Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/Wbq_S2REVbLnhEJ4fQtMlRHADYM.roa
File: Wbq_S2REVbLnhEJ4fQtMlRHADYM.roa (raw, json)
Hash identifier: ZV4R/S0uomPEkXSUGasiHMhEAnAe3EgYzMIabn60i5I=
Subject key identifier: 59:BA:BF:4B:64:44:55:B2:E7:84:42:78:7D:0B:4C:95:11:C0:0D:83
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 0182652B760169DC146D8632B54FEEBB146F
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/Wbq_S2REVbLnhEJ4fQtMlRHADYM.roa
Signing time: Wed 03 Aug 2022 19:25:23 +0000
ROA not before: Wed 03 Aug 2022 19:25:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43431
IP address blocks: 212.116.245.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:65:2b:76:01:69:dc:14:6d:86:32:b5:4f:ee:bb:14:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Aug 3 19:25:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=59babf4b644455b2e78442787d0b4c9511c00d83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:8c:b6:bf:c1:6c:54:57:19:32:36:e9:a8:80:
f0:7b:53:f5:e6:a0:b8:7b:05:c5:0e:49:e9:29:d2:
c1:64:1b:8b:a0:0e:0b:36:fa:0a:ba:93:44:0e:b5:
f5:a8:78:2b:35:a2:23:0f:eb:1d:35:c2:08:af:1d:
09:d3:e4:56:8c:d7:14:2d:ff:b4:38:f3:66:0f:4f:
eb:5c:e4:91:06:fd:98:fc:00:64:9e:45:11:a0:71:
33:25:2d:5c:4c:ba:3c:30:f1:c5:23:8c:85:78:b2:
89:9c:d8:23:8e:1a:86:d9:09:fc:a7:66:b9:4b:53:
4b:23:64:14:4f:95:f2:f3:c5:b0:6a:ff:2e:a9:6f:
e1:45:af:99:53:25:f8:a2:70:ef:e5:00:19:99:1b:
e2:ed:18:e7:69:fb:7e:54:4c:9c:c2:a2:a8:07:cb:
f1:b0:52:10:66:e6:53:e0:c3:e0:91:83:f3:0b:1a:
74:31:82:c2:89:5c:aa:9e:b9:1b:34:24:21:ae:55:
c4:66:be:82:46:5d:f8:4b:5a:80:69:bc:f5:65:59:
66:54:8b:7b:32:f3:db:42:76:85:0b:85:44:4b:68:
77:f5:0c:4b:60:32:67:9e:00:9d:33:06:0a:1a:cb:
d7:ee:93:b8:4a:50:9e:11:91:d0:72:5f:78:5f:4f:
14:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:BA:BF:4B:64:44:55:B2:E7:84:42:78:7D:0B:4C:95:11:C0:0D:83
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/Wbq_S2REVbLnhEJ4fQtMlRHADYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.116.245.0/24
Signature Algorithm: sha256WithRSAEncryption
01:31:8b:a3:14:de:0d:f1:0a:ed:ac:ca:21:7f:e0:bf:b8:a0:
1b:30:f9:99:c0:52:77:a6:05:1b:3e:5e:bd:8e:a2:e4:9d:9a:
12:d6:6f:a7:89:01:1e:2f:fe:68:84:3d:be:8c:b9:31:f8:ba:
82:15:13:c0:50:ad:5a:50:b9:12:82:5d:28:15:15:df:4c:fa:
67:82:c4:0b:1c:78:94:a0:13:0d:08:4a:86:ad:2e:38:32:24:
9a:9f:44:56:ef:86:2d:d6:78:b6:1e:59:24:a7:ca:ab:ad:2d:
5b:d4:f8:49:31:b9:1c:52:d3:57:c9:8c:28:9d:29:53:e8:f7:
c4:5c:bb:be:3c:9f:e8:77:23:f5:c1:74:31:5e:0d:2a:b0:d8:
68:e5:e2:39:5d:a8:9f:4b:9d:f1:e5:bb:d9:70:49:55:87:0a:
7a:92:c4:9b:36:60:cf:2d:cb:3f:2d:22:d2:d1:2c:b5:d2:1a:
e3:55:39:37:64:29:88:74:78:16:ef:7e:9a:88:ce:8f:5d:fc:
d8:d5:db:0a:5c:b4:1d:af:1b:06:b4:71:dd:11:65:74:6b:a2:
e5:18:16:e3:6d:e0:62:80:1b:6f:20:30:d6:8f:e2:ca:0b:4e:
2f:49:d3:ab:c6:6d:a2:44:56:21:78:cc:4f:db:45:d2:56:47:
17:a9:32:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:04:24 2025 by rpki-client