Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/wrFfGa2qZQgS6hIu3G3-y-Fr7Gc.roa
File: wrFfGa2qZQgS6hIu3G3-y-Fr7Gc.roa (raw, json)
Hash identifier: /3rUwtgagcyjj0DEsw3n+AAZNWXBfAeZFS2bnO6yQv4=
Subject key identifier: C2:B1:5F:19:AD:AA:65:08:12:EA:12:2E:DC:6D:FE:CB:E1:6B:EC:67
Certificate issuer: /CN=52bf21eeb36414b3280e6c33b0b57296b8f6b675
Certificate serial: 08976E86
Authority key identifier: 52:BF:21:EE:B3:64:14:B3:28:0E:6C:33:B0:B5:72:96:B8:F6:B6:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ur8h7rNkFLMoDmwzsLVylrj2tnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/wrFfGa2qZQgS6hIu3G3-y-Fr7Gc.roa
Signing time: Sat 01 Jan 2022 09:02:29 +0000
ROA not before: Sat 01 Jan 2022 09:02:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57954
IP address blocks: 192.162.19.0/24 maxlen: 24
193.105.210.0/24 maxlen: 24
2001:67c:13a0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144141958 (0x8976e86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52bf21eeb36414b3280e6c33b0b57296b8f6b675
Validity
Not Before: Jan 1 09:02:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c2b15f19adaa650812ea122edc6dfecbe16bec67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:12:88:68:ac:eb:ad:94:94:28:ec:90:29:71:
49:94:1e:63:8b:90:2f:a9:93:e7:33:de:43:3f:fc:
4d:58:7a:92:7c:0b:29:80:6b:dc:3c:bb:2c:8d:a5:
84:c3:43:b6:cc:3a:b9:ff:d3:b7:ca:2a:4e:63:2d:
59:51:34:16:a3:56:de:5e:6d:7d:1f:fe:b0:f7:01:
07:97:99:20:cb:b1:0a:2a:c9:40:bc:17:fd:6d:8e:
3d:71:7c:10:68:9c:f6:d1:de:db:c8:c3:e0:99:2b:
bd:ba:d8:61:1a:0a:98:de:6b:68:c3:92:7e:68:76:
f4:15:ce:be:37:c6:d5:b2:29:61:7f:07:ab:f0:07:
c0:bf:2e:47:58:f0:6f:17:94:dd:ac:c4:23:11:3c:
d1:eb:e8:79:fe:2f:7f:91:56:e8:29:dd:43:4f:89:
dc:33:7b:8e:e2:2d:8b:da:d5:7c:dc:18:8c:e4:f6:
1b:21:fa:f7:6e:72:4c:62:c3:4a:dd:1c:38:16:1e:
05:8d:2c:35:2d:20:a0:7e:32:f4:45:cc:72:fd:c6:
1b:f7:ca:13:53:6e:c7:aa:b7:15:f1:2d:8e:c1:a9:
1a:3e:87:05:f6:33:e5:8f:e6:24:9c:df:20:47:2a:
3e:c7:82:b1:8e:66:d4:46:73:5c:5e:54:ce:f2:9e:
73:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:B1:5F:19:AD:AA:65:08:12:EA:12:2E:DC:6D:FE:CB:E1:6B:EC:67
X509v3 Authority Key Identifier:
keyid:52:BF:21:EE:B3:64:14:B3:28:0E:6C:33:B0:B5:72:96:B8:F6:B6:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ur8h7rNkFLMoDmwzsLVylrj2tnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/wrFfGa2qZQgS6hIu3G3-y-Fr7Gc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/Ur8h7rNkFLMoDmwzsLVylrj2tnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.162.19.0/24
193.105.210.0/24
IPv6:
2001:67c:13a0::/48
Signature Algorithm: sha256WithRSAEncryption
35:a7:8d:28:81:20:61:30:0c:b4:ea:63:13:7c:40:07:ad:79:
36:8d:1f:50:56:0e:ac:ad:5b:27:41:a5:c7:49:cf:cb:cb:59:
55:1f:8d:c1:0c:78:5d:04:0b:e8:35:3b:56:a9:56:67:c9:a1:
54:e6:db:8c:02:f0:81:ef:c9:e8:0d:be:1d:b4:0e:5b:bd:61:
3d:6b:8c:cd:60:fc:7a:1b:43:18:a6:60:a5:b6:e8:9b:ec:b0:
aa:eb:44:24:c9:1f:65:43:a5:e6:e0:93:6a:1e:41:bd:32:4d:
17:fd:37:fc:09:d7:ed:10:69:ee:d3:de:d5:86:10:2b:74:9d:
f8:d6:a7:58:8d:88:e4:51:4c:65:b6:0e:4c:9b:38:39:51:a8:
97:00:61:d7:99:8d:11:a8:61:65:57:14:c7:d7:97:0e:3c:a2:
94:37:44:c3:43:12:6d:63:88:62:0a:dc:5c:d1:91:9e:81:5e:
a9:2f:72:c3:59:44:5d:33:9f:70:ac:6a:1b:51:77:5f:63:94:
5a:41:09:db:01:6e:ba:dd:38:77:30:fc:c9:43:b6:74:c0:dc:
2f:0d:d7:b6:52:3d:f3:36:af:57:1f:7b:2a:59:b8:f0:bc:63:
72:ff:d6:6d:e3:79:ff:23:95:5c:b8:44:24:97:11:27:a4:96:
7a:0a:3d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:57:16 2025 by rpki-client