Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/6e6df8-e72a-4155-9e08-0e47ede305b3/1/WTzImgV4E60IEts1tThrlfcvuYg.roa
File: WTzImgV4E60IEts1tThrlfcvuYg.roa (raw, json)
Hash identifier: dkZ5kTrFPakhbaTweIkBSzOJGYB8aiuMKcPulQaNMEs=
Subject key identifier: 59:3C:C8:9A:05:78:13:AD:08:12:DB:35:B5:38:6B:95:F7:2F:B9:88
Certificate issuer: /CN=c3b88be5513f1ae72493522fa6697eff33692ae0
Certificate serial: 0187E0A271203A5AA4757F5D07DEB57D2411
Authority key identifier: C3:B8:8B:E5:51:3F:1A:E7:24:93:52:2F:A6:69:7E:FF:33:69:2A:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w7iL5VE_Guckk1Ivpml-_zNpKuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/6e6df8-e72a-4155-9e08-0e47ede305b3/1/WTzImgV4E60IEts1tThrlfcvuYg.roa
Signing time: Wed 03 May 2023 08:02:34 +0000
ROA not before: Wed 03 May 2023 08:02:34 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51514
IP address blocks: 37.221.216.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e0:a2:71:20:3a:5a:a4:75:7f:5d:07:de:b5:7d:24:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3b88be5513f1ae72493522fa6697eff33692ae0
Validity
Not Before: May 3 08:02:34 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=593cc89a057813ad0812db35b5386b95f72fb988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ba:c7:de:2c:73:28:23:bc:02:17:c4:d1:4f:
20:ce:30:7b:c6:5b:f2:9e:34:81:8f:85:ba:cf:a7:
1e:cd:2b:e6:5f:1c:6c:db:96:14:20:c1:12:b1:69:
75:66:1f:dc:07:61:2a:b3:76:f5:c1:2b:c1:bd:af:
cc:39:fd:d4:1f:33:ed:70:2b:0f:14:23:40:73:2e:
c4:af:39:f1:c3:88:db:4f:18:af:62:7a:21:65:7b:
23:3d:b2:fd:44:65:4b:c6:da:87:34:ee:34:22:8f:
6a:84:c6:3b:a6:9e:b1:ba:e3:3b:c4:f7:23:da:34:
7f:4f:6d:4b:74:81:40:3c:5a:09:d4:41:95:ba:46:
26:54:ae:72:c7:10:c7:5c:16:6b:78:d4:0b:2a:57:
87:7e:c9:af:f9:c2:d6:be:57:17:10:e0:b0:5e:5e:
31:a8:20:6c:63:28:46:ce:ae:c2:59:98:a8:a0:e3:
c1:7f:b5:82:6f:3b:5c:6f:18:16:7b:d3:f0:e4:fe:
49:aa:83:cd:3e:43:1f:0a:fb:58:4c:fe:da:17:39:
f2:2f:37:cf:b7:cd:19:28:de:a5:c9:5e:b0:22:81:
fc:ed:1f:b8:cf:ce:e5:42:61:d4:3e:f2:e3:94:2a:
7e:be:04:a6:25:18:32:85:7f:11:b2:cb:1e:b3:c4:
d3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:3C:C8:9A:05:78:13:AD:08:12:DB:35:B5:38:6B:95:F7:2F:B9:88
X509v3 Authority Key Identifier:
keyid:C3:B8:8B:E5:51:3F:1A:E7:24:93:52:2F:A6:69:7E:FF:33:69:2A:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w7iL5VE_Guckk1Ivpml-_zNpKuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6e6df8-e72a-4155-9e08-0e47ede305b3/1/WTzImgV4E60IEts1tThrlfcvuYg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6e6df8-e72a-4155-9e08-0e47ede305b3/1/w7iL5VE_Guckk1Ivpml-_zNpKuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.216.0/21
Signature Algorithm: sha256WithRSAEncryption
a0:a0:b3:c6:20:9d:a8:de:f0:39:21:6c:6f:0b:ec:e9:e8:72:
f1:29:1d:d6:e9:da:23:81:45:3f:4f:33:ed:76:b2:2e:82:de:
78:1d:9e:70:fa:80:76:ea:fa:ec:da:fe:10:3b:9f:88:8f:23:
e3:6d:07:03:77:a4:1b:7b:3d:ea:95:be:93:8f:f8:a6:ad:68:
5a:ef:93:ee:55:ba:03:42:6d:19:18:28:ba:a7:38:fe:8d:34:
b4:4d:d2:b5:4e:ed:eb:f4:dc:7c:0d:ae:69:1e:9a:0c:7d:80:
aa:65:b2:c7:81:f3:8d:94:31:8c:42:b6:22:b9:86:f4:63:d4:
77:d1:11:e8:48:ed:fb:ff:81:b5:4d:ca:ce:04:78:fd:e4:d2:
e3:10:c8:c3:1f:90:83:ba:a5:b4:8a:f9:29:31:ef:07:83:40:
ac:2f:80:e7:fd:85:56:c6:07:b3:98:d2:e6:2b:36:c4:61:94:
fa:8e:6f:bb:29:01:bf:59:27:7a:b9:a5:a2:9d:80:37:8c:28:
90:1c:a7:ab:f3:48:38:74:77:b0:60:2b:c7:b8:08:52:a3:7b:
c4:36:3d:7a:d6:46:56:67:bf:f7:b7:fc:69:36:09:50:f6:64:
57:70:ae:08:24:41:1a:7c:19:bc:d9:22:6a:f5:bc:a1:25:cd:
50:22:5e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:49:21 2025 by rpki-client