Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/WVk_-X32aX_IkxeAsLXAKQ2rr-I.roa
File: WVk_-X32aX_IkxeAsLXAKQ2rr-I.roa (raw, json)
Hash identifier: cVIkPPMCS1nEN03wuhnP0uePa7S3p2Wo1BW93pn4UaM=
Subject key identifier: 59:59:3F:F9:7D:F6:69:7F:C8:93:17:80:B0:B5:C0:29:0D:AB:AF:E2
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0188BE30B85054A0F3B9B4EE6FAAB6F9DEE4
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/WVk_-X32aX_IkxeAsLXAKQ2rr-I.roa
Signing time: Thu 15 Jun 2023 08:34:03 +0000
ROA not before: Thu 15 Jun 2023 08:34:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49316
IP address blocks: 5.105.134.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:be:30:b8:50:54:a0:f3:b9:b4:ee:6f:aa:b6:f9:de:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jun 15 08:34:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=59593ff97df6697fc8931780b0b5c0290dabafe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:44:a4:36:1a:5b:96:c8:5b:7b:fc:f2:7f:4c:
f2:82:cb:e1:1b:66:f3:14:55:d4:db:db:d1:6b:75:
b7:43:39:ac:35:f4:36:58:44:6e:a6:3c:92:40:33:
86:1a:47:85:78:0c:81:83:07:1f:6f:d4:79:89:a0:
01:3a:8d:6a:f6:63:f8:86:c4:d7:bf:c4:b6:d7:46:
c2:50:68:af:e3:fb:06:e5:08:6f:01:ac:c8:c1:27:
0d:25:8c:93:b2:26:e7:de:2f:a1:02:38:ff:93:4e:
dc:b7:a3:a4:40:ab:e3:c8:63:e0:58:d3:a8:33:83:
85:58:7b:1e:23:55:93:b5:34:17:48:cb:53:9c:d8:
69:33:78:92:be:4d:a8:fc:72:0a:24:83:8a:63:90:
12:fb:40:cd:fb:3d:ba:e6:c0:bb:a4:8f:f1:95:14:
84:21:2c:08:17:dd:31:71:62:2a:d4:91:c4:5c:20:
1a:bc:ef:26:54:3c:5a:1e:a0:87:5c:12:f2:a9:14:
56:de:26:9f:59:19:e8:cd:f6:8d:f3:f9:6b:0c:e8:
33:3b:f0:76:45:a0:27:7b:56:20:95:fa:1b:a1:90:
44:df:28:f9:58:5a:e3:8f:6e:dd:c3:b1:e9:14:21:
45:b7:2f:3a:fe:24:b6:31:05:1b:f9:75:fd:ce:a3:
db:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:59:3F:F9:7D:F6:69:7F:C8:93:17:80:B0:B5:C0:29:0D:AB:AF:E2
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/WVk_-X32aX_IkxeAsLXAKQ2rr-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.134.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:3a:bb:ef:37:57:cc:ef:d8:97:7b:4d:d8:38:0b:01:96:8b:
da:c2:d1:ab:16:1c:87:9c:96:b0:ab:18:ec:e9:f6:6c:0f:9c:
f4:09:9d:d3:f1:68:5a:b3:a8:ca:eb:a9:43:d3:e0:ff:86:18:
89:fd:9a:3a:60:40:bb:40:b4:e4:48:55:3d:93:cb:d5:dc:ed:
e8:0e:13:3b:5a:fb:97:b1:8a:53:58:e5:a4:c3:b5:bb:95:00:
ca:90:ec:20:22:dc:f1:90:78:96:5b:8b:4e:e2:d8:09:fd:2c:
f1:a3:f8:ab:3a:26:17:bb:c0:ae:aa:6a:49:eb:b4:f8:98:a2:
be:fe:76:0b:83:af:3e:b7:c3:a7:8b:77:36:f6:a8:f7:a3:68:
76:df:54:a1:f0:c7:f1:a8:0e:d6:88:e8:13:b4:0c:45:c6:65:
89:c6:9c:46:9a:a8:0b:4a:72:51:5b:85:bb:ef:73:da:f2:89:
4f:fe:8d:c9:40:e5:2c:28:8b:26:e6:5c:a2:b5:d7:80:c2:27:
dc:64:df:09:5e:cc:13:27:07:bc:98:bc:34:c5:63:90:d7:e0:
09:b0:ab:c2:7e:ab:c0:e8:67:1f:57:8e:38:b5:4d:b6:7c:1a:
dd:be:3e:eb:b6:b3:db:9c:d9:1c:0b:87:e4:fc:1e:e2:3e:4c:
ba:a6:ef:ce
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYi+MLhQVKDzubTub6q2+d7kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjMwNjE1MDgzNDAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OTU5M2ZmOTdkZjY2OTdmYzg5MzE3ODBiMGI1YzAyOTBkYWJhZmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUSkNhpblshbe/zyf0zygsvhG2bz
FFXU29vRa3W3QzmsNfQ2WERupjySQDOGGkeFeAyBgwcfb9R5iaABOo1q9mP4hsTX
v8S210bCUGiv4/sG5QhvAazIwScNJYyTsibn3i+hAjj/k07ct6OkQKvjyGPgWNOo
M4OFWHseI1WTtTQXSMtTnNhpM3iSvk2o/HIKJIOKY5AS+0DN+z265sC7pI/xlRSE
ISwIF90xcWIq1JHEXCAavO8mVDxaHqCHXBLyqRRW3iafWRnozfaN8/lrDOgzO/B2
RaAne1YglfoboZBE3yj5WFrjj27dw7HpFCFFty86/iS2MQUb+XX9zqPbbwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFlZP/l99ml/yJMXgLC1wCkNq6/iMB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEvV1ZrXy1YMzJhWF9Ja3hlQXNMWEFLUTJyci1JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABWmGMA0G
CSqGSIb3DQEBCwUAA4IBAQDCOrvvN1fM79iXe03YOAsBlovawtGrFhyHnJawqxjs
6fZsD5z0CZ3T8Whas6jK66lD0+D/hhiJ/Zo6YEC7QLTkSFU9k8vV3O3oDhM7WvuX
sYpTWOWkw7W7lQDKkOwgItzxkHiWW4tO4tgJ/Szxo/irOiYXu8CuqmpJ67T4mKK+
/nYLg68+t8Oni3c29qj3o2h231Sh8MfxqA7WiOgTtAxFxmWJxpxGmqgLSnJRW4W7
73Pa8olP/o3JQOUsKIsm5lyitdeAwifcZN8JXswTJwe8mLw0xWOQ1+AJsKvCfqvA
6GcfV444tU22fBrdvj7rtrPbnNkcC4fk/B7iPky6pu/O
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:56:55 2025 by rpki-client