Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/wCrNxvMaokYJ8l68sNdNEX6uASs.roa
File: wCrNxvMaokYJ8l68sNdNEX6uASs.roa (raw, json)
Hash identifier: v+kmsGWHma21Vpoim66qGE59uQJ/GdGUbl7YSlxpq9I=
Subject key identifier: C0:2A:CD:C6:F3:1A:A2:46:09:F2:5E:BC:B0:D7:4D:11:7E:AE:01:2B
Certificate issuer: /CN=992b86095ce558d2e9618728a44228a27be9098f
Certificate serial: 0183A8F2464BCD19214054E1A518D4C3A25B
Authority key identifier: 99:2B:86:09:5C:E5:58:D2:E9:61:87:28:A4:42:28:A2:7B:E9:09:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/wCrNxvMaokYJ8l68sNdNEX6uASs.roa
Signing time: Wed 05 Oct 2022 16:19:53 +0000
ROA not before: Wed 05 Oct 2022 16:19:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200019
IP address blocks: 166.108.176.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a8:f2:46:4b:cd:19:21:40:54:e1:a5:18:d4:c3:a2:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=992b86095ce558d2e9618728a44228a27be9098f
Validity
Not Before: Oct 5 16:19:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c02acdc6f31aa24609f25ebcb0d74d117eae012b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c5:27:a9:84:83:a1:42:4c:9c:bb:ee:e4:b5:
b9:60:82:fb:d8:96:b4:7d:bc:10:c8:42:e5:f3:df:
9d:74:0f:ea:d3:92:6c:95:8d:39:7b:20:76:ea:cf:
f5:5a:3f:8f:b2:8a:3e:b1:fe:dc:76:fc:c6:45:31:
12:b6:d5:a7:89:1c:25:8c:19:2d:57:33:7b:0d:96:
84:69:54:a5:cf:0c:83:e1:2c:23:f0:a9:6f:8a:60:
6a:e9:72:1a:7d:c6:e2:5c:32:08:db:b3:91:ac:c6:
83:18:7a:07:71:08:0d:b7:3c:0f:85:d1:03:40:15:
9e:d7:f5:1f:69:5d:d8:8c:37:d0:da:ef:14:7a:5f:
f3:3f:c9:e1:da:7e:b6:ed:e0:15:a8:9e:0f:96:28:
f6:02:13:21:91:66:07:7a:79:71:a4:1c:63:a4:e2:
5c:4f:3d:eb:eb:d9:ff:2a:f4:d9:48:c2:0b:d4:0a:
84:26:7e:92:d2:e2:76:e2:38:c7:32:6f:6b:b3:7c:
f9:94:85:ed:89:67:e5:19:20:d2:72:59:c3:a2:6c:
ad:08:a7:93:55:c1:8b:a0:b1:fd:de:84:6b:bf:98:
ad:64:5c:f0:75:ed:a7:01:96:b1:d9:9b:d4:4c:6e:
2a:1f:36:2a:df:51:86:e4:aa:37:cb:1d:6d:ba:f2:
78:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:2A:CD:C6:F3:1A:A2:46:09:F2:5E:BC:B0:D7:4D:11:7E:AE:01:2B
X509v3 Authority Key Identifier:
keyid:99:2B:86:09:5C:E5:58:D2:E9:61:87:28:A4:42:28:A2:7B:E9:09:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/wCrNxvMaokYJ8l68sNdNEX6uASs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
166.108.176.0/22
Signature Algorithm: sha256WithRSAEncryption
a5:cf:ca:99:72:86:bf:13:c6:b6:75:c9:2a:9d:69:97:69:9e:
36:ae:87:a0:0a:32:77:73:ac:11:67:e6:03:2d:70:53:71:54:
04:c3:c7:91:45:ce:f2:98:98:23:04:f8:58:cd:f0:2e:41:0e:
12:e0:35:ee:2a:2e:22:5e:cb:8f:12:8a:15:97:9c:5e:12:98:
ad:37:59:73:41:65:6b:e7:1a:2e:c1:62:de:cd:48:20:9f:c6:
e8:4f:ae:dc:7f:5b:ed:1c:76:85:18:81:17:0f:a5:c5:ef:af:
4e:64:be:47:fc:12:71:ae:30:35:55:88:ad:5b:15:dd:00:3d:
84:bd:1e:b5:3b:56:03:e7:a8:39:30:75:ad:d0:29:fb:80:66:
da:a8:d7:d3:9e:07:b8:3e:fb:8d:4e:ba:db:32:e7:f0:5f:23:
3c:9b:eb:11:23:4d:18:fd:8d:d9:21:12:d8:9f:f7:35:43:62:
6b:22:cb:eb:42:95:b8:d5:62:fd:b1:1f:41:5d:6d:5f:51:bb:
b2:6d:2d:28:fa:67:ed:63:43:4b:47:d3:3b:9b:36:06:37:e2:
e3:3c:e9:a5:f0:c6:93:7f:d5:a9:76:46:8b:5f:66:4e:a5:b2:
4c:92:e2:a5:a6:7a:30:a9:77:c2:fa:ab:24:3b:42:68:00:e8:
6b:0e:73:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:08:54 2025 by rpki-client