Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/Ywxyd3G6fjaAQRgGMfv0zqcE6Is.roa
File: Ywxyd3G6fjaAQRgGMfv0zqcE6Is.roa (raw, json)
Hash identifier: UVnNg5N+Sr6rx+z0zuUyp5TBaYcggoIxkcTaqHVcoXw=
Subject key identifier: 63:0C:72:77:71:BA:7E:36:80:41:18:06:31:FB:F4:CE:A7:04:E8:8B
Certificate issuer: /CN=e6dae3efe0a36797da43cbd58f6dff99c3bbdd8d
Certificate serial: 0AED8D89
Authority key identifier: E6:DA:E3:EF:E0:A3:67:97:DA:43:CB:D5:8F:6D:FF:99:C3:BB:DD:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5trj7-CjZ5faQ8vVj23_mcO73Y0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/Ywxyd3G6fjaAQRgGMfv0zqcE6Is.roa
Signing time: Sat 01 Jan 2022 15:06:32 +0000
ROA not before: Sat 01 Jan 2022 15:06:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15474
IP address blocks: 130.208.0.0/16 maxlen: 16
2a00:c88::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 183340425 (0xaed8d89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6dae3efe0a36797da43cbd58f6dff99c3bbdd8d
Validity
Not Before: Jan 1 15:06:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=630c727771ba7e368041180631fbf4cea704e88b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:87:3d:41:bf:b5:a8:4d:ce:9d:72:5c:b0:c2:
ca:86:54:df:10:dd:e0:18:dc:12:94:22:8c:b0:f0:
41:28:b9:af:a1:dd:19:76:2b:ad:3f:a6:5c:9b:37:
09:cd:e4:1d:2d:a6:2f:e6:67:b6:ff:2b:bb:9b:f2:
d3:26:96:55:a6:98:04:85:14:4b:a2:26:30:64:09:
44:61:ed:c9:4c:b0:75:ce:01:00:f5:2f:26:f6:ff:
9a:5e:7c:1c:f2:37:78:16:70:d0:68:1d:6e:d6:ea:
ef:32:15:68:24:72:6b:1e:9a:61:7d:d9:fa:53:4f:
60:9c:cb:2e:9a:29:d4:2f:e5:4e:8d:a5:a9:7e:23:
20:9e:87:5e:47:96:de:ba:b8:1f:a5:30:5c:b5:d8:
a8:b2:ab:10:fe:46:0f:c4:a5:06:b8:e9:68:37:48:
95:70:87:92:92:1c:e3:1f:57:6e:01:7b:63:2c:19:
d1:c1:50:56:0c:4c:4b:d3:2c:d6:80:f4:0f:cc:34:
14:b4:28:10:34:14:b3:3b:18:65:33:12:b6:a4:4d:
b5:b7:cc:e3:41:52:4c:22:06:3a:c6:c5:97:80:74:
10:e9:44:08:f0:3e:30:46:ef:ba:b5:ad:be:1a:be:
8b:3e:69:05:ed:1a:b0:c4:1a:b6:37:64:27:9a:16:
e6:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:0C:72:77:71:BA:7E:36:80:41:18:06:31:FB:F4:CE:A7:04:E8:8B
X509v3 Authority Key Identifier:
keyid:E6:DA:E3:EF:E0:A3:67:97:DA:43:CB:D5:8F:6D:FF:99:C3:BB:DD:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5trj7-CjZ5faQ8vVj23_mcO73Y0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/Ywxyd3G6fjaAQRgGMfv0zqcE6Is.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/5trj7-CjZ5faQ8vVj23_mcO73Y0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.208.0.0/16
IPv6:
2a00:c88::/32
Signature Algorithm: sha256WithRSAEncryption
87:f5:cc:8a:96:f7:61:1c:23:0c:45:0d:db:32:ed:08:39:b7:
6a:e3:ac:e4:77:01:e4:a0:7c:6e:22:d0:0e:f6:22:db:8f:a8:
09:e8:7e:75:d0:1b:05:2a:f2:5e:21:3e:9b:3a:cc:06:9e:6e:
b0:75:1c:3d:cd:e8:5d:f8:50:60:51:7a:9a:50:a6:ea:bf:18:
ae:a7:b0:d0:bc:ce:57:6c:be:b5:fb:e2:a3:a0:cb:11:87:e3:
87:42:b0:0b:96:81:6e:24:f3:18:86:a3:8d:0d:67:98:9e:c8:
8d:c3:70:ad:96:b3:4c:ac:94:ee:a2:9f:7f:e3:2f:e8:ff:19:
bb:7d:ba:3f:54:91:2d:22:59:03:f1:95:b6:23:9d:62:17:81:
2c:51:90:06:57:c9:de:8a:b5:2f:60:c1:98:b2:76:97:7d:49:
77:ad:78:03:56:e5:36:f2:83:29:58:88:d7:28:78:61:5e:d5:
a9:c7:9a:9e:5d:94:48:22:c4:b0:b4:f4:34:09:02:04:65:68:
62:71:ef:40:2b:14:bf:0d:0f:5d:26:02:18:82:1d:59:99:aa:
d7:92:16:23:ce:c9:4e:dd:a5:20:9a:4d:68:58:16:ff:00:24:
6a:76:ce:32:01:7d:e1:fc:d0:3e:05:27:b7:64:d2:69:96:8b:
14:07:18:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:06:40 2025 by rpki-client