Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/44f5df-2cdc-4f18-be30-d7c4158e9db4/1/g66eP4vUtyW0SnDNBILTJwxO9m8.roa
File: g66eP4vUtyW0SnDNBILTJwxO9m8.roa (raw, json)
Hash identifier: +FYJIiMw6nqlBzlwcc+yZLhAdLqZzlqUqJwGFmKIkaI=
Subject key identifier: 83:AE:9E:3F:8B:D4:B7:25:B4:4A:70:CD:04:82:D3:27:0C:4E:F6:6F
Certificate issuer: /CN=5a2a022fed81cba608817d2a9589a5098e0a708e
Certificate serial: 0189C0093E663E6687BA7B568BF60B555BA4
Authority key identifier: 5A:2A:02:2F:ED:81:CB:A6:08:81:7D:2A:95:89:A5:09:8E:0A:70:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WioCL-2By6YIgX0qlYmlCY4KcI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/44f5df-2cdc-4f18-be30-d7c4158e9db4/1/g66eP4vUtyW0SnDNBILTJwxO9m8.roa
Signing time: Fri 04 Aug 2023 10:12:58 +0000
ROA not before: Fri 04 Aug 2023 10:12:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48918
IP address blocks: 95.215.212.0/24 maxlen: 24
95.215.212.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:c0:09:3e:66:3e:66:87:ba:7b:56:8b:f6:0b:55:5b:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a2a022fed81cba608817d2a9589a5098e0a708e
Validity
Not Before: Aug 4 10:12:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=83ae9e3f8bd4b725b44a70cd0482d3270c4ef66f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a2:b8:3a:2f:37:f6:8a:19:70:ac:6e:64:88:
18:01:ce:fc:7b:39:6d:e4:c8:21:5d:01:d7:a8:1b:
19:c7:fd:40:e6:69:f9:8b:53:e0:eb:41:c2:8e:52:
42:64:19:77:b0:f0:fe:95:f5:13:b1:13:3b:b3:34:
f1:77:9a:28:54:4d:76:fb:50:f8:40:eb:a9:25:e1:
82:37:72:90:67:73:53:15:71:d6:64:b1:cd:75:b2:
92:3b:f3:fb:87:69:05:ee:e8:11:c8:bd:80:67:7e:
b7:a1:72:e2:04:c2:a7:f0:18:21:30:44:f4:e3:64:
b0:68:83:c6:2a:9d:80:5f:62:e9:a4:61:8c:af:2a:
f8:e2:67:ba:b5:68:2f:3d:ac:37:44:66:52:cd:9b:
bf:c8:e1:46:5a:9f:cb:08:32:b4:1e:ad:1b:6c:71:
72:a3:03:63:3f:49:cc:49:17:e5:84:df:6f:07:02:
ad:1d:23:7d:60:97:02:34:ba:22:18:fd:d5:5d:1e:
93:44:08:75:e5:45:a0:64:ec:01:40:8b:9b:71:18:
c5:22:98:0c:13:2a:96:27:bf:47:d9:c4:12:34:2f:
39:dd:9c:5e:bd:ff:26:eb:36:fb:12:57:d5:7b:84:
50:67:38:87:08:6c:bd:42:9c:ec:96:b5:32:e0:48:
e4:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:AE:9E:3F:8B:D4:B7:25:B4:4A:70:CD:04:82:D3:27:0C:4E:F6:6F
X509v3 Authority Key Identifier:
keyid:5A:2A:02:2F:ED:81:CB:A6:08:81:7D:2A:95:89:A5:09:8E:0A:70:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WioCL-2By6YIgX0qlYmlCY4KcI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/44f5df-2cdc-4f18-be30-d7c4158e9db4/1/g66eP4vUtyW0SnDNBILTJwxO9m8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/44f5df-2cdc-4f18-be30-d7c4158e9db4/1/WioCL-2By6YIgX0qlYmlCY4KcI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.215.212.0/22
Signature Algorithm: sha256WithRSAEncryption
16:22:4c:c8:28:9f:06:13:56:32:58:7f:6b:2b:21:59:cf:92:
d6:4b:a0:b0:2f:b9:4c:76:ce:1f:96:3b:24:ad:5b:9c:86:32:
b3:f0:11:19:b8:da:e7:24:11:5d:97:5f:a5:52:1d:71:f2:cc:
bd:b3:d3:32:ad:94:77:3c:e6:c3:f3:1c:d1:c1:01:de:fe:97:
69:ec:5e:e0:59:47:43:bc:8a:67:06:47:d8:cd:03:e7:60:77:
52:bb:f8:03:a4:a8:b9:6f:66:89:63:8d:db:ef:30:fb:84:59:
c9:08:51:0e:1a:29:61:4c:e5:03:e7:3d:0c:eb:5f:8f:78:e1:
89:a5:07:2d:20:d7:d3:0c:85:56:40:72:92:98:a6:64:c6:44:
8e:01:19:b2:d2:99:7d:3d:97:64:fc:79:6e:a1:81:21:33:2a:
22:d9:4c:03:61:a9:5c:64:d7:47:b5:09:6f:18:8c:f8:99:cc:
74:8c:cd:df:6a:54:07:70:4d:a1:07:e9:22:0e:96:06:97:70:
11:b9:af:a5:2f:3e:58:c8:81:58:19:14:b6:44:6b:c9:3a:96:
fc:04:56:3e:fd:1a:83:8c:cb:2c:43:e7:5e:10:ae:96:79:ef:
60:6a:71:56:b7:1a:81:43:5b:0b:6c:ba:50:b9:13:03:71:46:
cb:37:60:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:21:01 2025 by rpki-client