Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/WEQAfgtlksJw_3M3W3Afq6cJu5w.roa
File: WEQAfgtlksJw_3M3W3Afq6cJu5w.roa (raw, json)
Hash identifier: +divGeDM0yawgG/IO99XMcX5pOA+Ae+nUYPlr+rzz9E=
Subject key identifier: 58:44:00:7E:0B:65:92:C2:70:FF:73:37:5B:70:1F:AB:A7:09:BB:9C
Certificate issuer: /CN=1c390bff65dcedca813d7a10d7ec328c2f6eac34
Certificate serial: 0186741F0C737350147B169C3DFF369B5016
Authority key identifier: 1C:39:0B:FF:65:DC:ED:CA:81:3D:7A:10:D7:EC:32:8C:2F:6E:AC:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/WEQAfgtlksJw_3M3W3Afq6cJu5w.roa
Signing time: Tue 21 Feb 2023 13:17:17 +0000
ROA not before: Tue 21 Feb 2023 13:17:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1921
IP address blocks: 2001:678:20::/48 maxlen: 48
2a02:850:ffe2::/48 maxlen: 48
2a02:850:ffe5::/48 maxlen: 48
2a02:850:ffe0::/48 maxlen: 48
2001:67c:1bc::/48 maxlen: 48
2a02:850:ffe3::/48 maxlen: 48
2a02:850:ffe6::/48 maxlen: 48
2001:678:24::/48 maxlen: 48
2a02:850:ffe1::/48 maxlen: 48
2a02:850:ffe4::/48 maxlen: 48
2a02:850:ffe7::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:74:1f:0c:73:73:50:14:7b:16:9c:3d:ff:36:9b:50:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c390bff65dcedca813d7a10d7ec328c2f6eac34
Validity
Not Before: Feb 21 13:17:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5844007e0b6592c270ff73375b701faba709bb9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a0:d7:03:a3:72:3b:2a:1a:25:52:c0:58:96:
62:d5:fc:2f:a0:59:57:4d:1d:64:05:be:c3:bf:a5:
72:30:d8:d5:ae:b1:90:03:8c:67:23:d0:0f:a5:9d:
d7:79:f4:dc:91:c2:1b:b6:25:e9:71:ef:47:08:3c:
6d:89:54:90:0b:16:34:7d:a4:58:39:44:7f:9f:b5:
49:82:a6:9c:c8:1f:62:53:dc:34:2c:a8:09:5e:3e:
28:83:11:c9:c4:a0:37:a3:ac:ee:92:95:14:a5:21:
56:52:8c:7c:fd:42:dc:d2:da:fc:a2:65:b2:1c:6c:
20:48:c1:f2:68:34:c1:74:9e:db:09:ee:e5:d9:bf:
66:f5:bf:57:bd:ee:84:d2:0b:40:8d:6e:1b:16:e4:
5e:de:d6:cc:cb:4c:4d:a9:c1:2a:b0:5f:b3:79:48:
05:7c:2a:03:b6:81:89:06:b6:0c:61:f9:af:44:0a:
bb:8a:5d:aa:bd:8f:07:ab:1c:b9:0c:95:19:7a:d4:
ac:72:94:f7:06:84:88:df:22:f5:3e:58:54:69:84:
b7:bc:2c:5d:92:d7:c8:54:ca:09:ab:36:b6:a5:7c:
c9:16:f2:9b:d3:6f:f7:de:f2:21:38:00:fe:8d:9a:
e7:a9:09:cf:85:07:23:b0:ce:23:a8:0f:0d:76:13:
5d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:44:00:7E:0B:65:92:C2:70:FF:73:37:5B:70:1F:AB:A7:09:BB:9C
X509v3 Authority Key Identifier:
keyid:1C:39:0B:FF:65:DC:ED:CA:81:3D:7A:10:D7:EC:32:8C:2F:6E:AC:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/WEQAfgtlksJw_3M3W3Afq6cJu5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:20::/48
2001:678:24::/48
2001:67c:1bc::/48
2a02:850:ffe0::/45
