Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/wM5sTlzmIvBgwhzoGjEix7aEa_4.roa
File: wM5sTlzmIvBgwhzoGjEix7aEa_4.roa (raw, json)
Hash identifier: yZ9ins0ac5jyxPOM4Lk1vvUZ/8GkdNkyJ+sJgG8mSMU=
Subject key identifier: C0:CE:6C:4E:5C:E6:22:F0:60:C2:1C:E8:1A:31:22:C7:B6:84:6B:FE
Certificate issuer: /CN=941f20add212c0e0e68e3f1ae8ea2a79649f4f4c
Certificate serial: 0185729EE28E262BD7479797FA12A4831FC2
Authority key identifier: 94:1F:20:AD:D2:12:C0:E0:E6:8E:3F:1A:E8:EA:2A:79:64:9F:4F:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lB8grdISwODmjj8a6OoqeWSfT0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/wM5sTlzmIvBgwhzoGjEix7aEa_4.roa
Signing time: Mon 02 Jan 2023 13:14:53 +0000
ROA not before: Mon 02 Jan 2023 13:14:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1930
IP address blocks: 192.67.76.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:9e:e2:8e:26:2b:d7:47:97:97:fa:12:a4:83:1f:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=941f20add212c0e0e68e3f1ae8ea2a79649f4f4c
Validity
Not Before: Jan 2 13:14:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c0ce6c4e5ce622f060c21ce81a3122c7b6846bfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9d:e1:a1:e0:6a:53:f7:fa:89:6d:d6:2c:65:
18:f0:f5:a4:36:41:40:7c:f6:ca:27:2c:87:37:c5:
36:2c:d0:a3:c2:6b:ac:9f:98:e5:c5:69:35:5e:f9:
af:3f:e9:51:29:76:6f:a7:28:0e:3a:d8:b0:5b:1a:
ab:9d:64:97:eb:67:d1:f2:99:bd:58:ad:2d:a0:a3:
e6:25:f9:e5:d0:28:fa:c6:ea:7d:3e:a5:6a:61:d8:
85:dc:4a:a1:97:79:9d:79:44:a7:5e:fe:dd:07:e4:
91:b8:1c:22:87:54:ed:a2:3d:a4:21:fb:d6:83:1a:
02:30:02:82:81:12:75:83:38:c9:dd:d7:05:6e:a5:
29:e0:32:40:ab:16:9a:a6:e2:f5:0b:d9:e2:e3:5c:
06:52:5a:f5:85:b0:ab:97:39:55:d5:b7:5a:e0:a2:
ce:25:ad:81:f5:3c:01:2a:34:6e:07:4a:c5:50:80:
cb:35:39:5b:a9:ef:07:6b:a8:a4:08:05:da:c6:96:
64:77:a5:b1:e9:fb:bd:2d:3d:74:76:69:25:0f:75:
12:69:82:b8:76:47:49:97:3e:44:f1:4d:35:26:0e:
24:ff:e4:c5:7d:e4:3c:ff:28:f1:82:d2:c5:26:67:
7f:c9:be:b5:1e:ea:65:29:f6:42:bd:7a:32:ca:f9:
46:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:CE:6C:4E:5C:E6:22:F0:60:C2:1C:E8:1A:31:22:C7:B6:84:6B:FE
X509v3 Authority Key Identifier:
keyid:94:1F:20:AD:D2:12:C0:E0:E6:8E:3F:1A:E8:EA:2A:79:64:9F:4F:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lB8grdISwODmjj8a6OoqeWSfT0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/wM5sTlzmIvBgwhzoGjEix7aEa_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.67.76.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:8c:20:c7:eb:11:41:b4:b1:e0:43:fa:52:47:ff:5b:e7:cf:
24:13:2b:d6:0d:68:8c:96:8f:b1:5b:8a:61:0b:5c:77:3f:16:
d7:fe:ff:a1:79:a8:d3:dd:3c:4b:ca:a3:af:d8:ae:ed:88:cf:
8f:b9:6a:8e:60:e6:2e:e5:aa:3e:9e:7a:80:42:19:40:39:4e:
52:57:29:aa:3e:67:e5:d7:d9:2b:96:38:13:59:56:d7:68:b0:
7b:bc:83:be:0f:c6:b4:07:4c:44:d4:bf:49:69:0b:19:48:48:
c2:9a:61:4d:2a:98:b7:64:4a:8b:36:ae:9a:88:15:07:0d:f0:
0a:35:46:18:10:2e:a5:bd:e1:38:1b:3b:6e:e3:83:77:b0:0d:
04:e1:4f:ba:d9:41:2e:52:82:08:3d:ad:77:79:a3:94:3f:6e:
da:03:0a:77:f7:2c:46:ee:dd:4b:91:89:cd:b2:9d:bf:ba:37:
19:b0:5a:9d:64:26:ed:99:34:8b:e8:72:86:4e:7f:e1:81:d0:
5a:e1:54:ed:f8:60:d3:56:94:70:36:4e:42:d1:2c:8a:e6:91:
3b:6a:a0:6b:b0:ef:8c:b4:86:48:e2:b9:bf:8a:a0:e2:25:a8:
3e:cc:63:a3:db:2c:dc:2a:0a:25:d1:21:39:a5:72:80:a1:82:
9c:0c:52:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:52:10 2025 by rpki-client