Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/WTNf6Pd137W169K-gLPqD4UYQ7k.roa
File: WTNf6Pd137W169K-gLPqD4UYQ7k.roa (raw, json)
Hash identifier: q9bvGkuheLqGmC7JRNAwtMbtbQR5iXAJAt7XstrPgnM=
Subject key identifier: 59:33:5F:E8:F7:75:DF:B5:B5:EB:D2:BE:80:B3:EA:0F:85:18:43:B9
Certificate issuer: /CN=421b4cd40bae47d48f51c9cccc607cce57ce00f7
Certificate serial: 1A8642B9
Authority key identifier: 42:1B:4C:D4:0B:AE:47:D4:8F:51:C9:CC:CC:60:7C:CE:57:CE:00:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhtM1AuuR9SPUcnMzGB8zlfOAPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/WTNf6Pd137W169K-gLPqD4UYQ7k.roa
Signing time: Sat 01 Jan 2022 07:53:34 +0000
ROA not before: Sat 01 Jan 2022 07:53:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8368
IP address blocks: 185.39.152.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 445006521 (0x1a8642b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=421b4cd40bae47d48f51c9cccc607cce57ce00f7
Validity
Not Before: Jan 1 07:53:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=59335fe8f775dfb5b5ebd2be80b3ea0f851843b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f2:9c:ed:bb:b2:2e:26:20:ea:38:eb:ec:7f:
d1:2c:81:21:53:76:09:91:72:9f:86:d4:d7:49:31:
62:c4:0b:10:bf:3b:fa:e2:5f:fa:31:00:48:a9:95:
2e:9a:27:56:28:8b:d3:09:06:a9:dc:18:de:ea:a3:
3a:69:c9:ba:e7:e3:73:c6:02:16:29:82:f4:00:0c:
85:87:91:48:90:3b:b0:04:fb:90:54:cc:c0:bc:7c:
b0:1d:9f:29:1b:cf:b4:68:3a:21:f8:e0:95:e6:93:
c6:82:48:34:bd:cf:63:71:0c:37:96:9b:a3:5c:01:
df:02:69:52:c3:cf:26:77:96:35:65:8a:3d:c8:28:
a6:a4:79:39:e4:c1:37:ad:41:d7:79:85:c4:61:c8:
b7:72:70:c0:c0:7c:bd:bc:db:e1:b7:7f:26:19:76:
d7:a0:96:bf:59:91:00:35:6d:c7:11:09:f0:28:07:
22:46:f1:7a:08:da:36:a1:93:b5:07:a7:02:a6:db:
94:7a:7a:80:0d:e2:ab:b2:4a:a6:81:4c:be:2c:cf:
ce:05:ec:45:72:b7:b7:f7:99:f5:35:b7:f8:40:8f:
78:37:44:d4:eb:b2:5d:d8:67:a7:0c:65:e9:b1:5a:
ab:9a:5b:7a:ea:d2:cd:5b:1c:9f:bd:9a:16:ef:ff:
a5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:33:5F:E8:F7:75:DF:B5:B5:EB:D2:BE:80:B3:EA:0F:85:18:43:B9
X509v3 Authority Key Identifier:
keyid:42:1B:4C:D4:0B:AE:47:D4:8F:51:C9:CC:CC:60:7C:CE:57:CE:00:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhtM1AuuR9SPUcnMzGB8zlfOAPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/WTNf6Pd137W169K-gLPqD4UYQ7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/QhtM1AuuR9SPUcnMzGB8zlfOAPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.39.152.0/22
Signature Algorithm: sha256WithRSAEncryption
