Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/TkVX5XKkw1lOYh2gDT02xgc6yqs.roa
File: TkVX5XKkw1lOYh2gDT02xgc6yqs.roa (raw, json)
Hash identifier: 9h1PXQUiQQOC+1sk6qI51i1Y2fcTIHME/K4LA6ynX7g=
Subject key identifier: 4E:45:57:E5:72:A4:C3:59:4E:62:1D:A0:0D:3D:36:C6:07:3A:CA:AB
Certificate issuer: /CN=0c5140282591f9912f9639ee1412b6d1dcff0861
Certificate serial: 018843683C7A795A7B051CC68885F686AA42
Authority key identifier: 0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/TkVX5XKkw1lOYh2gDT02xgc6yqs.roa
Signing time: Mon 22 May 2023 12:21:24 +0000
ROA not before: Mon 22 May 2023 12:21:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205473
IP address blocks: 188.72.0.0/24 maxlen: 24
188.72.1.0/24 maxlen: 24
188.72.51.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:43:68:3c:7a:79:5a:7b:05:1c:c6:88:85:f6:86:aa:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c5140282591f9912f9639ee1412b6d1dcff0861
Validity
Not Before: May 22 12:21:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4e4557e572a4c3594e621da00d3d36c6073acaab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:46:30:2e:a0:8c:64:a8:74:0e:76:8d:be:f0:
ed:48:3a:55:d3:62:c6:c0:ad:c5:bf:18:24:13:95:
ef:b2:1f:cd:df:95:65:11:f5:b3:23:1d:34:1b:25:
24:49:75:f3:1b:e5:69:b9:ea:f9:b3:e2:e2:57:32:
93:80:e0:82:9d:1f:68:d1:9e:d5:79:ca:5c:09:c0:
ce:46:39:91:e6:10:2b:54:75:fe:bc:43:13:6e:4b:
d2:a3:72:cc:55:da:e2:66:ff:27:90:ad:8a:db:51:
64:27:45:db:6d:ac:ca:80:bf:36:b2:bc:e5:01:ed:
f6:9a:be:61:c3:d8:46:b1:5e:ef:53:15:87:22:6d:
f6:d8:71:55:40:b2:50:44:c8:82:2a:7f:d7:f7:b3:
06:42:d0:eb:11:0d:4d:6c:26:90:55:01:69:b8:a2:
06:17:5b:e9:95:d4:d3:99:8f:59:7f:86:ed:11:a8:
06:1d:7c:65:ef:4c:b9:e1:ba:95:e0:7b:a1:41:8b:
7f:73:e3:5c:fa:45:58:8a:64:25:43:c8:eb:55:6d:
5e:35:1e:d6:90:60:f8:14:06:21:a0:49:a8:cb:86:
da:50:0f:10:bf:30:87:67:4b:d3:02:0f:76:a4:e6:
0f:88:67:40:95:82:8c:36:de:e6:d5:df:d4:43:71:
12:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:45:57:E5:72:A4:C3:59:4E:62:1D:A0:0D:3D:36:C6:07:3A:CA:AB
X509v3 Authority Key Identifier:
keyid:0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/TkVX5XKkw1lOYh2gDT02xgc6yqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.72.0.0/23
188.72.51.0/24
Signature Algorithm: sha256WithRSAEncryption
34:4d:e3:da:10:93:cf:dc:e1:4b:d6:25:8d:be:0e:7d:1f:be:
74:6f:ec:9e:28:1d:76:ae:12:07:c3:5e:32:24:13:b7:55:d1:
76:92:01:eb:f6:4d:4e:73:9f:5c:93:e5:62:0c:e1:39:06:e1:
ef:b1:ea:55:86:c0:2a:68:8e:ef:e0:e5:df:1e:e4:62:4b:29:
3c:9a:4f:ae:f6:d8:1a:c7:3f:7a:f2:16:7c:f6:8b:dd:67:ba:
26:ea:42:28:4e:75:21:64:c0:3d:73:9e:58:a6:10:1c:8f:da:
c7:67:b2:82:89:4b:20:32:ce:bb:b1:f9:d7:11:6d:89:51:07:
f4:de:06:7e:7d:22:73:a9:67:65:4f:57:38:8e:f8:f8:b9:ef:
da:21:3b:97:f0:e6:f2:ba:29:c7:85:4d:6f:46:06:19:9e:d2:
bc:a7:49:4d:59:5d:ab:a7:bd:9b:c1:b9:bb:98:84:3c:2d:df:
78:2d:cc:ae:00:8c:c3:74:e3:ee:c8:96:7f:16:f4:68:b3:d9:
28:4b:59:57:22:2b:72:b8:79:b0:c2:cd:1d:6d:e9:b2:1b:eb:
44:73:c5:f9:07:b2:8e:ab:8a:5d:3a:d7:17:fa:42:55:d4:3d:
b3:98:6f:b8:84:e2:ca:30:9c:b3:57:c5:1e:c6:d4:ee:c8:e7:
6f:ba:30:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:16:32 2025 by rpki-client