Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/0bd15a-4c49-40fc-9192-b2a47ed416b2/1/wfssV_l8UNPiBf7Hvv4LAK3RgI8.roa
File: wfssV_l8UNPiBf7Hvv4LAK3RgI8.roa (raw, json)
Hash identifier: e4TvTRjHbXkUzGb7TCDpefDs0IZOhskAliayQUpny8I=
Subject key identifier: C1:FB:2C:57:F9:7C:50:D3:E2:05:FE:C7:BE:FE:0B:00:AD:D1:80:8F
Certificate issuer: /CN=8174861ddef06a073523c9939168d5b7169d6875
Certificate serial: 01888BFFA8923A6E1251C5932BB5085670EB
Authority key identifier: 81:74:86:1D:DE:F0:6A:07:35:23:C9:93:91:68:D5:B7:16:9D:68:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gXSGHd7wagc1I8mTkWjVtxadaHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/0bd15a-4c49-40fc-9192-b2a47ed416b2/1/wfssV_l8UNPiBf7Hvv4LAK3RgI8.roa
Signing time: Mon 05 Jun 2023 14:39:27 +0000
ROA not before: Mon 05 Jun 2023 14:39:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213241
IP address blocks: 84.38.249.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8b:ff:a8:92:3a:6e:12:51:c5:93:2b:b5:08:56:70:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8174861ddef06a073523c9939168d5b7169d6875
Validity
Not Before: Jun 5 14:39:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c1fb2c57f97c50d3e205fec7befe0b00add1808f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:50:42:5b:b9:aa:e1:8f:84:00:24:23:2c:9d:
5a:0d:27:f3:4d:4f:25:c5:fb:57:dd:81:1f:22:a0:
57:5f:c6:76:aa:8a:35:3f:23:24:cf:43:91:3a:b9:
95:cf:51:56:14:86:b9:d9:71:ef:ba:f3:5a:e2:fc:
68:13:fa:cd:af:fa:6b:6e:ed:27:8f:19:4a:75:70:
5f:0c:f9:d2:49:b6:25:97:b9:09:b1:be:9b:7a:cd:
8d:87:be:3e:f2:7c:02:60:94:d5:bb:0a:cb:76:62:
f3:e0:28:62:e8:cd:02:38:7c:e4:b8:09:4c:6c:56:
86:2b:e9:23:7c:d4:6c:e3:28:92:18:f2:a1:68:60:
23:3a:62:c1:7e:10:7c:fa:d4:e6:10:50:49:fd:70:
c8:0e:85:08:65:70:ff:81:91:49:5a:b0:0d:df:d8:
95:0c:4b:71:f7:52:98:0f:27:8c:45:5c:90:17:cc:
1b:f1:56:3e:70:ef:87:1b:b5:06:71:0b:50:73:76:
21:03:ee:b5:ab:ff:e9:33:09:2e:23:24:04:48:b3:
9e:e5:78:d0:48:ac:da:31:2b:4c:f2:e2:70:d0:94:
83:9d:8a:c6:93:42:40:74:b5:bb:86:ca:c2:94:23:
b6:e0:8f:a5:8d:fc:06:6c:ad:2d:2c:64:aa:40:92:
aa:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:FB:2C:57:F9:7C:50:D3:E2:05:FE:C7:BE:FE:0B:00:AD:D1:80:8F
X509v3 Authority Key Identifier:
keyid:81:74:86:1D:DE:F0:6A:07:35:23:C9:93:91:68:D5:B7:16:9D:68:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gXSGHd7wagc1I8mTkWjVtxadaHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0bd15a-4c49-40fc-9192-b2a47ed416b2/1/wfssV_l8UNPiBf7Hvv4LAK3RgI8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0bd15a-4c49-40fc-9192-b2a47ed416b2/1/gXSGHd7wagc1I8mTkWjVtxadaHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.38.249.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:59:16:8c:99:ac:30:63:4e:1a:2d:61:6b:cf:fc:33:61:8b:
ad:9f:79:79:b8:ec:37:84:07:21:ac:0c:60:2c:2c:97:fe:16:
c1:84:03:03:04:a0:a6:fa:93:89:5b:ef:1a:ce:86:56:e1:19:
43:53:8e:9e:d7:bd:ea:2a:85:38:b8:5c:52:37:f5:76:a4:64:
b0:0e:37:65:1b:eb:5d:32:fe:b0:36:77:d3:8e:83:45:22:d5:
98:17:44:d9:5b:d9:e0:12:f5:6f:1c:a7:3e:2a:7e:cc:7b:14:
ee:ff:c1:e8:81:42:6e:c8:8a:90:29:f0:dc:50:8b:93:39:53:
02:9e:7a:75:fe:5e:4a:79:fe:78:5c:b0:62:da:3b:8f:60:f1:
3d:c9:c5:15:cb:fa:de:a0:5d:47:79:62:b4:66:7b:3f:7b:2f:
3d:2b:99:f1:93:08:4d:eb:ac:3a:18:c0:08:3b:50:3e:ba:93:
ec:0d:c5:c1:f6:b6:9a:23:0d:f2:bb:3d:ba:ea:b9:ee:8f:c0:
5a:67:aa:61:62:2a:66:06:36:17:61:8a:71:b7:e5:08:c9:33:
a5:0e:2a:67:6d:ef:85:3b:eb:c4:e7:dc:35:cc:f5:25:64:59:
79:7b:72:e9:54:2a:56:5f:2e:f7:5e:c0:c6:4c:4e:4e:b8:f7:
95:b5:3b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:19:19 2025 by rpki-client