Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/wrwdXXYyyne3rNI1DpWJrr5OKZo.roa
File: wrwdXXYyyne3rNI1DpWJrr5OKZo.roa (raw, json)
Hash identifier: SQqGS06uTgxgReaHpcK3L8jDqDPjCif4ESqLjTkZkTQ=
Subject key identifier: C2:BC:1D:5D:76:32:CA:77:B7:AC:D2:35:0E:95:89:AE:BE:4E:29:9A
Certificate issuer: /CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7
Certificate serial: 01877AE85F1DDB0AD66A63A1CFC9EAF94437
Authority key identifier: 71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/wrwdXXYyyne3rNI1DpWJrr5OKZo.roa
Signing time: Thu 13 Apr 2023 13:57:41 +0000
ROA not before: Thu 13 Apr 2023 13:57:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200131
IP address blocks: 45.159.92.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7a:e8:5f:1d:db:0a:d6:6a:63:a1:cf:c9:ea:f9:44:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7
Validity
Not Before: Apr 13 13:57:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c2bc1d5d7632ca77b7acd2350e9589aebe4e299a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:1e:6d:6d:3a:ee:54:23:05:ce:d2:3d:a4:e1:
0c:bc:c7:85:16:a3:70:04:5e:2e:2e:ac:f4:76:5f:
e4:c9:05:42:b3:74:17:13:97:a4:b0:b5:96:d3:46:
dd:b6:3d:bc:d2:85:84:55:94:1b:02:ed:f2:82:65:
76:68:7f:aa:61:4c:07:92:23:69:bb:60:9e:af:f0:
bc:b4:d5:16:7c:cf:07:80:eb:64:be:19:15:00:07:
dd:42:f1:98:c5:e1:bf:b9:54:d5:b1:48:7d:d3:e1:
69:f8:11:9b:e5:c9:51:77:c0:8e:02:02:1f:e1:e5:
e9:97:c4:61:a3:6a:18:4e:42:c2:2c:3a:84:5b:a7:
46:cf:fc:53:88:4e:e9:03:bb:0b:eb:60:33:6a:01:
1a:36:a7:d5:26:26:5d:8b:c8:82:04:54:6f:ee:85:
79:ad:a7:e6:38:0f:63:ce:4d:06:ce:5d:32:e1:b0:
42:1f:ff:12:15:e0:01:fa:01:32:02:ed:42:12:8d:
bd:e0:08:8f:b4:ff:03:b2:ba:bf:7a:83:bf:47:32:
dc:80:0a:bc:7d:e9:70:79:b1:6d:57:8b:d8:1d:cb:
9b:34:e6:12:d6:90:f1:ee:a8:6f:94:3d:21:39:22:
c4:2a:62:a6:fa:1d:b6:bd:7e:a6:fd:3c:9c:75:71:
0b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:BC:1D:5D:76:32:CA:77:B7:AC:D2:35:0E:95:89:AE:BE:4E:29:9A
X509v3 Authority Key Identifier:
keyid:71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/wrwdXXYyyne3rNI1DpWJrr5OKZo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.92.0/22
Signature Algorithm: sha256WithRSAEncryption
40:8d:b1:d5:7e:14:54:22:ea:97:9f:9e:3f:c3:e0:cd:60:cc:
b8:b8:1e:f2:21:3a:d0:27:7b:3f:79:c4:23:9b:38:e7:5a:48:
2a:29:ed:08:c9:f7:3f:92:31:58:95:0d:94:17:f9:ae:c7:be:
6d:ac:f8:e8:c7:d7:b5:38:84:31:05:93:12:1b:5c:70:8a:e8:
2f:c4:14:03:37:fa:65:16:50:f4:c2:d6:26:29:86:1b:3e:d0:
23:b8:81:ee:74:02:ce:52:dd:a2:dc:11:64:80:bc:77:81:a9:
c8:18:9b:d8:13:f6:31:91:9b:9a:6f:11:77:29:12:4a:76:d8:
a3:0a:13:14:af:cb:85:de:94:cc:99:62:6f:76:32:d8:c6:a0:
de:a8:57:a0:c8:1b:7d:3f:f6:a3:db:b3:f9:e1:a0:b0:3b:5a:
2e:f7:20:85:16:5d:77:18:e7:56:c6:8a:28:66:fe:d9:01:94:
60:94:ce:09:b7:6e:02:03:f0:a6:90:7d:4e:cd:8b:0b:17:d0:
97:c0:e8:ca:2b:45:44:cc:a4:02:53:0f:a6:87:bb:73:9c:2c:
33:ac:50:56:ff:0b:6b:e6:9d:eb:15:e4:65:ba:0f:36:72:79:
ae:43:ef:7c:72:bd:7b:0c:f3:a9:d8:5a:ca:d9:a8:84:dc:db:
bb:0a:67:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:32:15 2025 by rpki-client