Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/wGclwpNHF3ox7V9dgMMgyGheFz4.roa
File: wGclwpNHF3ox7V9dgMMgyGheFz4.roa (raw, json)
Hash identifier: OR21/v0+5x5nF7P5U36O2EknWtYVEE47NOr4dLMIIPE=
Subject key identifier: C0:67:25:C2:93:47:17:7A:31:ED:5F:5D:80:C3:20:C8:68:5E:17:3E
Certificate issuer: /CN=dc44e19e2bb4e7023cc1ba10d49b74ede4bf865c
Certificate serial: 018A69FF8DAB4265E15EBD1B710E60F6F31C
Authority key identifier: DC:44:E1:9E:2B:B4:E7:02:3C:C1:BA:10:D4:9B:74:ED:E4:BF:86:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EThniu05wI8wboQ1Jt07eS_hlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/wGclwpNHF3ox7V9dgMMgyGheFz4.roa
Signing time: Wed 06 Sep 2023 10:17:50 +0000
ROA not before: Wed 06 Sep 2023 10:17:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210536
IP address blocks: 25.129.198.0/24 maxlen: 24
25.129.199.0/24 maxlen: 24
2a08:600:ee::/48 maxlen: 48
2a08:600:ef::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:69:ff:8d:ab:42:65:e1:5e:bd:1b:71:0e:60:f6:f3:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc44e19e2bb4e7023cc1ba10d49b74ede4bf865c
Validity
Not Before: Sep 6 10:17:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c06725c29347177a31ed5f5d80c320c8685e173e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:58:b3:7b:b5:18:6f:e9:96:9d:87:a8:f4:37:
d4:5f:80:e0:a3:40:83:0f:62:cd:c1:32:f0:ff:dc:
6d:b3:a8:81:fc:81:05:86:b8:21:8b:30:58:ca:cf:
8a:92:fb:03:6a:d4:e9:82:07:e4:30:68:89:c8:9c:
73:3c:6b:16:1b:5d:9f:da:2c:36:17:66:7a:ac:80:
be:56:e1:f1:0c:65:49:d3:5e:5b:7d:40:f5:9c:93:
fc:7e:22:56:d5:e2:86:e0:35:69:3a:62:f4:71:e6:
b9:27:02:38:85:f6:98:1e:01:0a:c3:97:9e:9f:65:
0e:7a:a2:d2:23:38:c4:a7:74:5c:cf:f5:28:35:e3:
44:df:4c:27:8e:e6:25:f7:8a:bd:81:6f:d2:f9:61:
3a:8a:2f:fb:7c:9f:ca:b9:2b:11:71:cb:56:59:78:
49:30:b3:f2:47:2d:2d:38:f4:d1:ff:8e:bb:f9:af:
c8:0f:96:43:3f:5f:19:1d:a5:b4:5f:24:74:4e:9a:
97:43:9b:ac:d1:77:55:8a:a5:38:d0:45:43:78:45:
cc:01:6d:90:ee:b7:97:31:e2:70:cb:80:3a:e4:7b:
0d:ac:eb:eb:bf:fb:6f:61:23:a3:9e:a4:e8:a1:14:
f8:44:9d:46:ee:77:9b:5b:59:0c:73:df:3d:7e:1a:
c8:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:67:25:C2:93:47:17:7A:31:ED:5F:5D:80:C3:20:C8:68:5E:17:3E
X509v3 Authority Key Identifier:
keyid:DC:44:E1:9E:2B:B4:E7:02:3C:C1:BA:10:D4:9B:74:ED:E4:BF:86:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EThniu05wI8wboQ1Jt07eS_hlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/wGclwpNHF3ox7V9dgMMgyGheFz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
25.129.198.0/23
IPv6:
2a08:600:ee::/47
