Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/W2YMFsApdz9QJXfTd5byw8MT4jA.roa
File: W2YMFsApdz9QJXfTd5byw8MT4jA.roa (raw, json)
Hash identifier: qMac/86nIpNDp9LJxL9FyPw9uWqdxO9hfd78+CwbT4c=
Subject key identifier: 5B:66:0C:16:C0:29:77:3F:50:25:77:D3:77:96:F2:C3:C3:13:E2:30
Certificate issuer: /CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f
Certificate serial: 08BCFE93
Authority key identifier: 32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/W2YMFsApdz9QJXfTd5byw8MT4jA.roa
Signing time: Sat 09 Apr 2022 09:57:51 +0000
ROA not before: Sat 09 Apr 2022 09:57:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49581
IP address blocks: 45.155.76.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146603667 (0x8bcfe93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f
Validity
Not Before: Apr 9 09:57:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5b660c16c029773f502577d37796f2c3c313e230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b8:27:ec:0f:44:a7:c0:15:b0:bc:4f:bd:0c:
88:4f:08:07:6c:76:28:47:d7:f0:c0:5f:9f:bb:08:
ff:e3:49:90:c3:73:f1:19:8d:24:1b:3d:9b:23:9e:
cc:94:15:f3:0d:01:09:6a:67:3c:b6:98:44:f1:e7:
d9:f7:40:be:a7:65:f6:83:57:df:18:27:c1:e3:d7:
f3:62:d9:e3:2b:36:0c:60:7e:9d:c8:70:55:14:27:
8f:eb:97:95:9e:d7:fe:c8:50:c4:34:85:65:30:cc:
37:75:a4:c7:84:b4:c5:af:37:a1:74:e6:8e:0a:66:
a7:0e:c9:41:31:66:8c:6b:8b:54:60:77:48:0d:f5:
56:25:ac:3a:5a:9a:c8:de:91:ba:55:15:f4:b7:2e:
b7:29:0c:76:6b:3e:b0:34:9a:10:48:d6:ed:d7:0d:
fc:5a:1c:bb:78:7b:f1:72:b3:fa:31:b2:f2:ec:40:
00:b1:39:6e:9a:59:0f:2e:e8:de:b7:c3:ae:6e:2c:
a2:fa:44:27:1b:94:50:d7:b1:37:9d:08:3d:3b:46:
68:d8:40:7b:ed:90:8b:c8:3f:a6:26:5d:90:8d:db:
58:ed:92:2e:32:5e:16:61:3b:9b:2f:31:5e:ee:80:
6a:40:00:1f:94:d4:b6:a3:81:c1:4f:cc:bd:96:e8:
e4:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:66:0C:16:C0:29:77:3F:50:25:77:D3:77:96:F2:C3:C3:13:E2:30
X509v3 Authority Key Identifier:
keyid:32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/W2YMFsApdz9QJXfTd5byw8MT4jA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.76.0/24
Signature Algorithm: sha256WithRSAEncryption
06:f9:5d:2f:98:96:ff:84:e9:fb:87:72:be:42:0e:25:11:4a:
0b:f2:bb:33:2d:25:26:b4:7e:89:fb:18:d5:95:f8:fd:a1:70:
88:5d:81:6c:af:e9:47:05:0c:21:0b:dd:d6:c6:d9:20:29:d9:
2a:4c:bf:1a:1c:48:1d:7d:c3:7b:23:39:f4:9f:e8:b1:4b:a4:
d6:d1:ee:a2:8f:15:74:c1:e3:cd:3d:16:a4:42:3b:2f:99:bb:
7a:79:c6:89:f3:3b:fa:96:3c:28:29:e8:ff:d3:43:7c:10:af:
4a:3d:54:7c:17:40:5c:20:56:c2:97:1f:92:fa:2a:2b:60:a8:
83:9f:de:bc:09:eb:fb:a2:53:1b:53:ea:c0:26:f9:60:1e:8e:
38:7f:a3:37:7a:9f:55:f3:7d:5f:c4:bf:8f:79:03:a8:6f:18:
73:3c:7c:fe:61:c1:bf:47:39:93:0f:e0:c5:0a:76:7e:8a:59:
99:5d:35:2e:92:66:b0:2b:9e:14:d6:4e:7d:5d:13:4e:3f:92:
45:90:bd:f7:b4:eb:f0:03:fb:dd:d9:bf:33:76:ad:1b:8c:79:
a7:9a:d4:ee:c3:48:0c:1d:3f:2f:eb:1b:d2:25:09:a2:0f:7e:
44:24:03:21:a4:28:41:8d:5a:d1:bd:0f:98:fa:6f:dc:69:bd:
c4:45:64:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:10:28 2025 by rpki-client