Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/WS0GbcziH_0V8n4HjXvVWrIcZGc.roa
File: WS0GbcziH_0V8n4HjXvVWrIcZGc.roa (raw, json)
Hash identifier: 5bCtyyL6gLcjnuPwuMW4+rt8ytuSPcoMEE5CpPADmSw=
Subject key identifier: 59:2D:06:6D:CC:E2:1F:FD:15:F2:7E:07:8D:7B:D5:5A:B2:1C:64:67
Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial: 0A77F92A
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/WS0GbcziH_0V8n4HjXvVWrIcZGc.roa
Signing time: Thu 12 May 2022 04:53:02 +0000
ROA not before: Thu 12 May 2022 04:53:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31363
IP address blocks: 86.62.125.0/24 maxlen: 24
2a02:2698:9800::/38 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 175634730 (0xa77f92a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Validity
Not Before: May 12 04:53:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=592d066dcce21ffd15f27e078d7bd55ab21c6467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:87:a1:83:7e:e0:09:ca:93:fa:21:ca:c1:1f:
13:6d:a5:8c:c6:78:0e:21:3c:cb:1b:39:23:06:bb:
75:ec:24:61:f7:c2:33:ad:bd:6c:04:89:e6:82:f5:
24:7f:89:1b:7f:ad:00:c0:4f:de:47:38:fa:88:3e:
4e:22:90:d8:4d:9e:26:42:76:0f:29:20:cf:a9:d7:
0d:8a:3d:c1:e5:b2:08:f6:62:5b:05:12:fe:a6:2c:
12:b1:58:fe:07:a7:26:5f:39:66:b1:30:93:a0:6a:
4b:13:5f:a9:c5:ae:4b:74:95:1c:ad:bc:7f:84:5f:
16:91:fe:95:b3:a4:44:f8:3b:48:3d:0f:87:bb:7c:
75:2c:f4:68:2e:e7:96:27:2c:62:8c:b1:ab:58:b9:
ea:26:09:15:6b:45:74:49:8f:6d:34:46:7c:f2:e1:
18:52:10:70:d8:52:11:ed:14:60:66:d6:0c:46:4a:
c6:92:12:eb:61:84:c7:af:12:f5:72:f3:26:7f:60:
02:7b:72:e0:f9:87:8a:92:2c:ae:96:0b:50:a4:eb:
fc:d0:5c:a7:68:0c:df:32:86:96:3e:10:c2:16:38:
a7:a0:22:e1:59:b1:0b:d7:2e:e1:6e:07:ab:f2:eb:
5e:3f:14:36:a8:1b:d5:5a:20:1f:83:3e:67:28:93:
ce:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:2D:06:6D:CC:E2:1F:FD:15:F2:7E:07:8D:7B:D5:5A:B2:1C:64:67
X509v3 Authority Key Identifier:
keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/WS0GbcziH_0V8n4HjXvVWrIcZGc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.62.125.0/24
IPv6:
2a02:2698:9800::/38
Signature Algorithm: sha256WithRSAEncryption
50:9b:1c:98:fe:e9:44:6d:e7:8e:b8:aa:6e:9e:49:38:8a:46:
f4:56:03:31:4f:7d:49:90:57:f0:59:c7:41:59:30:50:ae:f0:
88:27:8f:c6:42:6e:04:92:6c:76:dd:55:b1:0b:c1:4e:c7:51:
ce:f0:bb:97:3a:f4:66:1a:1b:85:17:a3:1d:06:18:87:02:6b:
b2:54:e0:92:f5:90:bf:94:1e:b2:9e:ca:6d:2f:a7:c9:91:00:
7b:47:f4:94:6b:5f:67:52:ea:bb:2e:a1:55:9e:33:18:a4:4a:
1e:0f:72:73:b7:b4:64:5f:fb:a3:c4:9b:bb:63:d2:57:db:c1:
09:02:57:5a:21:1f:96:e2:00:98:ea:65:88:6d:13:dd:06:45:
65:cd:ee:e3:ac:95:74:54:3c:e4:8a:e7:76:58:38:45:71:be:
cc:a0:65:e4:89:65:45:21:e9:44:e6:54:37:c1:32:6e:1d:6c:
aa:13:39:b1:a7:f6:92:04:18:cb:e0:27:07:bd:21:4a:c0:2a:
62:6a:88:35:22:ee:82:c7:63:f3:f5:53:7c:5b:d0:92:97:63:
c2:bf:09:4c:74:56:fa:d8:2a:48:33:b0:62:9e:e2:eb:ca:6a:
13:dc:a6:53:47:30:d9:1d:2b:e5:f6:ac:6e:ba:0e:fc:5b:2d:
cd:cb:97:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:48:59 2025 by rpki-client