Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/wQSb5SLR9MxqnqKWlkur65BGEfU.roa
File: wQSb5SLR9MxqnqKWlkur65BGEfU.roa (raw, json)
Hash identifier: VaoypKpG8YwXOUgjrndeCa5hYc4iXfNcRlwcTrWNL+A=
Subject key identifier: C1:04:9B:E5:22:D1:F4:CC:6A:9E:A2:96:96:4B:AB:EB:90:46:11:F5
Certificate issuer: /CN=ec3543aa00373e9e4d10e64c83d3779b378888c1
Certificate serial: 01856FCBB2473492ABE9155C82A56FA9C956
Authority key identifier: EC:35:43:AA:00:37:3E:9E:4D:10:E6:4C:83:D3:77:9B:37:88:88:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7DVDqgA3Pp5NEOZMg9N3mzeIiME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/wQSb5SLR9MxqnqKWlkur65BGEfU.roa
Signing time: Mon 02 Jan 2023 00:04:58 +0000
ROA not before: Mon 02 Jan 2023 00:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60845
IP address blocks: 80.190.115.0/24 maxlen: 24
80.190.122.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:cb:b2:47:34:92:ab:e9:15:5c:82:a5:6f:a9:c9:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec3543aa00373e9e4d10e64c83d3779b378888c1
Validity
Not Before: Jan 2 00:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c1049be522d1f4cc6a9ea296964babeb904611f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:40:ee:92:29:0c:0c:d2:8e:34:1b:25:d2:8e:
b8:a1:4c:20:ad:27:52:0b:0e:b1:71:74:de:5a:65:
64:06:de:f3:c0:9d:3b:52:2c:86:b2:b9:c4:67:c8:
bc:0c:84:5b:1e:24:79:91:42:5b:bc:60:51:e7:df:
eb:78:9f:ae:26:69:75:89:17:ef:bd:00:a7:f8:14:
99:74:18:68:0b:69:50:9d:2e:f6:2f:41:d8:04:40:
3d:69:ae:ec:98:96:7e:67:3f:6a:96:47:bd:f7:41:
9e:14:7c:54:88:8e:3e:8c:4a:88:66:91:04:00:93:
cd:2a:7d:85:f2:f0:6e:5f:ad:75:f1:a3:6a:e7:05:
40:a0:61:ad:89:29:15:77:2c:df:b5:d7:d7:40:65:
b2:f5:97:e5:29:ab:63:8f:dd:ec:11:e5:1f:b4:d2:
7c:4d:bb:dc:42:a8:b9:27:94:ad:ed:d1:6a:92:de:
a9:f1:13:bd:27:3b:27:6c:e9:91:53:43:dc:e5:86:
e9:9a:fc:58:97:67:74:92:9c:1f:14:81:60:df:e4:
d0:54:be:d8:49:41:ba:8b:25:f1:e4:db:34:9b:10:
a6:bd:a8:eb:c4:20:5a:44:1d:93:55:35:ef:32:2c:
e1:ac:54:16:a4:71:d7:eb:1f:bb:19:14:8a:2c:21:
cf:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:04:9B:E5:22:D1:F4:CC:6A:9E:A2:96:96:4B:AB:EB:90:46:11:F5
X509v3 Authority Key Identifier:
keyid:EC:35:43:AA:00:37:3E:9E:4D:10:E6:4C:83:D3:77:9B:37:88:88:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7DVDqgA3Pp5NEOZMg9N3mzeIiME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/wQSb5SLR9MxqnqKWlkur65BGEfU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7DVDqgA3Pp5NEOZMg9N3mzeIiME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.190.115.0/24
80.190.122.0/24
Signature Algorithm: sha256WithRSAEncryption
38:4d:f7:90:d8:c1:e7:98:8e:a6:e3:7f:3a:97:11:4d:b9:20:
84:e1:29:db:a6:1c:08:8d:45:28:95:ec:7a:dd:86:5c:5d:65:
05:b2:2c:11:61:65:46:e2:e7:fb:4e:0c:c5:25:ea:d0:38:a9:
d4:dd:59:93:62:06:70:d0:27:e9:f8:c9:fd:b8:06:16:93:da:
96:57:db:32:28:ea:95:26:e6:95:73:80:5d:a6:e3:6e:30:c4:
0f:30:87:d1:5b:36:b1:ff:bb:c5:2c:7f:a4:84:db:5b:cf:f4:
5b:9b:d2:69:6d:46:77:d1:3a:5d:2d:45:e7:c3:10:78:62:53:
9c:06:0a:5c:8d:7f:60:96:d1:b8:ee:7a:c6:e9:73:2f:5b:ee:
1b:fe:80:4a:b0:e4:05:0a:5c:62:ce:2c:12:54:dd:ee:a9:aa:
f9:bd:c8:92:2f:63:ff:d3:2b:40:56:ae:84:eb:c5:2d:8e:ac:
ad:43:e0:28:2d:94:6f:28:77:57:a8:69:7f:a6:af:68:11:3f:
ae:ae:06:7c:51:1c:a6:75:1b:f4:be:e0:2f:32:7c:7e:4c:29:
e8:59:36:1f:5b:fc:d1:a1:50:e4:f0:e8:93:86:fb:7d:a0:d4:
e1:95:d5:69:64:be:05:ea:e9:9c:7e:6c:6f:3e:d0:74:57:ee:
5c:47:4e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:25:48 2025 by rpki-client