Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/WuCZi9GPXJ_c74ismqppa-RO-Us.roa
File: WuCZi9GPXJ_c74ismqppa-RO-Us.roa (raw, json)
Hash identifier: B5yL3TZ10OUVTROAeqtvQQi8NPfc59Pl8CU8Bn71bYc=
Subject key identifier: 5A:E0:99:8B:D1:8F:5C:9F:DC:EF:88:AC:9A:AA:69:6B:E4:4E:F9:4B
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 0189CFEC06069160C71B96D08A5BCF7E0245
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/WuCZi9GPXJ_c74ismqppa-RO-Us.roa
Signing time: Mon 07 Aug 2023 12:14:58 +0000
ROA not before: Mon 07 Aug 2023 12:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6830
IP address blocks: 159.148.58.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:cf:ec:06:06:91:60:c7:1b:96:d0:8a:5b:cf:7e:02:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Aug 7 12:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5ae0998bd18f5c9fdcef88ac9aaa696be44ef94b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:3c:e4:98:b0:eb:6e:5a:18:80:1d:a1:4b:8d:
b2:b3:c6:4d:da:1a:cd:3a:f7:d0:d9:43:12:68:58:
1e:0c:15:a7:7d:de:0c:0c:16:0e:b1:44:c1:c2:a2:
63:76:cf:ed:33:a5:70:0b:39:7c:b9:56:59:00:37:
f3:61:31:9b:05:c1:cf:60:a2:36:c6:87:59:ca:6b:
f4:aa:76:c1:fb:e5:65:bd:25:ad:17:9a:13:21:c8:
f5:d6:33:c6:78:49:ac:7f:09:58:5c:f3:c8:6d:a2:
c5:93:a5:ca:ff:fe:29:ec:c3:01:5c:f2:29:98:aa:
28:5b:97:45:42:76:e2:3b:f8:29:78:15:83:de:fd:
06:22:d1:08:a8:5f:ff:b3:26:00:c0:f4:5e:76:20:
9b:29:cb:15:56:01:c6:0f:27:9a:9e:29:5c:94:a5:
b7:e8:3b:83:3a:e5:b8:10:88:3d:e4:06:07:7a:f3:
fb:04:7f:94:28:9c:f6:83:9a:a2:fa:c9:cc:bd:b5:
f6:02:8b:e5:a2:e3:6e:b5:54:7c:0d:0c:da:c9:30:
f0:8f:d6:8a:eb:ba:21:b6:c6:0c:af:ab:d2:c1:5b:
f8:73:5c:18:e8:00:40:d5:b8:e4:4a:bd:ea:cf:83:
95:8a:90:45:e1:6e:78:86:b7:36:63:a3:15:6a:2f:
73:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E0:99:8B:D1:8F:5C:9F:DC:EF:88:AC:9A:AA:69:6B:E4:4E:F9:4B
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/WuCZi9GPXJ_c74ismqppa-RO-Us.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.148.58.0/24
Signature Algorithm: sha256WithRSAEncryption
12:53:a9:3b:64:31:e1:53:28:28:ec:c9:40:87:b8:4c:e9:c2:
95:a5:b8:3e:d4:03:b0:1d:f7:4b:41:f9:17:8e:75:e3:08:02:
45:3f:0a:27:f2:db:16:0e:1a:f2:3c:f9:e7:d9:0b:a6:94:75:
ff:3d:98:30:bb:d8:52:bc:72:39:d8:99:4a:32:27:2d:0c:49:
52:eb:ab:59:ff:85:26:15:2e:71:b0:07:89:ab:ab:54:c9:f6:
5d:8a:45:58:05:f9:30:63:62:2b:7e:c1:f1:95:56:7b:a3:71:
f4:23:41:77:69:7a:6f:15:1d:67:84:dd:64:69:bf:1b:b5:0c:
60:3a:5b:c2:fb:77:98:34:83:3a:85:79:3b:40:2b:28:15:f0:
49:c3:20:cd:88:4b:c3:93:9d:20:f4:3e:f6:b0:b4:84:06:77:
ac:e8:20:63:19:e3:20:56:86:f3:0c:5f:c1:26:27:98:92:9a:
4b:7e:41:74:11:eb:34:6c:45:c1:de:6a:2a:34:ab:70:2c:02:
1d:de:b1:01:10:f6:59:be:14:2d:df:b4:ff:2b:f0:a9:25:8d:
64:da:61:31:21:5b:1c:9a:1e:d5:aa:0b:1c:b2:f1:13:ca:0d:
6a:d8:21:df:ed:07:4e:4c:c9:0c:b4:e1:80:64:a1:d8:b9:5d:
8c:55:4d:d5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYnP7AYGkWDHG5bQilvPfgJFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiMDk1MmM4YmE4ZGFkYjFkMzRkZTZjNmE5Mzg2NGE2MDlm
YzQxZWMwHhcNMjMwODA3MTIxNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YWUwOTk4YmQxOGY1YzlmZGNlZjg4YWM5YWFhNjk2YmU0NGVmOTRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDzkmLDrbloYgB2hS42ys8ZN2hrN
OvfQ2UMSaFgeDBWnfd4MDBYOsUTBwqJjds/tM6VwCzl8uVZZADfzYTGbBcHPYKI2
xodZymv0qnbB++VlvSWtF5oTIcj11jPGeEmsfwlYXPPIbaLFk6XK//4p7MMBXPIp
mKooW5dFQnbiO/gpeBWD3v0GItEIqF//syYAwPRediCbKcsVVgHGDyeanilclKW3
6DuDOuW4EIg95AYHevP7BH+UKJz2g5qi+snMvbX2AovlouNutVR8DQzayTDwj9aK
67ohtsYMr6vSwVv4c1wY6ABA1bjkSr3qz4OVipBF4W54hrc2Y6MVai9zBQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFrgmYvRj1yf3O+IrJqqaWvkTvlLMB8GA1UdIwQY
MBaAFKsJUsi6ja2x003mxqk4ZKYJ/EHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAt
NTU1NGQ2ZTE2ODZmLzEvV3VDWmk5R1BYSl9jNzRpc21xcHBhLVJPLVVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAtNTU1NGQ2ZTE2ODZm
LzEvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAn5Q6MA0G
CSqGSIb3DQEBCwUAA4IBAQASU6k7ZDHhUygo7MlAh7hM6cKVpbg+1AOwHfdLQfkX
jnXjCAJFPwon8tsWDhryPPnn2QumlHX/PZgwu9hSvHI52JlKMictDElS66tZ/4Um
FS5xsAeJq6tUyfZdikVYBfkwY2IrfsHxlVZ7o3H0I0F3aXpvFR1nhN1kab8btQxg
OlvC+3eYNIM6hXk7QCsoFfBJwyDNiEvDk50g9D72sLSEBnes6CBjGeMgVobzDF/B
JieYkppLfkF0Ees0bEXB3moqNKtwLAId3rEBEPZZvhQt37T/K/CpJY1k2mExIVsc
mh7VqgscsvETyg1q2CHf7QdOTMkMtOGAZKHYuV2MVU3V
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:27:26 2025 by rpki-client