a2:21:d2:d7:3a:39:ca:5c:95:a5:2f:5c:6d:19:10:07:35:40:
04:25:d0:f5:e6:31:9d:7f:ef:3b:84:02:fe:65:93:97:d1:e8:
c5:39:3c:8f:4d:b0:eb:ee:b5:fa:99:2b:70:25:50:ab:c6:44:
e4:c7:1e:25:b4:ef:6a:89:3f:fb:1b:7e:1a:ac:c9:51:83:fe:
67:37:ac:c2:7c:ec:63:4d:9e:c6:b8:e4:ac:0c:d0:00:ad:ce:
c5:e9:de:27:d4:97:c3:99:75:62:33:46:fc:5c:26:ed:8c:c8:
bb:80:fe:cb:0d:56:fa:e6:3a:59:02:49:67:81:a4:08:45:e3:
c5:a6:58:eb:34:5c:c9:95:30:8a:f1:9c:4e:89:06:b4:2c:ee:
1a:23:c6:51:44:8a:e5:b8:bc:cf:b0:22:22:06:c0:60:15:ef:
c2:80:f6:b8:11:e0:9d:01:34:00:01:02:9b:ae:d6:f0:23:77:
3a:95:22:a3:49:e3:19:a5:98:15:19:2a:a1:80:b8:6c:8a:1f:
14:e2:44:de:96:b3:fd:93:f1:db:c3:76:ef:85:77:84:ae:3e:
17:3e:3a:94:a4:57:40:cc:bc:a3:08:fb:f1:3f:40:b7:f8:a8:
42:a8:3e:6f:dc:ec:c2:29:bb:2c:56:8d:33:c9:41:5f:5a:be:
84:93:ed:e9
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEGoZCuTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
MjFiNGNkNDBiYWU0N2Q0OGY1MWM5Y2NjYzYwN2NjZTU3Y2UwMGY3MB4XDTIyMDEw
MTA3NTMzNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTkzMzVmZThmNzc1
ZGZiNWI1ZWJkMmJlODBiM2VhMGY4NTE4NDNiOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOPynO27si4mIOo46+x/0SyBIVN2CZFyn4bU10kxYsQLEL87
+uJf+jEASKmVLponViiL0wkGqdwY3uqjOmnJuufjc8YCFimC9AAMhYeRSJA7sAT7
kFTMwLx8sB2fKRvPtGg6IfjgleaTxoJINL3PY3EMN5abo1wB3wJpUsPPJneWNWWK
PcgopqR5OeTBN61B13mFxGHIt3JwwMB8vbzb4bd/Jhl216CWv1mRADVtxxEJ8CgH
IkbxegjaNqGTtQenAqbblHp6gA3iq7JKpoFMvizPzgXsRXK3t/eZ9TW3+ECPeDdE
1OuyXdhnpwxl6bFaq5pbeurSzVscn72aFu//pXECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRZM1/o93XftbXr0r6As+oPhRhDuTAfBgNVHSMEGDAWgBRCG0zUC65H1I9R
yczMYHzOV84A9zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1FodE0xQXV1UjlTUFVjbk16R0I4emxmT0FQYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMmYvODUxM2NkLWFhYzctNDY2ZC1hMDMxLTg0Y2NmMzQyMDI4Ni8x
L1dUTmY2UGQxMzdXMTY5Sy1nTFBxRDRVWVE3ay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmYv
ODUxM2NkLWFhYzctNDY2ZC1hMDMxLTg0Y2NmMzQyMDI4Ni8xL1FodE0xQXV1UjlT
UFVjbk16R0I4emxmT0FQYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArknmDANBgkqhkiG9w0BAQsFAAOC
AQEAoiHS1zo5ylyVpS9cbRkQBzVABCXQ9eYxnX/vO4QC/mWTl9HoxTk8j02w6+61
+pkrcCVQq8ZE5MceJbTvaok/+xt+GqzJUYP+ZzeswnzsY02exrjkrAzQAK3Oxene
J9SXw5l1YjNG/Fwm7YzIu4D+yw1W+uY6WQJJZ4GkCEXjxaZY6zRcyZUwivGcTokG
tCzuGiPGUUSK5bi8z7AiIgbAYBXvwoD2uBHgnQE0AAECm67W8CN3OpUio0njGaWY
FRkqoYC4bIofFOJE3paz/ZPx28N274V3hK4+Fz46lKRXQMy8owj78T9At/ioQqg+
b9zswim7LFaNM8lBX1q+hJPt6Q==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:35:38 2025 by rpki-client