Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/WYO1XFmlYlg5pvWjEw8UY98O6O8.roa
File: WYO1XFmlYlg5pvWjEw8UY98O6O8.roa (raw, json)
Hash identifier: flINTn7qPteYI1ovihuqmzPvokBVIMtHm+9za8pFOUQ=
Subject key identifier: 59:83:B5:5C:59:A5:62:58:39:A6:F5:A3:13:0F:14:63:DF:0E:E8:EF
Certificate issuer: /CN=95cae2c37c86630e61afdf8903fe174de8b945be
Certificate serial: 01856E2683CE8773BA2F451A2EB950FA2004
Authority key identifier: 95:CA:E2:C3:7C:86:63:0E:61:AF:DF:89:03:FE:17:4D:E8:B9:45:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lcriw3yGYw5hr9-JA_4XTei5Rb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/WYO1XFmlYlg5pvWjEw8UY98O6O8.roa
Signing time: Sun 01 Jan 2023 16:24:55 +0000
ROA not before: Sun 01 Jan 2023 16:24:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43193
IP address blocks: 37.46.8.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:26:83:ce:87:73:ba:2f:45:1a:2e:b9:50:fa:20:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95cae2c37c86630e61afdf8903fe174de8b945be
Validity
Not Before: Jan 1 16:24:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5983b55c59a5625839a6f5a3130f1463df0ee8ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:b4:4f:34:a5:93:de:60:63:79:87:fc:f5:c5:
34:92:c8:ac:3f:7f:9b:40:97:1d:36:9f:ce:4c:5e:
a3:93:b7:96:42:b5:92:32:cd:8d:6a:1d:2a:f4:1a:
0c:04:d8:89:d1:90:be:2d:c1:45:ae:12:91:c2:d5:
0f:79:48:9d:98:c0:37:6a:69:b3:41:03:63:05:d0:
f8:89:c2:34:2e:2e:b3:52:96:6b:42:6a:c0:36:dc:
9b:1c:36:1e:81:bb:2f:12:d2:fc:cd:b3:a6:94:a3:
66:21:69:93:f4:94:95:9c:bd:6c:57:e2:64:9f:c9:
81:65:5c:90:38:6d:68:39:34:62:96:4d:fa:5a:c7:
cc:f4:53:72:e7:31:ad:cd:12:8f:cd:c8:52:d6:0a:
3f:ab:5e:5e:b6:f0:2b:f5:8f:9e:1e:8a:48:cd:92:
88:8a:d2:99:8c:da:4c:99:58:7f:04:88:0e:31:1c:
4a:da:47:de:67:a5:86:45:09:f9:44:c4:ef:a3:97:
f9:b1:9b:23:5b:c0:4c:04:ad:2f:5a:db:51:4c:77:
5b:a9:bf:90:e5:86:f3:5f:3e:c9:cc:cc:ef:42:05:
54:6d:f1:94:c1:b2:46:3c:f6:79:fa:1a:bb:fe:6b:
0d:0d:ee:11:1c:0a:7c:36:a8:c6:5e:7c:b4:2b:51:
f7:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:83:B5:5C:59:A5:62:58:39:A6:F5:A3:13:0F:14:63:DF:0E:E8:EF
X509v3 Authority Key Identifier:
keyid:95:CA:E2:C3:7C:86:63:0E:61:AF:DF:89:03:FE:17:4D:E8:B9:45:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lcriw3yGYw5hr9-JA_4XTei5Rb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/WYO1XFmlYlg5pvWjEw8UY98O6O8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.46.8.0/22
Signature Algorithm: sha256WithRSAEncryption
a2:dd:52:96:7b:67:31:97:73:b9:5e:7b:12:b9:e5:76:7b:ee:
a5:6d:f4:31:3e:86:67:f6:b8:60:a5:53:41:18:3b:89:53:6e:
8e:a9:7b:9b:98:57:ca:83:bf:aa:ac:f3:65:10:bc:4c:71:cc:
88:76:33:bb:49:00:7e:e8:ce:20:62:ee:a6:30:7d:8d:21:36:
c8:35:83:cc:f7:2c:c1:09:96:1a:d0:b1:ab:f8:6d:a9:20:c6:
4e:96:d7:b6:1a:61:da:94:68:31:72:45:bd:f7:18:1d:c0:14:
d7:74:9b:51:eb:1b:92:d8:4a:de:2f:f6:fe:cd:53:49:41:2d:
d5:fa:dc:fc:4f:77:a1:75:e6:cf:2c:36:4c:8a:2d:6e:13:ee:
75:83:68:77:fc:ce:42:fe:86:83:8a:91:74:e2:c7:68:72:a8:
ab:d6:49:2e:16:cb:89:cd:30:d9:27:83:e8:fe:7a:96:61:a0:
d1:48:7b:74:f2:2c:f7:4f:9f:df:d0:a5:67:94:64:b9:5c:ce:
fb:95:cf:83:7f:da:cf:08:54:e0:e1:ad:bd:61:83:77:3e:af:
c3:d8:a0:09:2d:32:b7:d2:e1:f9:e5:42:23:7d:07:64:8e:fb:
f3:b7:4e:0c:3a:03:ad:a3:1f:59:8e:62:81:5c:24:a2:34:37:
e5:11:9d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:22:57 2025 by rpki-client