Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/WyqGqs9gHgL1hMdq83M4P0QQrS0.roa
File: WyqGqs9gHgL1hMdq83M4P0QQrS0.roa (raw, json)
Hash identifier: uJ4gS0E8RtjXZy89LXwu68Q5xb/Er0gbWs+2yUw15UQ=
Subject key identifier: 5B:2A:86:AA:CF:60:1E:02:F5:84:C7:6A:F3:73:38:3F:44:10:AD:2D
Certificate issuer: /CN=0c5140282591f9912f9639ee1412b6d1dcff0861
Certificate serial: 018B6B3596B320C83AF8774C3915F37E9754
Authority key identifier: 0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/WyqGqs9gHgL1hMdq83M4P0QQrS0.roa
Signing time: Thu 26 Oct 2023 08:59:15 +0000
ROA not before: Thu 26 Oct 2023 08:59:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201749
IP address blocks: 188.72.56.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:6b:35:96:b3:20:c8:3a:f8:77:4c:39:15:f3:7e:97:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c5140282591f9912f9639ee1412b6d1dcff0861
Validity
Not Before: Oct 26 08:59:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5b2a86aacf601e02f584c76af373383f4410ad2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f9:75:77:17:c0:96:8f:f9:96:97:d0:de:a9:
f4:b3:93:ba:84:aa:eb:8f:c9:36:cb:37:ba:7b:4b:
c7:6f:60:a9:74:b6:7e:96:bf:0c:a7:0c:e8:82:6f:
82:95:e1:c0:71:bd:a5:9c:26:40:61:5d:dd:eb:df:
76:4a:cd:b1:44:7c:01:0f:9c:0e:5b:13:88:90:88:
7b:7a:8e:1e:ff:9e:c5:9c:98:bb:c8:3b:ba:b5:de:
a3:9a:f3:d6:ef:de:0e:2c:90:c2:72:77:54:b6:f2:
fe:00:ff:d7:2a:6f:a7:db:ed:27:b5:d1:75:52:c4:
cc:82:24:37:a2:0b:ab:4a:e2:f4:26:00:5f:9f:44:
4e:15:6d:fe:3c:99:e4:0a:33:f1:3b:a2:f8:b3:cb:
6c:38:5b:8e:25:0b:cb:17:27:b4:b4:73:12:49:7d:
a3:17:25:fc:01:3e:19:7f:5d:56:1f:53:d8:3f:80:
ab:02:5b:48:8d:24:0f:1a:44:c6:52:26:f5:fd:0f:
1f:da:3b:84:98:74:9f:d0:fe:dd:ab:8c:f1:49:ac:
ad:9c:5e:ed:f8:fe:33:04:14:69:16:90:b2:7e:7f:
2d:fe:ee:45:ce:d7:44:f6:be:95:fb:0a:62:2e:3b:
a8:db:b0:85:05:66:a2:99:43:03:a0:4a:8a:34:49:
53:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:2A:86:AA:CF:60:1E:02:F5:84:C7:6A:F3:73:38:3F:44:10:AD:2D
X509v3 Authority Key Identifier:
keyid:0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/WyqGqs9gHgL1hMdq83M4P0QQrS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.72.56.0/24
Signature Algorithm: sha256WithRSAEncryption
83:5c:ed:ea:b1:0a:fd:df:77:15:04:92:11:79:50:a0:f2:40:
f0:43:41:25:7a:5e:de:20:07:93:f2:c0:b3:a3:c2:8a:69:5b:
5a:65:72:79:2e:5a:22:c5:81:ce:e1:2f:ac:4d:a9:9c:19:47:
25:a2:49:ae:2f:e2:63:5e:61:08:94:b3:39:6b:1c:be:9e:cb:
a5:d3:bd:5a:80:57:2e:64:2c:ad:a7:55:e2:d6:a3:ef:f5:40:
99:c8:2b:96:2a:4b:73:e0:83:e6:94:a4:90:dd:ae:99:92:3f:
42:e7:e5:fe:b9:a5:f4:a9:b5:1f:f4:3e:e6:b9:86:30:d5:0d:
e5:b6:aa:cc:33:af:5b:38:f0:25:6a:80:a9:91:8d:ca:f2:b7:
55:4f:c7:cf:be:46:47:ef:d1:b2:e5:74:0f:70:73:c6:70:fd:
fc:14:c9:d1:4b:a0:b2:7e:a6:f0:91:8a:40:db:b5:19:9a:0d:
fd:93:ca:51:7e:6a:e0:30:e1:19:3e:3d:56:31:2a:c5:5b:40:
59:46:5e:1b:f3:89:18:76:df:64:0e:a2:d6:50:d9:70:90:62:
44:d2:b3:03:54:21:53:13:b0:75:76:49:95:9e:d5:5d:1c:69:
0b:11:b9:47:29:d1:97:6b:1a:c6:5c:f8:8e:25:a1:f3:e2:db:
6b:ad:57:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 01:28:47 2025 by rpki-client