Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/01aac3-bce9-4d7e-a5fc-3f1b16c6cd63/1/wSKBRzvh1c5_ejs9oP959awrE34.roa
File: wSKBRzvh1c5_ejs9oP959awrE34.roa (raw, json)
Hash identifier: yAHVMgKoBMm4IEuu6pJkO3NvXdMUBEH9Gflaj90hZTU=
Subject key identifier: C1:22:81:47:3B:E1:D5:CE:7F:7A:3B:3D:A0:FF:79:F5:AC:2B:13:7E
Certificate issuer: /CN=080369a358961f7284fbd591e927737cdb05c35d
Certificate serial: 0187FA8F9143B7A65297C8A83BB90D432FC8
Authority key identifier: 08:03:69:A3:58:96:1F:72:84:FB:D5:91:E9:27:73:7C:DB:05:C3:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CANpo1iWH3KE-9WR6SdzfNsFw10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/01aac3-bce9-4d7e-a5fc-3f1b16c6cd63/1/wSKBRzvh1c5_ejs9oP959awrE34.roa
Signing time: Mon 08 May 2023 08:52:05 +0000
ROA not before: Mon 08 May 2023 08:52:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209190
IP address blocks: 81.92.128.0/20 maxlen: 20
81.92.128.0/21 maxlen: 21
81.92.136.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:fa:8f:91:43:b7:a6:52:97:c8:a8:3b:b9:0d:43:2f:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=080369a358961f7284fbd591e927737cdb05c35d
Validity
Not Before: May 8 08:52:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c12281473be1d5ce7f7a3b3da0ff79f5ac2b137e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:72:dd:a0:23:66:d9:40:8b:59:52:24:6f:c8:
c1:a4:70:bf:e3:74:58:6d:97:93:4d:39:2a:8b:69:
99:af:5d:7b:26:1e:37:fa:96:c1:ce:de:ed:34:ef:
47:e6:8e:e1:2a:05:db:95:ac:05:0a:44:23:a5:f5:
92:7e:03:e3:8a:98:e8:9b:5b:97:8d:71:25:65:5c:
af:3b:80:23:7a:8f:78:af:a2:74:91:28:aa:69:6a:
57:5a:13:64:29:00:4d:6e:04:be:61:29:3b:a3:49:
82:26:39:de:c4:59:77:47:b4:78:64:8e:44:dd:93:
3e:5e:e2:0f:82:2f:80:42:26:e5:51:44:a9:fa:68:
16:8b:37:d6:47:49:1f:e3:66:3c:3c:7e:f7:41:0c:
b9:73:bb:d5:a1:1f:60:64:be:1e:4b:26:98:8b:44:
32:1f:8b:ca:8b:a6:d4:95:29:e9:59:81:5e:70:57:
e8:ff:21:ed:96:0c:4a:b7:eb:ab:c2:6c:71:67:cb:
b4:c9:d5:e2:b5:42:4c:64:ea:12:19:9d:6e:f4:d4:
60:9b:e5:51:56:b9:a3:92:78:08:46:be:43:5c:dc:
aa:ef:ea:cc:a6:d0:a0:cd:2a:4f:4f:48:f1:15:52:
2d:97:9e:d4:4e:ca:5d:05:d1:dc:b8:35:c8:a6:15:
48:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:22:81:47:3B:E1:D5:CE:7F:7A:3B:3D:A0:FF:79:F5:AC:2B:13:7E
X509v3 Authority Key Identifier:
keyid:08:03:69:A3:58:96:1F:72:84:FB:D5:91:E9:27:73:7C:DB:05:C3:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CANpo1iWH3KE-9WR6SdzfNsFw10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/01aac3-bce9-4d7e-a5fc-3f1b16c6cd63/1/wSKBRzvh1c5_ejs9oP959awrE34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/01aac3-bce9-4d7e-a5fc-3f1b16c6cd63/1/CANpo1iWH3KE-9WR6SdzfNsFw10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.92.128.0/20
Signature Algorithm: sha256WithRSAEncryption
9a:cd:11:59:80:68:f6:8a:5d:b1:43:51:61:c6:ba:8a:73:9b:
8e:96:f2:57:7d:37:5e:70:3e:30:a4:d2:dd:fd:24:13:40:98:
aa:84:15:85:85:1e:04:c1:37:b4:48:52:78:9e:fc:b4:83:44:
06:9a:69:c5:b3:5b:b3:19:f9:41:f2:0d:39:06:a3:18:5e:c4:
13:e0:9e:69:dc:50:27:49:d4:3f:f4:43:ad:3e:73:59:3b:9c:
d9:8e:85:38:ac:4a:6c:ab:45:32:70:d1:50:47:ea:b0:ac:5d:
4d:4d:53:6c:10:a9:b0:d9:12:7d:a5:72:a0:d3:3a:74:8d:4e:
db:fa:d1:07:ff:05:aa:68:7d:a5:4e:ff:50:f5:c8:70:c7:4c:
12:b1:d5:25:61:0a:2c:19:4e:bc:be:f8:73:a0:3b:9a:31:4c:
a2:ca:87:2c:da:be:2e:8d:b9:f5:f1:86:91:23:b3:7c:84:9c:
00:74:b1:89:08:6a:3b:82:b5:42:34:8f:06:de:48:e8:d1:d3:
12:8f:c2:a5:bc:99:55:81:7b:a5:9f:b9:25:d5:64:24:66:57:
cd:de:e6:12:ff:a4:cb:19:2e:3c:fc:98:7f:55:d5:8f:98:ce:
70:5f:1b:eb:db:b4:64:ac:4b:78:29:05:50:2a:35:48:cd:82:
9b:4e:b0:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:49:41 2025 by rpki-client