Signature Algorithm: sha256WithRSAEncryption
af:be:9a:eb:5d:80:03:4e:b5:9e:6c:14:20:25:62:dc:e6:90:
ab:fb:35:3d:ac:b0:bf:99:d6:03:a2:95:e5:e9:26:f3:88:df:
89:ce:68:8d:b9:bb:7a:aa:3c:dd:f5:93:c8:67:1f:ca:d7:3a:
22:4b:6d:e2:0d:71:4a:e4:00:9d:6b:26:8a:db:f7:4f:ab:7d:
21:68:88:4d:ad:10:d4:13:5a:fa:ab:2c:d9:41:97:a8:4b:18:
fc:b4:39:67:09:be:11:2e:3c:52:fd:a1:86:14:48:ae:1b:11:
84:3a:02:96:47:66:ed:e7:14:7c:bd:a3:66:65:91:28:60:40:
db:b0:45:f9:03:3b:5c:63:cf:3a:da:cf:b1:84:a5:ea:40:af:
0e:2e:25:43:b7:56:4d:0a:bf:c7:da:b1:54:92:45:cb:2c:eb:
c2:66:73:b6:25:40:4d:9b:34:69:8b:d0:5d:49:89:d9:db:5a:
cc:0d:fa:f1:a6:a1:e9:9f:30:71:96:a5:ed:52:20:db:a3:6b:
34:1c:0f:ab:01:f4:df:f0:fc:51:d6:95:86:77:f3:dd:0a:0a:
c2:f9:e6:c2:ba:2a:af:b6:93:90:6b:00:9c:3a:36:dc:cf:1b:
22:90:0e:fa:2f:c9:05:62:12:04:21:dd:c6:13:d8:11:c8:aa:
f9:cc:66:22
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYpp/42rQmXhXr0bcQ5g9vMcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNDRlMTllMmJiNGU3MDIzY2MxYmExMGQ0OWI3NGVkZTRi
Zjg2NWMwHhcNMjMwOTA2MTAxNzUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMDY3MjVjMjkzNDcxNzdhMzFlZDVmNWQ4MGMzMjBjODY4NWUxNzNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFize7UYb+mWnYeo9DfUX4Dgo0CD
D2LNwTLw/9xts6iB/IEFhrghizBYys+KkvsDatTpggfkMGiJyJxzPGsWG12f2iw2
F2Z6rIC+VuHxDGVJ015bfUD1nJP8fiJW1eKG4DVpOmL0cea5JwI4hfaYHgEKw5ee
n2UOeqLSIzjEp3Rcz/UoNeNE30wnjuYl94q9gW/S+WE6ii/7fJ/KuSsRcctWWXhJ
MLPyRy0tOPTR/467+a/ID5ZDP18ZHaW0XyR0TpqXQ5us0XdViqU40EVDeEXMAW2Q
7reXMeJwy4A65HsNrOvrv/tvYSOjnqTooRT4RJ1G7nebW1kMc989fhrIYwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMBnJcKTRxd6Me1fXYDDIMhoXhc+MB8GA1UdIwQY
MBaAFNxE4Z4rtOcCPMG6ENSbdO3kv4ZcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0VUaG5pdTA1d0k4d2JvUTFKdDA3ZVNfaGx3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS80NmY1YjktNjAwMC00MDcyLTg5ZjIt
NGM4MmFjZTcyYzg1LzEvd0djbHdwTkhGM294N1Y5ZGdNTWd5R2hlRno0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS80NmY1YjktNjAwMC00MDcyLTg5ZjItNGM4MmFjZTcyYzg1
LzEvM0VUaG5pdTA1d0k4d2JvUTFKdDA3ZVNfaGx3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBGYHGMA8E
AgACMAkDBwEqCAYAAO4wDQYJKoZIhvcNAQELBQADggEBAK++mutdgANOtZ5sFCAl
YtzmkKv7NT2ssL+Z1gOileXpJvOI34nOaI25u3qqPN31k8hnH8rXOiJLbeINcUrk
AJ1rJorb90+rfSFoiE2tENQTWvqrLNlBl6hLGPy0OWcJvhEuPFL9oYYUSK4bEYQ6
ApZHZu3nFHy9o2ZlkShgQNuwRfkDO1xjzzraz7GEpepArw4uJUO3Vk0Kv8fasVSS
Rcss68Jmc7YlQE2bNGmL0F1JidnbWswN+vGmoemfMHGWpe1SINujazQcD6sB9N/w
/FHWlYZ3890KCsL55sK6Kq+2k5BrAJw6NtzPGyKQDvovyQViEgQh3cYT2BHIqvnM
ZiI=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:33:34 2025 by rpki-client