Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/WLdsnTAatpXa0iEWWnURbv9dcp4.roa
File: WLdsnTAatpXa0iEWWnURbv9dcp4.roa (raw, json)
Hash identifier: CfC457YzxXXc4O+SJY+eLxf5Hx7A+cYjBFyg+gxIrTU=
Subject key identifier: 58:B7:6C:9D:30:1A:B6:95:DA:D2:21:16:5A:75:11:6E:FF:5D:72:9E
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 50EAE2ED
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/WLdsnTAatpXa0iEWWnURbv9dcp4.roa
Signing time: Sat 01 Jan 2022 16:02:00 +0000
ROA not before: Sat 01 Jan 2022 16:02:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208305
IP address blocks: 195.65.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1357570797 (0x50eae2ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 16:02:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=58b76c9d301ab695dad221165a75116eff5d729e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1f:df:21:51:05:cc:a1:b7:45:be:dc:63:2e:
a8:51:fc:62:42:9d:78:1d:f9:e1:d6:85:3a:fb:26:
26:f3:3b:9d:ce:4d:62:b6:57:f9:e6:82:35:79:0c:
48:f7:07:dc:dd:09:0f:78:45:60:29:6a:d7:4a:f3:
df:bf:b8:a5:42:e1:fa:76:d7:93:77:96:28:ac:bf:
8c:d9:6a:37:d1:87:92:17:3d:54:48:be:07:da:22:
b1:0e:f5:57:55:c9:92:79:e3:e9:a8:fe:ff:89:19:
a4:72:80:da:e1:b3:51:bf:e1:98:4f:62:84:80:c6:
5a:56:81:1d:51:39:97:e7:58:79:28:69:c4:a0:7c:
e3:55:e5:eb:1a:c9:4c:19:b2:84:e3:de:8a:dd:c0:
85:27:df:ec:58:19:64:70:d3:d1:a9:78:40:25:82:
38:a2:1c:ac:c2:63:4c:c4:ce:04:e2:3c:6c:c1:30:
ba:37:d3:5e:0e:1f:07:e1:05:d0:bd:9a:81:0a:1b:
86:1c:a4:15:58:0e:bc:82:4c:f1:68:e1:55:27:fa:
df:08:a7:05:7d:16:07:01:f5:c0:70:4d:0d:30:d7:
1d:f8:58:2d:58:5c:d7:b0:35:af:b8:48:67:3b:86:
b5:f8:0d:18:26:0b:98:03:93:d8:35:79:53:3a:19:
91:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:B7:6C:9D:30:1A:B6:95:DA:D2:21:16:5A:75:11:6E:FF:5D:72:9E
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/WLdsnTAatpXa0iEWWnURbv9dcp4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.65.0.0/24
Signature Algorithm: sha256WithRSAEncryption
32:96:25:7b:d3:f0:04:65:9d:39:24:09:12:db:70:28:58:32:
5d:6a:3c:a5:54:ff:29:49:1a:a7:79:44:4a:77:c2:7d:5a:df:
2a:09:27:d0:31:df:1a:12:d2:8b:da:6b:c8:22:c0:0e:fb:d3:
a4:f7:73:22:fa:36:50:2a:68:a6:8a:5a:19:7f:3e:62:0e:a7:
17:70:24:98:d7:9d:84:a5:6f:3d:c0:44:1a:24:22:cb:91:d8:
c6:50:3f:6f:d1:df:54:94:d9:69:33:fe:0b:bb:c4:d2:7b:32:
50:20:a1:10:39:0f:9a:a5:c4:35:77:b9:49:a9:61:2f:73:70:
fa:80:c3:cc:d0:d3:9c:79:59:51:33:ef:a8:14:68:fb:67:78:
ed:50:38:4a:a0:6c:0b:12:b1:a3:be:0f:de:05:57:6b:27:b0:
c3:eb:36:82:2c:c0:54:d6:82:73:ad:04:5f:6a:f8:8d:f2:15:
35:df:13:16:30:90:0a:07:59:83:28:06:1e:0b:1f:bb:69:c4:
70:74:02:3f:09:87:3a:f3:ec:e2:b2:fb:54:b4:44:36:6a:d6:
93:9f:fd:02:c5:7e:fc:51:b5:4d:e4:bb:d5:96:14:0e:1f:fb:
49:9c:39:90:7d:9d:7b:53:4b:78:ec:2a:4d:eb:3d:6b:f5:9d:
1c:5b:2e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:55:24 2025 by rpki-client