D3:3D:4F:6A:4D:05:39:C2:77:0E:2B:4F:BB:A9:4F:CF:1F:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1rTPU9qTQU5wncOK0-7qU_PHx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/0ac77f-dce6-4eb2-808a-07203cd816b8/1/ywTClYKOOb7pKHKKUb_0xXj-mGE.roa
Signing time: Sun 01 Jan 2023 13:34:53 +0000
ROA not before: Sun 01 Jan 2023 13:34:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44884
IP address blocks: 176.103.208.0/22 maxlen: 22
195.216.210.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:8a:d8:d2:fc:22:c7:04:ae:26:8a:bb:04:7b:67:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=175ad33d4f6a4d0539c2770e2b4fbba94fcf1f1d
Validity
Not Before: Jan 1 13:34:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cb04c295828e39bee928728a51bff4c578fe9861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:32:37:76:59:b0:21:1c:e1:ae:08:87:65:3e:
fe:fd:b2:24:8e:4a:12:6e:cf:9d:87:4d:7a:ee:38:
02:f4:c6:d5:70:6b:16:e7:15:52:78:7a:7a:a7:7e:
21:3d:3f:bc:f8:e4:06:2b:a6:3d:1d:fc:d4:96:0e:
1a:d5:6a:dd:69:c6:79:b1:fc:3c:52:9f:bd:d8:ae:
2a:4d:77:76:74:b6:d5:f0:3c:ae:cd:af:6f:0c:14:
80:35:73:6f:0a:06:04:c7:c3:e8:bc:c5:75:1d:14:
50:9d:e0:c3:13:86:95:99:86:ed:42:96:bc:b1:4d:
5a:b8:d2:96:b0:43:86:ca:1d:fb:0c:c0:c1:5e:f4:
37:72:04:77:18:46:6f:c8:cd:12:fd:a6:0b:18:e3:
71:8a:33:e4:fd:a6:38:97:81:de:b6:02:83:06:57:
7d:23:85:9e:15:f9:3a:0f:24:7a:b8:a2:87:4a:ee:
c4:5f:ed:c8:2d:b1:bc:a3:4d:8f:8f:ce:d9:7c:a1:
24:cd:35:40:43:5c:fa:b6:2e:29:97:1f:ff:9e:a7:
9d:e7:da:7f:ce:40:94:66:ff:51:87:7c:d3:4e:9e:
56:12:e8:48:46:d6:26:80:1f:40:8e:c1:76:0b:65:
c5:83:e5:67:82:53:7b:3e:20:46:e8:bb:2d:43:fe:
49:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:04:C2:95:82:8E:39:BE:E9:28:72:8A:51:BF:F4:C5:78:FE:98:61
X509v3 Authority Key Identifier:
keyid:17:5A:D3:3D:4F:6A:4D:05:39:C2:77:0E:2B:4F:BB:A9:4F:CF:1F:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1rTPU9qTQU5wncOK0-7qU_PHx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/0ac77f-dce6-4eb2-808a-07203cd816b8/1/ywTClYKOOb7pKHKKUb_0xXj-mGE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/0ac77f-dce6-4eb2-808a-07203cd816b8/1/F1rTPU9qTQU5wncOK0-7qU_PHx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.103.208.0/22
195.216.210.0/23
Signature Algorithm: sha256WithRSAEncryption
74:4f:77:ce:36:62:f3:bc:8d:70:02:dc:b5:d1:ec:da:ea:2d:
7e:4b:02:a0:8c:0c:9f:33:ab:47:30:32:8c:fd:ea:ad:bf:6c:
3b:9b:b9:a4:ad:4a:f8:58:f5:b3:c7:54:73:74:ed:b6:f0:d8:
e1:db:e0:67:5a:d9:a2:8d:f1:d8:80:51:e1:13:c9:95:28:26:
a5:48:36:e5:74:43:50:5a:8b:83:45:67:31:ad:f1:5a:60:4f:
f4:a4:9f:fd:99:17:b3:43:06:cb:c1:70:02:a5:99:7f:23:7c:
7e:38:90:04:ac:ca:be:ec:50:90:61:b4:3b:41:26:18:13:83:
25:9e:98:84:37:24:9e:46:12:39:03:24:e7:2f:63:00:d9:45:
d9:a6:29:2d:ce:77:13:c4:69:5b:8b:d2:e1:58:22:be:f7:65:
c4:b3:c0:ec:d6:ea:59:9c:2b:7c:7b:20:ca:12:c3:69:c7:25:
d5:25:a4:55:84:dc:60:cd:8d:a6:48:67:18:cd:d3:48:14:e1:
e5:a4:27:d8:d9:c7:6e:f9:ae:ab:64:b6:db:d9:42:43:99:7e:
df:cb:4f:1d:fd:97:bf:c6:fa:0a:95:e9:cf:b4:b6:39:00:bb:
56:d9:1c:31:68:41:06:41:ff:37:2e:b9:60:a5:aa:ea:bb:38:
8d:79:96:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:20:18 2025 by rpki-client