Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/6WMnSSy4idhvnTBLAWr2gKhOyhc.roa
File: 6WMnSSy4idhvnTBLAWr2gKhOyhc.roa (raw, json)
Hash identifier: 7BKvVTk+npdaMQ+FK6zp2KlBV5dz9wKAsiqweIwMSuc=
Subject key identifier: E9:63:27:49:2C:B8:89:D8:6F:9D:30:4B:01:6A:F6:80:A8:4E:CA:17
Certificate issuer: /CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff
Certificate serial: 01856BEEBEEAC700E71B64B626C791248415
Authority key identifier: CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/6WMnSSy4idhvnTBLAWr2gKhOyhc.roa
Signing time: Sun 01 Jan 2023 06:04:46 +0000
ROA not before: Sun 01 Jan 2023 06:04:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201190
IP address blocks: 185.47.54.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ee:be:ea:c7:00:e7:1b:64:b6:26:c7:91:24:84:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff
Validity
Not Before: Jan 1 06:04:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e96327492cb889d86f9d304b016af680a84eca17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c7:df:d3:84:6a:49:43:42:a3:42:84:cd:fe:
24:69:ea:69:6b:d2:fc:b1:ae:69:79:14:7e:66:5e:
66:2b:90:a0:ae:0d:86:bf:e9:ca:5b:ae:48:c9:97:
5a:27:13:63:6f:c2:1b:2a:88:32:e3:88:e7:8f:75:
08:59:e4:9d:e3:ca:88:15:09:f0:99:57:a5:30:25:
67:36:d0:6d:60:35:8f:31:67:f2:d1:d1:8f:d5:17:
6a:df:a5:61:d1:9c:4e:5c:30:6a:61:e9:25:8c:80:
9b:04:eb:b0:a6:b7:15:4e:38:29:e1:56:f7:8f:51:
77:22:74:36:b0:02:67:51:73:48:24:2b:fa:3e:e0:
79:6e:2f:b3:02:94:c5:00:59:bf:25:59:d8:38:82:
04:b9:3d:44:7f:91:9f:2f:c7:98:22:56:c9:69:37:
c6:02:45:e2:7b:47:c5:1e:08:b4:d4:63:ea:80:f9:
ec:b8:05:a2:63:26:21:f7:82:bf:b9:f7:43:e4:7a:
78:b0:9e:d4:7f:8c:6a:79:0d:74:89:cb:2b:0a:39:
73:0f:ef:be:51:bf:d3:cb:aa:81:3c:56:16:0b:ce:
93:7c:dc:44:48:06:5b:69:d8:b7:30:7a:4a:34:ce:
80:9d:10:b7:e2:69:16:3c:05:ca:cc:a4:22:8d:85:
19:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:63:27:49:2C:B8:89:D8:6F:9D:30:4B:01:6A:F6:80:A8:4E:CA:17
X509v3 Authority Key Identifier:
keyid:CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/6WMnSSy4idhvnTBLAWr2gKhOyhc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.47.54.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:74:c6:91:78:e2:46:29:7e:4c:47:c6:dd:8a:b7:c0:01:24:
4f:8c:bf:84:b3:2c:44:08:1f:d4:40:ed:a3:10:2d:f1:85:ea:
5f:67:a1:fb:62:96:8d:33:d5:58:df:66:46:a0:51:e0:15:2a:
0d:a5:60:23:7f:8e:1b:4f:1c:46:f0:89:08:f5:07:d4:8b:25:
00:a7:cb:63:4d:18:a5:07:a2:99:bb:3c:79:65:df:ba:d9:7d:
2c:b0:45:94:dd:6d:b9:e3:f7:8c:ea:05:7b:60:2e:45:df:c9:
78:01:a9:da:1e:f5:10:ad:e4:de:ce:66:db:9d:04:e2:6f:7f:
17:37:f5:2a:03:eb:4c:12:73:e4:e1:03:40:59:67:18:10:50:
d8:d1:16:40:e5:de:e8:2e:12:14:1a:c5:6a:65:90:d1:d4:fc:
f0:10:e0:09:73:76:c5:aa:94:ba:b5:bb:94:d5:a6:23:86:c3:
2c:ee:6a:08:c9:9e:07:78:e4:39:a1:93:33:78:a7:de:a4:98:
34:ce:39:49:3c:ad:11:a6:61:73:20:02:72:27:6e:5a:f7:98:
ab:52:2b:f7:73:ae:f3:15:0a:80:c0:60:86:84:cb:29:38:45:
ed:5b:5f:60:55:13:e0:99:ab:ab:3b:0a:ff:aa:cb:db:14:40:
df:76:52:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:26:02 2025 by rpki-client