Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/WxDRaIxMNBE9GLfRcpgBJtffoik.roa
File: WxDRaIxMNBE9GLfRcpgBJtffoik.roa (raw, json)
Hash identifier: FujqD2sc4VgCrLL9ZwK4ecMKMQ8NkNLpCm+6s0w+gk0=
Subject key identifier: 5B:10:D1:68:8C:4C:34:11:3D:18:B7:D1:72:98:01:26:D7:DF:A2:29
Certificate issuer: /CN=b1740c4c079f2d1dee85439f82781b9bae756a95
Certificate serial: 03308910
Authority key identifier: B1:74:0C:4C:07:9F:2D:1D:EE:85:43:9F:82:78:1B:9B:AE:75:6A:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXQMTAefLR3uhUOfgngbm651apU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/WxDRaIxMNBE9GLfRcpgBJtffoik.roa
Signing time: Sat 01 Jan 2022 10:59:46 +0000
ROA not before: Sat 01 Jan 2022 10:59:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203375
IP address blocks: 185.136.224.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53512464 (0x3308910)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1740c4c079f2d1dee85439f82781b9bae756a95
Validity
Not Before: Jan 1 10:59:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5b10d1688c4c34113d18b7d172980126d7dfa229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ce:e7:7c:73:7e:c5:c2:bd:84:09:73:35:39:
dc:0e:75:8d:2b:e5:28:45:53:ef:b6:7f:3b:ea:80:
55:f7:d5:ef:08:eb:9a:02:d9:33:04:3a:fb:21:f0:
e9:ce:c2:6d:6f:f3:e3:ee:5c:67:ed:12:05:fa:a4:
61:a7:87:11:9b:2d:88:5f:5a:11:04:1a:d3:12:04:
30:bb:97:f9:51:29:4b:d4:5b:3c:09:63:aa:68:75:
bc:a5:3e:0f:40:14:84:cd:ca:15:00:d4:a6:c4:5e:
43:f0:e6:0c:46:91:fc:a7:b8:08:ca:26:1c:99:fe:
8a:35:f6:53:e2:9a:26:49:cb:4b:84:ca:9c:4f:5c:
9f:ed:f2:ee:da:24:9f:f2:00:cf:37:01:17:78:0a:
b3:cd:60:90:ce:c9:77:0f:45:03:3c:3b:c5:9a:c6:
66:7c:e4:55:97:29:ef:ad:b9:e1:fc:08:91:92:02:
98:5d:85:4e:46:a5:b5:49:7d:bb:89:29:5b:1e:08:
28:09:bd:41:f7:fa:f8:0c:4b:75:41:23:41:6e:9e:
1b:08:44:b3:75:3e:c4:7d:10:13:db:a4:cb:58:3c:
14:11:8f:3c:f6:a9:ad:e8:67:f6:47:b7:f1:36:aa:
40:da:05:16:e9:4e:5e:b3:3a:6e:ba:bc:82:27:24:
02:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:10:D1:68:8C:4C:34:11:3D:18:B7:D1:72:98:01:26:D7:DF:A2:29
X509v3 Authority Key Identifier:
keyid:B1:74:0C:4C:07:9F:2D:1D:EE:85:43:9F:82:78:1B:9B:AE:75:6A:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXQMTAefLR3uhUOfgngbm651apU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/WxDRaIxMNBE9GLfRcpgBJtffoik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/sXQMTAefLR3uhUOfgngbm651apU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.136.224.0/23
Signature Algorithm: sha256WithRSAEncryption
64:f8:c2:f6:b6:47:45:31:e7:c0:89:80:d7:ba:74:de:68:26:
aa:a1:59:96:ec:43:52:bb:4a:ab:0c:53:d6:52:9a:f7:bc:ed:
4e:51:1a:0c:87:69:9d:0d:4c:19:03:cd:5f:a8:38:36:24:3f:
cc:72:20:ac:3b:3e:9b:c2:03:af:30:f5:d8:e4:23:e3:cd:43:
61:76:04:27:f7:c4:60:46:2c:b2:c6:a3:d2:36:e7:0d:cc:d1:
c9:1e:9c:92:87:e9:18:60:6e:f9:31:a6:57:4d:8e:e3:2e:6f:
49:2d:36:ce:e8:a1:99:08:a0:3d:af:b0:ec:be:0f:90:f8:3b:
cd:06:b1:e4:6e:9f:bc:75:a5:d7:35:52:a5:b0:d7:67:16:3e:
1f:a0:f3:5f:72:1b:c4:4b:dd:6d:37:20:f0:e5:81:ee:b8:99:
46:48:92:da:31:dd:59:53:74:28:da:1a:40:5f:00:a4:31:68:
78:10:a0:9e:41:27:55:12:91:56:29:ac:fe:ca:39:30:e5:86:
a9:f1:b9:cd:f7:27:f9:3e:d0:90:97:6a:6e:e9:ee:43:f1:40:
ba:fd:6c:e4:43:ae:6b:57:0b:a4:c3:50:0a:b7:f2:97:34:d1:
70:52:4c:19:a2:91:94:61:dd:08:e4:75:8b:42:2a:2c:3d:a2:
3b:65:9b:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:51:16 2025 by rpki-client