Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/WgwH5OvzFkQf9z7I799s9Di2L9w.roa
File: WgwH5OvzFkQf9z7I799s9Di2L9w.roa (raw, json)
Hash identifier: r6vWFcDkHLv8H57MJQGEeZtT6diWBlO0EvS+5kKmk5I=
Subject key identifier: 5A:0C:07:E4:EB:F3:16:44:1F:F7:3E:C8:EF:DF:6C:F4:38:B6:2F:DC
Certificate issuer: /CN=992b86095ce558d2e9618728a44228a27be9098f
Certificate serial: 06076C7B
Authority key identifier: 99:2B:86:09:5C:E5:58:D2:E9:61:87:28:A4:42:28:A2:7B:E9:09:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/WgwH5OvzFkQf9z7I799s9Di2L9w.roa
Signing time: Sat 01 Jan 2022 10:58:45 +0000
ROA not before: Sat 01 Jan 2022 10:58:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35077
IP address blocks: 45.13.32.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101149819 (0x6076c7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=992b86095ce558d2e9618728a44228a27be9098f
Validity
Not Before: Jan 1 10:58:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5a0c07e4ebf316441ff73ec8efdf6cf438b62fdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:dc:a8:f1:f4:17:7c:9c:1d:a4:1c:84:73:96:
8a:20:f0:c0:5f:5f:6e:32:22:7c:70:76:07:0a:8b:
76:83:e7:db:71:3f:e5:97:95:3c:c2:d7:65:ac:e7:
9a:98:04:28:fd:bc:9a:6b:08:a7:b4:33:08:75:be:
02:82:cd:81:08:db:3c:61:41:74:94:93:f0:44:f3:
e6:af:ca:47:aa:80:63:34:56:fd:02:f0:22:75:f5:
07:6d:64:7b:6a:7f:38:bd:9b:2e:6f:53:8d:da:6c:
38:24:b7:cc:eb:d7:d1:29:16:8e:1b:b8:e2:5f:1c:
38:62:88:ff:22:22:93:bb:13:d3:5d:80:f5:a7:41:
99:c1:98:fb:76:93:55:fc:31:d6:45:47:06:1e:a4:
f6:81:6e:f8:dd:2a:07:dd:cd:88:b5:7d:47:54:d8:
fc:19:fe:d1:95:44:80:a8:dc:2c:b2:12:ce:b3:b7:
25:5f:26:07:e4:7b:df:71:3a:e9:48:c3:da:5b:54:
ae:68:ac:75:44:81:6d:18:aa:71:54:0e:35:74:f3:
94:15:27:b4:8a:1f:db:81:a4:30:5b:c8:70:bc:4b:
9d:6c:cb:b7:12:2b:09:16:e0:75:dc:9c:7a:0e:10:
14:95:58:47:1c:da:0b:31:24:66:21:61:8c:6c:ba:
0d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:0C:07:E4:EB:F3:16:44:1F:F7:3E:C8:EF:DF:6C:F4:38:B6:2F:DC
X509v3 Authority Key Identifier:
keyid:99:2B:86:09:5C:E5:58:D2:E9:61:87:28:A4:42:28:A2:7B:E9:09:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/WgwH5OvzFkQf9z7I799s9Di2L9w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.32.0/22
Signature Algorithm: sha256WithRSAEncryption
38:4f:93:a9:25:40:5c:d6:4c:c9:e6:e0:28:41:e1:88:3a:77:
3b:06:56:95:17:cd:05:03:88:34:89:60:d4:63:bd:d0:f8:df:
