Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/2a55cf-ce4a-498d-bcd7-d8cfe591dd9e/1/RWyi9A_FQTwxrJWxB0PwvKHpiNE.roa
File: RWyi9A_FQTwxrJWxB0PwvKHpiNE.roa (raw, json)
Hash identifier: 6dDSf587bTyDA0boHuJFkE6/rekbeQtLEOImFCsHThI=
Subject key identifier: 45:6C:A2:F4:0F:C5:41:3C:31:AC:95:B1:07:43:F0:BC:A1:E9:88:D1
Certificate issuer: /CN=ce08fe33a5f0ba0b286253505bbfb293220f5816
Certificate serial: 01856B8A1E941D9B72453EFF575A781136B9
Authority key identifier: CE:08:FE:33:A5:F0:BA:0B:28:62:53:50:5B:BF:B2:93:22:0F:58:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zgj-M6XwugsoYlNQW7-ykyIPWBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/2a55cf-ce4a-498d-bcd7-d8cfe591dd9e/1/RWyi9A_FQTwxrJWxB0PwvKHpiNE.roa
Signing time: Sun 01 Jan 2023 04:14:51 +0000
ROA not before: Sun 01 Jan 2023 04:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 28985
IP address blocks: 195.47.211.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:8a:1e:94:1d:9b:72:45:3e:ff:57:5a:78:11:36:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce08fe33a5f0ba0b286253505bbfb293220f5816
Validity
Not Before: Jan 1 04:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=456ca2f40fc5413c31ac95b10743f0bca1e988d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:11:3b:6e:7b:26:ba:02:0d:55:5f:4e:ca:5f:
d1:f9:58:4c:19:7b:5b:6a:ce:ed:db:55:5c:c0:7c:
fe:93:0e:b9:a9:0f:2e:81:20:77:1b:2f:10:d7:00:
ae:f4:97:d1:6a:d5:48:36:4a:48:49:1a:12:c2:73:
92:ac:67:16:7a:24:1e:aa:aa:de:a9:e5:d6:4b:44:
d9:1b:10:55:1d:38:43:24:b9:c5:7c:d2:b1:12:42:
37:db:be:34:9d:52:39:09:e6:7d:53:29:d7:3f:f9:
fb:41:bf:07:a5:62:c5:c3:f8:ec:cc:3e:f6:a4:d7:
da:99:78:38:fc:d1:a4:17:1b:a1:86:dd:01:d8:3c:
a3:8e:b0:2c:40:c3:f9:ee:18:7e:25:ac:4c:55:8f:
2b:5d:4a:92:72:83:1a:d4:26:8d:77:d5:0b:ad:a0:
59:52:d8:1a:82:88:d8:9f:3d:cb:9d:fa:4d:5a:25:
d0:24:6b:bb:27:0d:01:4f:06:34:9a:d6:3f:f3:da:
2f:dd:07:6f:03:80:e5:72:db:b5:68:cd:fa:b7:88:
fe:7c:7e:29:d2:c5:73:b6:b8:80:ed:79:91:ca:4d:
3d:06:42:48:30:91:b3:29:31:d3:06:d6:1c:29:ee:
4a:30:d3:45:1a:24:42:eb:a4:95:e3:7f:4a:24:35:
db:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:6C:A2:F4:0F:C5:41:3C:31:AC:95:B1:07:43:F0:BC:A1:E9:88:D1
X509v3 Authority Key Identifier:
keyid:CE:08:FE:33:A5:F0:BA:0B:28:62:53:50:5B:BF:B2:93:22:0F:58:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zgj-M6XwugsoYlNQW7-ykyIPWBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2a55cf-ce4a-498d-bcd7-d8cfe591dd9e/1/RWyi9A_FQTwxrJWxB0PwvKHpiNE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2a55cf-ce4a-498d-bcd7-d8cfe591dd9e/1/zgj-M6XwugsoYlNQW7-ykyIPWBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.47.211.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:5a:f1:9f:ca:b8:44:4d:ef:5e:d5:fe:35:8c:90:19:6b:e1:
ad:cf:5d:2f:9e:f3:f9:bd:e6:15:aa:d7:3c:03:c8:ea:5a:a9:
f4:d3:ae:19:bd:60:56:22:a7:71:de:27:78:85:39:17:bf:db:
22:33:3c:73:55:e6:60:ff:ad:31:28:0d:7f:cf:15:f6:87:bb:
15:0b:bb:6f:e8:b6:74:e6:5a:3e:7b:f8:94:63:1b:87:26:43:
9b:87:66:33:3d:9b:27:92:62:18:b8:7a:fd:74:dc:77:c6:d4:
5a:de:ee:1b:0d:6e:06:19:b2:7a:d4:48:c1:a9:c9:37:8e:9a:
05:78:74:69:fd:0d:6d:d2:a6:8a:53:2e:79:8b:ea:70:9e:d2:
d2:b6:63:e9:e1:7b:af:f1:12:d1:42:56:bc:31:85:12:d3:5e:
c9:28:d5:5d:86:d8:a6:3b:0a:cd:ca:94:10:b6:1f:0b:64:14:
7c:12:d3:cb:f6:7e:0f:33:62:16:09:ab:8d:4d:a5:2f:55:9f:
0c:21:93:c6:a8:d8:80:e6:6e:c7:d2:2e:46:17:3b:0a:02:84:
f0:c6:a2:d7:ea:4d:03:5d:4e:54:13:2c:75:a1:ee:78:7b:01:
23:b0:c7:fb:48:74:50:46:c7:e8:78:32:89:db:89:79:79:fc:
9a:83:0e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:20:05 2025 by rpki-client