Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/woMh0LrA5duurOzkUrui-kswg-w.roa
File: woMh0LrA5duurOzkUrui-kswg-w.roa (raw, json)
Hash identifier: huzB95NTMv4jgzr/NIlER/CximJiFr8Q9dmXRr5RAQs=
Subject key identifier: C2:83:21:D0:BA:C0:E5:DB:AE:AC:EC:E4:52:BB:A2:FA:4B:30:83:EC
Certificate issuer: /CN=ad9d45f0292d312fd060a2740bd1e52750bb8c25
Certificate serial: 018571150DA35063AA4E00FC2D29658394F0
Authority key identifier: AD:9D:45:F0:29:2D:31:2F:D0:60:A2:74:0B:D1:E5:27:50:BB:8C:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/woMh0LrA5duurOzkUrui-kswg-w.roa
Signing time: Mon 02 Jan 2023 06:04:43 +0000
ROA not before: Mon 02 Jan 2023 06:04:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207496
IP address blocks: 195.162.6.0/23 maxlen: 23
195.177.194.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:15:0d:a3:50:63:aa:4e:00:fc:2d:29:65:83:94:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad9d45f0292d312fd060a2740bd1e52750bb8c25
Validity
Not Before: Jan 2 06:04:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c28321d0bac0e5dbaeacece452bba2fa4b3083ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:56:bf:69:8f:e8:40:0c:04:f4:eb:a2:89:64:
33:4b:0e:90:23:40:3d:4c:d4:01:95:15:bd:40:50:
f4:09:36:f2:8e:b9:7a:cf:4b:49:01:66:f7:46:ab:
2d:36:d6:5e:36:3b:a2:30:25:75:4c:a8:14:6b:2d:
2e:a8:b0:b1:1d:51:aa:e8:31:c8:db:b5:2c:1e:19:
43:99:e2:84:69:10:76:e9:6e:0c:fe:1d:f2:ab:7f:
f2:8b:d4:26:a9:99:df:cc:9f:43:fd:b3:db:b0:df:
44:a7:66:a6:2d:f3:ed:50:f3:b3:d3:26:d1:bc:4f:
95:7d:dd:c7:e2:7b:37:8c:80:05:fb:27:82:70:e1:
8e:4c:9f:6a:fd:96:64:a9:ad:d6:25:66:ea:cc:76:
0f:53:33:c8:3e:66:2f:8c:4d:05:b5:59:b2:43:6d:
ee:c7:b6:98:af:17:f9:ed:cf:39:0a:32:31:15:f5:
12:b3:6a:da:fd:5c:64:f2:1d:f9:a7:5e:5c:cb:00:
8f:f2:8c:82:1b:0f:5d:97:bf:be:dc:7c:13:ff:9d:
8d:86:4a:cc:62:99:52:2b:ab:17:b9:20:c4:25:1c:
36:f5:00:92:22:ea:3d:2b:5c:e7:e8:9a:d5:61:c2:
49:ef:68:0d:94:10:65:61:43:e7:e1:50:56:85:98:
3c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:83:21:D0:BA:C0:E5:DB:AE:AC:EC:E4:52:BB:A2:FA:4B:30:83:EC
X509v3 Authority Key Identifier:
keyid:AD:9D:45:F0:29:2D:31:2F:D0:60:A2:74:0B:D1:E5:27:50:BB:8C:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/woMh0LrA5duurOzkUrui-kswg-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.162.6.0/23
195.177.194.0/23
Signature Algorithm: sha256WithRSAEncryption
9d:d2:7a:b4:53:fd:6e:7e:fe:98:af:36:22:08:59:4b:aa:2a:
c8:29:0a:d3:9d:4b:8d:71:e8:d2:91:43:9e:82:71:b0:3b:3f:
2a:c8:c5:a6:2f:4c:7b:15:24:c4:9e:44:03:42:23:ae:e8:92:
76:ec:dd:23:94:e5:4b:bb:0d:72:89:0d:b4:d7:6d:f6:d4:72:
ed:90:4b:a7:ce:4a:47:6a:2c:d4:32:03:47:c7:e8:00:3c:4f:
13:39:9c:c3:49:55:0d:8f:23:7b:8c:8f:35:10:fe:b9:ca:bd:
ea:d5:e0:8a:f3:f3:ea:77:90:2c:5a:72:30:34:9c:20:4b:3f:
1f:11:c8:0b:bc:90:c8:03:e5:bf:e6:79:b7:db:e7:b7:97:ef:
9c:98:c0:a6:52:91:30:5b:62:bf:67:d1:10:16:1c:fb:18:5c:
89:84:76:1c:92:f1:b0:3d:3c:5b:c0:bb:74:f6:7b:68:81:ad:
c5:50:13:20:7b:0d:60:46:02:18:17:23:63:e3:d5:26:0f:38:
de:c4:56:06:1a:ad:73:f9:4a:dd:25:2d:45:e5:88:15:6d:1f:
82:d7:3f:1d:c1:01:62:ff:f5:6c:0e:fd:39:60:17:22:4f:54:
f4:62:da:4e:50:0a:fd:8d:87:86:44:62:44:b5:2c:8f:92:29:
6a:9f:d2:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:25:06 2025 by rpki-client