Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/9c7aa4-a4c9-447a-8bc1-68c105d2f0db/1/WhXjExiOI3tHIQ1D1RNMQcFtCZM.roa
File: WhXjExiOI3tHIQ1D1RNMQcFtCZM.roa (raw, json)
Hash identifier: sUkD3veLHwcNVfCHWYHyxLE2A22tKFFvdmJDwZGpY6Q=
Subject key identifier: 5A:15:E3:13:18:8E:23:7B:47:21:0D:43:D5:13:4C:41:C1:6D:09:93
Certificate issuer: /CN=fe5ca4e2a0a180eb2f29cc88740aa707b8821d7c
Certificate serial: 074F6156
Authority key identifier: FE:5C:A4:E2:A0:A1:80:EB:2F:29:CC:88:74:0A:A7:07:B8:82:1D:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_lyk4qChgOsvKcyIdAqnB7iCHXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/9c7aa4-a4c9-447a-8bc1-68c105d2f0db/1/WhXjExiOI3tHIQ1D1RNMQcFtCZM.roa
Signing time: Sat 01 Jan 2022 08:57:53 +0000
ROA not before: Sat 01 Jan 2022 08:57:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57407
IP address blocks: 195.88.108.0/23 maxlen: 23
185.217.80.0/22 maxlen: 22
2001:67c:24f8::/48 maxlen: 48
2a0b:c6c0::/29 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122642774 (0x74f6156)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe5ca4e2a0a180eb2f29cc88740aa707b8821d7c
Validity
Not Before: Jan 1 08:57:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5a15e313188e237b47210d43d5134c41c16d0993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5c:7c:d3:c6:98:55:59:4c:fe:99:ea:69:6c:
ee:4e:10:29:d3:bd:8c:85:9f:83:61:a8:a3:1b:f8:
20:44:a7:80:2f:6d:2b:6e:31:3a:e9:8c:7c:b8:74:
cc:da:59:49:2b:93:ea:f3:99:f5:7a:14:bc:4d:ed:
75:34:f7:2b:7a:33:8e:d6:5a:4c:14:00:19:07:41:
04:28:87:ee:d0:9a:ee:3a:d0:fb:3c:9d:99:b7:14:
6a:4c:06:ff:ec:0f:3c:3c:6c:0b:90:0f:60:6d:05:
59:c6:f1:a7:fc:53:af:4e:99:e9:a8:84:2e:6e:4c:
76:63:9e:13:14:72:d3:67:3b:cf:04:d9:b5:bb:fe:
48:4e:f0:aa:7d:fd:9e:fb:df:18:c3:d3:c9:c2:ec:
a7:b5:3f:ed:18:9d:6a:05:2f:ae:10:c5:2f:7d:15:
c3:b7:e1:aa:8a:7b:a8:64:81:95:e0:1f:cd:5b:09:
4d:d2:41:32:a4:ad:42:69:0d:b0:6f:cd:1d:20:51:
47:87:e5:38:92:af:3c:17:7f:37:d8:d7:fb:a3:66:
d8:ac:3f:79:71:eb:64:b2:7b:01:41:02:4f:59:11:
fa:21:39:82:00:4f:c1:39:e2:9b:cc:27:eb:a4:15:
77:16:f3:ed:df:c2:8f:56:e5:f4:d8:f4:0a:d0:3c:
de:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:15:E3:13:18:8E:23:7B:47:21:0D:43:D5:13:4C:41:C1:6D:09:93
X509v3 Authority Key Identifier:
keyid:FE:5C:A4:E2:A0:A1:80:EB:2F:29:CC:88:74:0A:A7:07:B8:82:1D:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_lyk4qChgOsvKcyIdAqnB7iCHXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9c7aa4-a4c9-447a-8bc1-68c105d2f0db/1/WhXjExiOI3tHIQ1D1RNMQcFtCZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9c7aa4-a4c9-447a-8bc1-68c105d2f0db/1/_lyk4qChgOsvKcyIdAqnB7iCHXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.217.80.0/22
195.88.108.0/23
IPv6:
2001:67c:24f8::/48
2a0b:c6c0::/29
Signature Algorithm: sha256WithRSAEncryption
74:b8:f3:55:6a:c0:17:4c:ae:d4:26:9f:0e:79:f1:a9:0d:d0:
7f:1b:ff:f4:fd:41:7c:5e:cf:fe:5e:f6:05:68:cb:27:3f:58:
f5:56:ee:be:c3:70:13:33:9b:39:3e:95:ab:4a:d9:09:2d:bb:
bc:cf:3f:41:d1:d7:9c:fd:97:30:00:78:0b:4e:54:0f:6a:a4:
07:36:8b:d1:31:74:c2:73:71:c3:5d:ef:40:c4:a8:69:d8:3b:
f5:61:bc:85:26:a0:ff:d7:ae:de:a1:29:a3:7e:d4:7f:ed:e0:
27:32:dc:cb:21:50:83:fd:96:0b:18:d5:08:fd:45:ff:b1:3b:
88:c2:01:09:c2:da:77:3b:21:dc:d4:ba:e4:e6:bd:7f:45:b8:
50:24:d8:81:8e:7f:97:6d:db:da:9d:ac:d1:29:55:95:0e:74:
3c:d9:88:f7:65:83:66:dc:67:27:73:f3:fc:b8:8a:21:be:27:
56:c4:e1:ef:9f:20:54:92:ec:6a:34:3d:03:61:0f:40:d5:ed:
79:71:f5:02:f2:8e:50:bc:21:98:63:90:69:61:53:03:ae:82:
1c:30:69:08:df:f0:74:e8:3e:48:3c:04:fe:d4:2e:c6:d2:7e:
17:a0:cf:8a:3a:45:98:e9:61:e6:4c:fe:29:db:1f:bd:3c:57:
4a:08:12:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 21:57:28 2025 by rpki-client