Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/wdLutkBYf7rX-eU4a0lXHCYipYo.roa
File: wdLutkBYf7rX-eU4a0lXHCYipYo.roa (raw, json)
Hash identifier: 9luZFGCMd7wXuRDEgbAV+K9LsPzP/oWpXYF2pIpKcAU=
Subject key identifier: C1:D2:EE:B6:40:58:7F:BA:D7:F9:E5:38:6B:49:57:1C:26:22:A5:8A
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 05705321
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/wdLutkBYf7rX-eU4a0lXHCYipYo.roa
Signing time: Thu 02 Jun 2022 13:16:20 +0000
ROA not before: Thu 02 Jun 2022 13:16:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42831
IP address blocks: 85.239.150.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91247393 (0x5705321)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Jun 2 13:16:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c1d2eeb640587fbad7f9e5386b49571c2622a58a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:85:d1:77:b6:fb:27:42:b7:7a:5b:4c:8c:8d:
c3:54:f8:59:35:93:7e:43:7d:f6:eb:a9:c2:ad:b0:
a5:fc:f0:45:c8:c2:a6:e3:d4:17:ce:67:56:97:4c:
f7:aa:17:8c:00:c8:03:69:57:5d:8b:c2:42:0a:d4:
6e:c1:1a:8a:f0:23:50:60:8d:cc:74:f8:58:4a:63:
de:c4:d1:bd:10:ca:eb:e7:8c:74:0f:73:f6:20:96:
e2:e3:6f:8b:27:42:1a:22:f4:23:13:e2:7c:8b:0b:
cb:3e:41:89:4c:6d:08:53:e9:47:45:22:5e:7a:3f:
c0:ed:20:79:6e:6f:38:af:97:84:a4:35:56:d1:1e:
ab:f5:c9:69:ab:09:f8:92:d3:63:db:2a:57:a3:8a:
a9:45:ea:f9:a6:cd:f1:ec:2e:e7:40:ee:1e:fa:da:
d1:9b:f8:26:e7:a5:06:c3:dc:fe:91:11:bc:8b:70:
b3:a2:7c:d5:80:86:42:6d:53:de:78:a9:7c:d8:ec:
c7:3a:30:d5:65:5b:0e:d2:d4:0f:b7:87:91:4c:a5:
47:1f:d2:f9:d0:89:0d:e7:bb:23:97:f6:2a:82:c4:
e1:4e:88:fd:ee:8c:bd:fd:41:a3:f2:9d:96:74:48:
1f:cd:1e:85:53:a9:d3:ce:78:39:2d:09:3b:f7:63:
50:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:D2:EE:B6:40:58:7F:BA:D7:F9:E5:38:6B:49:57:1C:26:22:A5:8A
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/wdLutkBYf7rX-eU4a0lXHCYipYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.150.0/24
Signature Algorithm: sha256WithRSAEncryption
42:90:77:2a:8a:8f:66:c0:b4:2c:75:ee:f4:63:24:47:9a:e2:
81:d5:e5:35:51:27:81:2e:30:4a:22:ea:5e:a6:65:53:79:c0:
73:8a:60:a5:76:02:e3:f7:cc:a2:78:2c:d0:d8:8d:7d:a2:6a:
00:51:af:d2:14:50:c1:76:a4:a2:c9:0e:fa:28:8c:ea:1a:eb:
76:c4:d5:29:bc:30:a9:61:76:64:0c:0c:88:1f:63:af:82:8a:
87:d7:bd:b1:70:da:99:1c:a2:ff:46:4b:24:82:c1:1a:da:34:
b0:a3:85:05:98:b5:fd:49:5e:95:40:d7:bd:d7:84:95:79:10:
7b:a1:ee:c5:87:c5:72:24:59:fa:1d:42:01:6e:cb:98:7c:2b:
d1:82:d7:05:21:aa:c6:e3:e3:8b:a6:7e:e2:9c:8f:d3:1c:bf:
97:96:ef:84:24:54:ce:26:5e:43:75:60:38:2f:b2:b8:61:00:
03:9c:45:0f:c3:dc:09:c3:ba:59:97:0b:6e:0f:c4:bb:a1:82:
8f:5e:dd:c2:9a:bf:ef:c3:c3:44:4c:8b:e1:03:29:98:f6:eb:
82:71:8c:b0:0c:8f:df:13:66:66:f7:d1:dc:91:f1:c3:4b:84:
24:06:24:3c:bc:76:ef:ba:8d:54:52:42:6a:c3:9f:71:5b:d9:
91:a3:50:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:06:48 2025 by rpki-client