Signature Algorithm: sha256WithRSAEncryption
87:e6:f6:93:75:0d:3b:7f:17:19:89:22:68:43:ce:75:13:40:
d7:f5:e2:02:35:aa:3f:c0:74:24:f0:49:e6:b7:d4:d6:33:bc:
51:fe:56:4d:98:1b:4c:cd:f2:64:e6:68:b9:b9:bd:a6:bb:11:
6f:93:78:da:68:ee:da:87:fe:15:6e:a0:e6:51:a3:3b:ac:bf:
87:3b:9f:72:4e:37:da:f1:01:f4:48:7d:4a:26:97:99:9b:b6:
0e:c8:49:02:7d:ec:f0:b4:0e:7d:29:ad:4b:02:46:91:8c:19:
e5:dd:c2:12:bb:9f:fc:e3:a8:05:d6:f5:a2:67:aa:59:5a:33:
99:ae:f5:b1:3e:31:16:65:4a:58:eb:60:75:2d:d2:5a:28:f2:
e6:32:64:86:83:10:6b:79:e3:15:f7:f3:31:fb:c2:0b:c2:21:
11:78:f1:79:65:a4:86:56:0f:2a:d0:34:18:ec:73:8e:06:48:
ac:6a:ec:89:32:f4:70:9d:90:6e:ae:72:a1:a5:eb:37:ab:47:
4c:87:d6:b9:43:a7:1c:7a:b4:a9:01:f1:90:58:39:de:b6:b5:
e8:f5:c5:36:ae:d3:fc:10:67:c6:d3:be:2b:f3:89:e7:0b:18:
78:79:07:29:06:7f:d7:1c:1b:66:1c:3f:5e:8d:0c:de:d4:c7:
ec:e7:68:97
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAYZ0Hwxzc1AUexacPf82m1AWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjMzkwYmZmNjVkY2VkY2E4MTNkN2ExMGQ3ZWMzMjhjMmY2
ZWFjMzQwHhcNMjMwMjIxMTMxNzE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ODQ0MDA3ZTBiNjU5MmMyNzBmZjczMzc1YjcwMWZhYmE3MDliYjljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaDXA6NyOyoaJVLAWJZi1fwvoFlX
TR1kBb7Dv6VyMNjVrrGQA4xnI9APpZ3XefTckcIbtiXpce9HCDxtiVSQCxY0faRY
OUR/n7VJgqacyB9iU9w0LKgJXj4ogxHJxKA3o6zukpUUpSFWUox8/ULc0tr8omWy
HGwgSMHyaDTBdJ7bCe7l2b9m9b9Xve6E0gtAjW4bFuRe3tbMy0xNqcEqsF+zeUgF
fCoDtoGJBrYMYfmvRAq7il2qvY8Hqxy5DJUZetSscpT3BoSI3yL1PlhUaYS3vCxd
ktfIVMoJqza2pXzJFvKb02/33vIhOAD+jZrnqQnPhQcjsM4jqA8NdhNd9QIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFFhEAH4LZZLCcP9zN1twH6unCbucMB8GA1UdIwQY
MBaAFBw5C/9l3O3KgT16ENfsMowvbqw0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSERrTF8yWGM3Y3FCUFhvUTEtd3lqQzl1ckRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8zNDgxMDQtOGE0MS00OTQ5LTg1NTIt
YTk3NjVlZGM3OTVjLzEvV0VRQWZndGxrc0p3XzNNM1czQWZxNmNKdTV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi8zNDgxMDQtOGE0MS00OTQ5LTg1NTItYTk3NjVlZGM3OTVj
LzEvSERrTF8yWGM3Y3FCUFhvUTEtd3lqQzl1ckRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAAjAkAwcAIAEGeAAg
AwcAIAEGeAAkAwcAIAEGfAG8AwcDKgIIUP/gMA0GCSqGSIb3DQEBCwUAA4IBAQCH
5vaTdQ07fxcZiSJoQ851E0DX9eICNao/wHQk8Enmt9TWM7xR/lZNmBtMzfJk5mi5
ub2muxFvk3jaaO7ah/4VbqDmUaM7rL+HO59yTjfa8QH0SH1KJpeZm7YOyEkCfezw
tA59Ka1LAkaRjBnl3cISu5/846gF1vWiZ6pZWjOZrvWxPjEWZUpY62B1LdJaKPLm
MmSGgxBreeMV9/Mx+8ILwiERePF5ZaSGVg8q0DQY7HOOBkisauyJMvRwnZBurnKh
pes3q0dMh9a5Q6ccerSpAfGQWDnetrXo9cU2rtP8EGfG074r84nnCxh4eQcpBn/X
HBtmHD9ejQze1Mfs52iX
-----END CERTIFICATE-----
Generated at Fri Apr 18 15:44:39 2025 by rpki-client