07:b5:4a:c5:5b:e8:84:f9:d7:f4:6c:ae:73:ad:2e:d8:79:7d:
da:2e:da:48:9b:4c:d6:a3:51:ea:ae:41:16:09:38:22:04:b8:
b4:15:f1:ed:0b:ce:c2:13:91:a6:41:2f:a9:ec:20:c5:5c:ee:
dc:ed:a7:df:fa:a1:8e:32:76:e9:ae:fa:b8:f3:51:19:53:d6:
3c:90:b5:c9:b1:8e:57:af:62:ce:f1:89:d5:96:0d:bc:11:90:
b7:3a:aa:f5:4d:9c:55:e9:dd:f1:bb:73:92:bd:e2:b8:44:57:
c6:44:03:53:16:b1:0b:ef:e9:5c:20:34:d1:ac:38:71:36:23:
95:e0:86:9b:15:d0:ff:b0:03:2f:7a:f4:31:69:9f:01:c6:c6:
d2:6f:b8:97:63:4c:2c:fc:2e:3b:8a:ff:a0:55:3b:61:87:a1:
17:88:71:e5:97:d9:45:de:45:57:e6:c0:db:c9:91:4a:98:c9:
17:de:19:78:84:86:62:d2:aa:e6:43:07:22:c3:a8:4e:3c:e2:
a5:1b:72:2e:a4:c3:7c:f1:5e:3b:cc:ac:be:48:d2:05:4b:97:
ec:ad:13:dc
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBgdsezANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
OTJiODYwOTVjZTU1OGQyZTk2MTg3MjhhNDQyMjhhMjdiZTkwOThmMB4XDTIyMDEw
MTEwNTg0NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNWEwYzA3ZTRlYmYz
MTY0NDFmZjczZWM4ZWZkZjZjZjQzOGI2MmZkYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAITcqPH0F3ycHaQchHOWiiDwwF9fbjIifHB2BwqLdoPn23E/
5ZeVPMLXZaznmpgEKP28mmsIp7QzCHW+AoLNgQjbPGFBdJST8ETz5q/KR6qAYzRW
/QLwInX1B21ke2p/OL2bLm9TjdpsOCS3zOvX0SkWjhu44l8cOGKI/yIik7sT012A
9adBmcGY+3aTVfwx1kVHBh6k9oFu+N0qB93NiLV9R1TY/Bn+0ZVEgKjcLLISzrO3
JV8mB+R733E66UjD2ltUrmisdUSBbRiqcVQONXTzlBUntIof24GkMFvIcLxLnWzL
txIrCRbgddyceg4QFJVYRxzaCzEkZiFhjGy6DS8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRaDAfk6/MWRB/3Psjv32z0OLYv3DAfBgNVHSMEGDAWgBSZK4YJXOVY0ulh
hyikQiiie+kJjzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L21TdUdDVnpsV05McFlZY29wRUlvb252cENZOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzkvOGVhOWI5LTNiNmUtNGZkZi1iNWQxLWYwNGZkY2MwOWU1MS8x
L1dnd0g1T3Z6RmtRZjl6N0k3OTlzOURpMkw5dy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzkv
OGVhOWI5LTNiNmUtNGZkZi1iNWQxLWYwNGZkY2MwOWU1MS8xL21TdUdDVnpsV05M
cFlZY29wRUlvb252cENZOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi0NIDANBgkqhkiG9w0BAQsFAAOC
AQEAOE+TqSVAXNZMyebgKEHhiDp3OwZWlRfNBQOINIlg1GO90PjfB7VKxVvohPnX
9Gyuc60u2Hl92i7aSJtM1qNR6q5BFgk4IgS4tBXx7QvOwhORpkEvqewgxVzu3O2n
3/qhjjJ26a76uPNRGVPWPJC1ybGOV69izvGJ1ZYNvBGQtzqq9U2cVend8btzkr3i
uERXxkQDUxaxC+/pXCA00aw4cTYjleCGmxXQ/7ADL3r0MWmfAcbG0m+4l2NMLPwu
O4r/oFU7YYehF4hx5ZfZRd5FV+bA28mRSpjJF94ZeISGYtKq5kMHIsOoTjzipRty
LqTDfPFeO8ysvkjSBUuX7K0T3A==
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:06:49 2025 by rpki-client