Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/eff18d-5cc4-423f-9518-eb843e17c05e/1/WmeuVqmOsuEte_iak6SLbPfFZS4.roa
File: WmeuVqmOsuEte_iak6SLbPfFZS4.roa (raw, json)
Hash identifier: z2U82rhlBdV1IcoPjoNaqqxsvJPZx7MqaczozuDGc/A=
Subject key identifier: 5A:67:AE:56:A9:8E:B2:E1:2D:7B:F8:9A:93:A4:8B:6C:F7:C5:65:2E
Certificate issuer: /CN=5b693cf1eef5fb0bf72ed5c2e22867d1124af3d8
Certificate serial: 0185735F13E591B351B9ED5DD5731B7E7949
Authority key identifier: 5B:69:3C:F1:EE:F5:FB:0B:F7:2E:D5:C2:E2:28:67:D1:12:4A:F3:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2k88e71-wv3LtXC4ihn0RJK89g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/eff18d-5cc4-423f-9518-eb843e17c05e/1/WmeuVqmOsuEte_iak6SLbPfFZS4.roa
Signing time: Mon 02 Jan 2023 16:44:48 +0000
ROA not before: Mon 02 Jan 2023 16:44:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25424
IP address blocks: 212.111.0.0/19 maxlen: 19
185.157.196.0/22 maxlen: 22
85.92.32.0/19 maxlen: 19
188.244.48.0/20 maxlen: 20
37.9.192.0/21 maxlen: 21
91.109.32.0/21 maxlen: 21
77.92.192.0/19 maxlen: 19
2a00:e580::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:5f:13:e5:91:b3:51:b9:ed:5d:d5:73:1b:7e:79:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b693cf1eef5fb0bf72ed5c2e22867d1124af3d8
Validity
Not Before: Jan 2 16:44:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5a67ae56a98eb2e12d7bf89a93a48b6cf7c5652e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:fa:31:9d:33:26:bc:76:8b:f7:a3:3a:be:ad:
e1:ee:2a:e5:e4:79:72:f3:56:50:df:db:6c:ce:49:
ca:73:35:28:08:a2:bd:47:d8:5d:3d:4f:84:cb:63:
80:84:49:79:ee:c6:bd:c8:4e:23:9c:78:99:bc:52:
94:86:80:6f:71:50:5b:13:9e:8f:d4:a0:8f:fc:54:
f4:97:51:5b:be:fb:c5:f9:79:55:e2:d2:d2:83:2e:
27:04:60:44:26:11:89:35:98:45:b5:82:25:a8:91:
c6:f9:a9:c1:5d:9c:ad:25:9d:3a:96:7c:59:7e:58:
f2:91:7d:98:2e:b3:95:ff:eb:6d:f1:c0:c8:8b:91:
ff:9b:4a:48:27:1c:e9:07:0e:eb:1c:6d:97:87:cf:
0a:21:b6:09:6d:e8:09:f2:19:ac:72:10:19:07:5c:
d2:76:5b:f4:eb:0f:40:09:2d:6e:28:7f:1c:5f:1f:
94:12:d0:dd:36:2e:27:eb:7c:f4:4d:b7:c9:49:a5:
f6:62:67:28:a5:76:fd:f3:ca:0a:44:d8:78:5a:3b:
bb:ec:90:5d:6c:97:cd:a6:f5:28:5d:7d:8d:6e:95:
0d:73:d7:59:35:a3:2a:be:fe:bd:84:6c:43:0e:94:
4d:88:5b:83:af:ac:38:3b:65:0c:a6:d7:6b:8a:45:
1e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:67:AE:56:A9:8E:B2:E1:2D:7B:F8:9A:93:A4:8B:6C:F7:C5:65:2E
X509v3 Authority Key Identifier:
keyid:5B:69:3C:F1:EE:F5:FB:0B:F7:2E:D5:C2:E2:28:67:D1:12:4A:F3:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2k88e71-wv3LtXC4ihn0RJK89g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/eff18d-5cc4-423f-9518-eb843e17c05e/1/WmeuVqmOsuEte_iak6SLbPfFZS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/eff18d-5cc4-423f-9518-eb843e17c05e/1/W2k88e71-wv3LtXC4ihn0RJK89g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.9.192.0/21
77.92.192.0/19
85.92.32.0/19
91.109.32.0/21
185.157.196.0/22
188.244.48.0/20
212.111.0.0/19
IPv6:
2a00:e580::/29
Signature Algorithm: sha256WithRSAEncryption
94:e7:71:f1:93:4f:5f:1c:8f:0d:c5:a8:98:08:cb:96:0c:0d:
ea:18:2d:ab:6d:04:6b:c6:ed:6b:fb:65:79:8f:e0:79:13:b8:
aa:10:a1:27:7d:14:03:25:71:97:73:b3:b8:f5:30:db:6b:d8:
d1:8c:98:bd:78:03:0f:3f:b9:09:18:70:f0:82:09:20:96:21:
30:9b:5d:43:73:50:25:1d:f1:f2:ba:e1:70:fe:06:7d:22:53:
4b:71:27:06:6b:81:1a:1d:46:b2:f0:75:7c:45:70:7b:0f:5b:
70:5c:61:98:4d:05:a8:02:4c:8f:82:3b:4e:14:2c:3b:8f:b3:
3c:51:e9:b3:4d:59:94:03:86:e1:99:71:2f:7d:9e:83:56:ce:
25:7d:7a:d9:88:44:7c:9a:7a:13:a7:51:37:07:22:6f:f8:49:
6f:cd:50:48:47:71:b9:ac:f3:34:2e:73:3e:a7:85:04:e2:55:
50:8e:ee:ac:02:c7:0d:d9:75:da:2e:8d:a1:55:50:1e:76:aa:
56:c7:bf:fe:4f:b9:70:00:dc:f1:4a:5c:8d:ba:7e:cc:11:03:
94:8b:3c:9c:69:23:d7:d5:55:95:27:10:88:8d:12:93:b8:85:
40:6a:02:f9:9d:3a:d1:6d:d5:48:14:00:67:ab:da:91:2b:25:
c2:5d:1e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:58:40 2025 by rpki-client