Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/wWjI6d_G1s7NGjYY0NpqaYE0Ge8.roa
File: wWjI6d_G1s7NGjYY0NpqaYE0Ge8.roa (raw, json)
Hash identifier: tL8rgcSDnmS5gea0X2g0uyG/o1SK5QVwY+tvo3zCo90=
Subject key identifier: C1:68:C8:E9:DF:C6:D6:CE:CD:1A:36:18:D0:DA:6A:69:81:34:19:EF
Certificate issuer: /CN=bcfd2da5447d007616ebddc2a70feac5e77c4a8b
Certificate serial: 3B0590
Authority key identifier: BC:FD:2D:A5:44:7D:00:76:16:EB:DD:C2:A7:0F:EA:C5:E7:7C:4A:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP0tpUR9AHYW693Cpw_qxed8Sos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/wWjI6d_G1s7NGjYY0NpqaYE0Ge8.roa
Signing time: Sat 01 Jan 2022 00:56:22 +0000
ROA not before: Sat 01 Jan 2022 00:56:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41451
IP address blocks: 185.46.172.0/24 maxlen: 24
195.43.80.0/24 maxlen: 24
2a0c:f40::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3868048 (0x3b0590)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfd2da5447d007616ebddc2a70feac5e77c4a8b
Validity
Not Before: Jan 1 00:56:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c168c8e9dfc6d6cecd1a3618d0da6a69813419ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4e:21:0a:82:90:b0:e2:c5:a1:d4:c3:e1:26:
9c:ca:ee:2f:68:49:ac:83:24:dc:7b:23:6a:48:96:
0f:79:90:81:00:83:f9:96:6f:a7:da:d9:27:b2:2e:
f1:ca:0a:e7:b8:d2:dd:93:23:de:f9:1a:d8:3d:9b:
a1:62:c5:e0:c2:89:04:a7:36:95:c3:ce:e7:e0:de:
2a:6b:3c:6c:b7:e5:b1:42:5b:a9:89:90:59:80:6f:
e9:7b:59:b3:39:0f:7e:b3:9e:01:02:cb:ef:42:d8:
44:7b:c7:1a:25:85:53:47:7e:9b:47:ba:30:ce:53:
2c:cb:35:99:42:81:ba:9f:db:c2:75:66:8e:d8:ab:
ea:ae:ca:3a:29:49:21:57:b5:aa:ff:ac:e3:ad:0a:
f6:bd:44:b1:fe:6c:ca:2f:80:ac:b3:dd:87:96:e6:
1c:cf:d1:ad:33:bf:6b:b9:bd:af:54:75:3c:94:b9:
29:4a:a8:33:01:84:d3:f8:f2:b3:ba:fa:e7:e5:09:
2f:14:7d:8f:61:fe:10:a2:b8:fa:89:9e:93:57:4a:
9b:a8:78:b3:b8:ff:1f:d7:87:d9:4e:16:1d:d5:5c:
38:fd:99:7e:79:fd:4e:a6:ab:51:c6:8f:52:4d:73:
71:8c:1a:b8:94:9f:16:79:2a:18:3e:c9:f2:3c:33:
97:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:68:C8:E9:DF:C6:D6:CE:CD:1A:36:18:D0:DA:6A:69:81:34:19:EF
X509v3 Authority Key Identifier:
keyid:BC:FD:2D:A5:44:7D:00:76:16:EB:DD:C2:A7:0F:EA:C5:E7:7C:4A:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP0tpUR9AHYW693Cpw_qxed8Sos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/wWjI6d_G1s7NGjYY0NpqaYE0Ge8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.46.172.0/24
195.43.80.0/24
IPv6:
2a0c:f40::/32
Signature Algorithm: sha256WithRSAEncryption
b1:94:a3:76:7d:26:2b:d6:e0:c1:6f:7e:a9:c9:af:1d:93:a5:
2f:04:76:f6:eb:cb:b8:57:7f:7d:37:d9:12:57:07:52:2d:d3:
95:5c:08:ec:b2:70:76:9c:0d:cb:47:29:c7:b6:47:ac:50:40:
55:66:95:1c:24:5c:d8:17:18:bd:8a:c1:95:9e:73:c6:0d:56:
d4:f9:43:fb:a4:17:0b:0d:18:ba:f4:8e:a4:22:f6:43:5a:06:
cf:6a:da:82:68:59:dd:c5:6c:0f:f6:b6:8e:74:77:c2:c7:64:
73:57:6a:d1:f1:66:47:df:71:c3:22:f8:43:11:87:1b:38:38:
61:ec:c2:4b:bb:ad:dc:a1:dd:b1:5e:03:19:1d:b5:7f:1d:8f:
74:3e:f9:96:b0:78:3c:91:ab:ae:dd:19:8b:6f:6a:cb:69:e3:
97:3d:93:a3:a5:f9:85:97:a6:6b:2c:87:dc:41:9b:ce:27:94:
cc:49:e0:cf:ff:70:a4:cb:02:24:41:86:db:17:24:49:28:ca:
a8:2b:60:11:e0:76:0b:7a:25:90:35:2a:f8:3a:eb:ad:f9:d5:
60:80:3e:31:ee:04:b9:38:64:d3:b0:d4:ba:88:e4:a2:7d:33:
82:e0:ca:6e:a5:3f:85:a7:b5:63:52:6e:1f:a4:06:07:4f:3d:
c6:c8:6f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:19:25 2025 by rpki-client