Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/WJZ57ZKeQ51JWPYg46DbGcAOaDU.roa
File: WJZ57ZKeQ51JWPYg46DbGcAOaDU.roa (raw, json)
Hash identifier: cW895JAB8UgKiGm7rP0Twk6I6R1+6EXfQxClRtO7snE=
Subject key identifier: 58:96:79:ED:92:9E:43:9D:49:58:F6:20:E3:A0:DB:19:C0:0E:68:35
Certificate issuer: /CN=b04b1cdf506ce5e9937e77f8263ecf6ddb255b05
Certificate serial: 01856ECB63E991FC6058C29C65A1805FAE60
Authority key identifier: B0:4B:1C:DF:50:6C:E5:E9:93:7E:77:F8:26:3E:CF:6D:DB:25:5B:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sEsc31Bs5emTfnf4Jj7PbdslWwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/WJZ57ZKeQ51JWPYg46DbGcAOaDU.roa
Signing time: Sun 01 Jan 2023 19:25:01 +0000
ROA not before: Sun 01 Jan 2023 19:25:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35258
IP address blocks: 5.183.72.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:cb:63:e9:91:fc:60:58:c2:9c:65:a1:80:5f:ae:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b04b1cdf506ce5e9937e77f8263ecf6ddb255b05
Validity
Not Before: Jan 1 19:25:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=589679ed929e439d4958f620e3a0db19c00e6835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:17:37:4a:31:da:83:e5:e5:c4:47:1a:94:e5:
d6:8a:fe:ca:c0:67:8b:10:00:b5:e1:d4:e2:06:44:
d1:00:cd:90:53:13:c8:05:07:25:6b:e4:76:4c:57:
15:7d:88:a8:9f:39:43:72:db:d6:cc:7b:88:3e:ae:
52:c7:42:9c:38:12:0b:05:1d:26:11:fa:33:25:97:
ea:b8:1f:c3:9a:f5:31:fb:3a:77:e5:b4:f5:1d:c8:
80:9f:39:9b:44:5a:6c:0c:0e:07:3c:de:df:d3:61:
b8:88:7a:fd:7d:3a:a4:ec:6f:a3:9b:d5:31:60:9e:
72:9d:64:9a:b8:64:be:d6:e1:05:32:9e:5e:17:70:
88:24:5c:08:48:c8:15:03:9f:26:8c:fa:ca:ca:cd:
c4:d2:1d:b3:ce:ac:ff:b3:12:7b:b1:a4:bf:68:a5:
15:ee:e3:f0:88:16:1c:b2:c7:24:9d:6e:ba:2a:2a:
94:40:12:f4:41:15:d4:ae:2e:f1:b0:46:3d:d7:32:
99:e6:30:c3:34:22:ae:dd:b8:12:5b:56:76:69:1a:
46:38:fc:f5:e6:ec:d0:10:b0:0f:5b:98:57:86:8a:
e7:29:52:a6:51:bf:fb:9b:66:8d:c1:4b:99:dc:45:
61:8e:0b:3c:0e:20:18:3a:a3:cc:6b:8e:57:f5:ff:
69:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:96:79:ED:92:9E:43:9D:49:58:F6:20:E3:A0:DB:19:C0:0E:68:35
X509v3 Authority Key Identifier:
keyid:B0:4B:1C:DF:50:6C:E5:E9:93:7E:77:F8:26:3E:CF:6D:DB:25:5B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sEsc31Bs5emTfnf4Jj7PbdslWwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/WJZ57ZKeQ51JWPYg46DbGcAOaDU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.72.0/22
Signature Algorithm: sha256WithRSAEncryption
26:98:71:88:1b:e2:f8:5c:55:e1:21:78:39:37:ca:fb:fe:9d:
58:91:92:4f:d7:ba:37:bc:64:df:f8:80:d8:6c:d8:3f:63:de:
de:89:5e:3d:5b:bd:ac:b0:a1:26:65:a2:88:43:bd:74:a0:3e:
60:0e:16:ab:5f:af:5e:8f:27:00:96:1e:f8:cd:d1:33:3d:5a:
ae:f3:75:ef:e2:8a:c0:4e:07:f1:5b:9c:91:63:9b:d8:0e:24:
12:f2:27:48:d5:53:fe:10:e0:8c:47:3f:5f:9b:22:66:05:69:
a9:10:fe:03:52:dc:21:d6:00:bb:13:fd:c5:0d:b1:04:d3:c7:
33:82:d4:b0:02:92:c8:9c:46:fd:48:61:a4:7f:2b:e2:19:08:
48:2c:03:78:8c:d4:2e:dc:0d:fa:0b:e5:eb:32:19:5a:46:9c:
b6:85:ef:31:d6:bc:f3:90:18:50:d0:bc:49:01:88:ee:f2:d1:
f0:86:d4:7c:3f:f7:2f:30:06:a6:ff:0d:bd:53:b8:1a:5b:32:
8c:63:36:9e:d9:be:9c:32:ac:db:87:50:7b:ab:43:08:1b:97:
73:05:11:59:f6:e8:e0:ee:dd:99:91:80:64:10:67:5b:c3:3a:
63:47:5b:46:c0:6f:9a:3e:4a:08:ef:cf:f7:22:d7:a1:f4:65:
8f:eb:16:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:54:02 2025 by rpki-client