Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/WtJhFu4N5SbMSYTpCEbCGd6cuyY.roa
File: WtJhFu4N5SbMSYTpCEbCGd6cuyY.roa (raw, json)
Hash identifier: nTvdygFcVRnEXsoVtDw5NTWY9HpXCPe+Fwf73cMNNps=
Subject key identifier: 5A:D2:61:16:EE:0D:E5:26:CC:49:84:E9:08:46:C2:19:DE:9C:BB:26
Certificate issuer: /CN=fb1fce9aa72c838496f4bdef9c1f0b8e894fc98e
Certificate serial: 04204401
Authority key identifier: FB:1F:CE:9A:A7:2C:83:84:96:F4:BD:EF:9C:1F:0B:8E:89:4F:C9:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-x_Omqcsg4SW9L3vnB8LjolPyY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/WtJhFu4N5SbMSYTpCEbCGd6cuyY.roa
Signing time: Sat 01 Jan 2022 07:53:27 +0000
ROA not before: Sat 01 Jan 2022 07:53:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9063
IP address blocks: 185.168.141.0/24 maxlen: 24
2a10:65c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69223425 (0x4204401)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb1fce9aa72c838496f4bdef9c1f0b8e894fc98e
Validity
Not Before: Jan 1 07:53:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5ad26116ee0de526cc4984e90846c219de9cbb26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:1f:3a:b8:32:f4:73:80:64:a8:e5:e4:e6:8c:
fe:28:4d:27:59:e0:7e:72:e6:bd:6c:f4:7c:91:c0:
9f:b1:e6:2c:55:05:f2:e2:fe:22:30:d3:a0:8e:b9:
77:19:60:81:73:6f:af:fc:29:e4:3a:f1:e7:8a:3f:
70:8f:d7:3a:6e:e1:d8:12:d2:0e:00:fb:df:14:18:
6e:4e:b8:2b:bf:97:cc:0b:f1:92:e6:04:e8:35:21:
5b:74:0d:a8:ae:a0:7b:17:83:a0:04:35:9d:f5:91:
b3:7e:e1:ed:ed:87:cc:fe:40:b1:20:4b:7f:89:7a:
ab:49:f1:c5:a2:38:01:ef:4a:90:3d:36:cf:fc:1a:
d7:61:d4:cb:bc:67:c1:7e:87:c8:29:91:20:67:76:
62:d3:a5:36:8f:fc:f9:d9:b7:c8:b7:a2:80:92:0e:
37:82:81:a2:bd:66:8d:2d:fc:bd:ac:b2:a1:50:76:
9c:b1:2d:13:98:ee:cf:a3:53:ec:d7:4c:e6:97:6f:
c3:02:18:5a:b8:64:d5:0a:aa:33:5b:93:1a:db:65:
c8:05:27:de:db:9f:9d:cf:5f:58:af:90:8c:10:2d:
68:1a:17:e8:05:90:bc:10:ce:78:40:a0:88:bd:36:
3c:30:54:0e:92:81:ef:4c:35:50:a0:c1:54:77:be:
19:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:D2:61:16:EE:0D:E5:26:CC:49:84:E9:08:46:C2:19:DE:9C:BB:26
X509v3 Authority Key Identifier:
keyid:FB:1F:CE:9A:A7:2C:83:84:96:F4:BD:EF:9C:1F:0B:8E:89:4F:C9:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-x_Omqcsg4SW9L3vnB8LjolPyY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/WtJhFu4N5SbMSYTpCEbCGd6cuyY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.168.141.0/24
IPv6:
2a10:65c0::/29
Signature Algorithm: sha256WithRSAEncryption
70:48:f2:b3:a6:59:e7:94:02:50:84:e7:50:ab:22:2d:88:2e:
13:15:7b:d4:d0:67:e4:30:b5:3b:e4:14:b3:d3:34:3a:ba:92:
a7:e2:82:01:95:77:65:7b:4c:90:6d:c5:c6:07:68:33:b0:26:
d3:9f:b4:bb:f5:ce:3d:6d:57:24:84:8a:b2:9d:81:23:59:ec:
24:9e:21:23:81:16:35:83:58:c7:02:c0:b5:18:45:25:fc:71:
63:67:f1:3e:25:18:10:97:01:f1:cf:97:7b:6d:60:8c:05:47:
ac:6b:e1:d7:99:08:e9:52:05:7b:57:a9:d1:00:9e:17:03:f1:
02:d2:0c:9b:ab:44:9d:15:19:ee:dc:d0:89:11:7f:c5:cc:d6:
79:22:6d:0c:8b:7a:96:63:31:b9:2e:2b:fd:49:e1:51:3f:69:
d2:d2:15:15:e7:86:e1:85:c7:1e:25:1c:97:ba:7f:61:d3:4b:
1a:79:13:4f:5f:d4:e4:b2:02:4c:8c:8b:80:e5:12:df:1d:1e:
5a:39:23:5c:f1:bf:2e:72:a3:c4:01:f1:86:89:4c:a7:fc:18:
70:4e:61:e0:43:82:e6:9f:6d:bd:1f:73:8e:67:74:b3:de:f8:
3c:39:c4:63:58:cb:10:35:b7:b9:94:72:c7:34:56:b7:fb:dc:
23:d4:ac:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:44:27 2025 by rpki-client