Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/WaprtBlPxhkYrI2S1ZTd1eFUdN4.roa
File: WaprtBlPxhkYrI2S1ZTd1eFUdN4.roa (raw, json)
Hash identifier: on199a91jvUCmSAHIG11oiL2h5I504e91EllGh9ZSWk=
Subject key identifier: 59:AA:6B:B4:19:4F:C6:19:18:AC:8D:92:D5:94:DD:D5:E1:54:74:DE
Certificate issuer: /CN=b3dd11d346b63bb1eb22a07c26cc1291a2a06895
Certificate serial: 01856E14406349DCF3C0E176980B8F2373F8
Authority key identifier: B3:DD:11:D3:46:B6:3B:B1:EB:22:A0:7C:26:CC:12:91:A2:A0:68:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s90R00a2O7HrIqB8JswSkaKgaJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/WaprtBlPxhkYrI2S1ZTd1eFUdN4.roa
Signing time: Sun 01 Jan 2023 16:04:59 +0000
ROA not before: Sun 01 Jan 2023 16:04:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209260
IP address blocks: 185.63.33.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:14:40:63:49:dc:f3:c0:e1:76:98:0b:8f:23:73:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3dd11d346b63bb1eb22a07c26cc1291a2a06895
Validity
Not Before: Jan 1 16:04:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=59aa6bb4194fc61918ac8d92d594ddd5e15474de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:46:aa:47:67:d9:ed:d3:aa:64:b9:4a:2d:fd:
44:ca:a0:3b:70:ce:ec:dc:b1:35:7b:f3:cd:2d:e2:
e7:3a:99:06:8d:a2:b9:b9:b7:37:70:0b:5e:88:4c:
df:45:bf:f9:c5:3e:36:76:6b:45:ac:a3:9f:15:58:
fc:2c:9f:8c:5e:a9:a0:a8:91:cf:66:ac:f6:5f:21:
f4:8d:03:05:12:54:bf:10:63:b5:00:ec:4b:40:a9:
1a:5d:bd:bd:59:75:58:ff:ae:23:d5:16:93:42:6a:
bb:5a:2c:28:7a:03:d8:83:be:58:79:c7:df:6a:bd:
88:46:43:79:92:6f:91:54:8a:f6:38:1f:c8:ec:66:
4d:90:03:5e:93:bc:5a:9a:b9:38:bb:27:2f:0a:9e:
6e:c3:b3:18:e1:4b:55:ea:d6:a7:d0:79:50:54:19:
6d:c9:aa:9a:0e:e6:c7:cb:b5:21:fc:e6:b0:93:2d:
ac:2e:0f:af:df:7f:e6:d7:cd:3f:12:c4:1b:7f:eb:
46:ce:26:be:16:2e:ab:04:c0:34:ae:4c:d4:85:82:
2b:19:21:3a:6c:06:5e:2e:ae:e6:c3:f6:95:5c:62:
98:7a:d3:4a:17:b1:2b:0e:9b:7e:31:6d:56:79:a5:
11:68:42:13:27:a8:85:f1:b8:9e:8a:d3:a0:8f:5b:
be:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:AA:6B:B4:19:4F:C6:19:18:AC:8D:92:D5:94:DD:D5:E1:54:74:DE
X509v3 Authority Key Identifier:
keyid:B3:DD:11:D3:46:B6:3B:B1:EB:22:A0:7C:26:CC:12:91:A2:A0:68:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s90R00a2O7HrIqB8JswSkaKgaJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/WaprtBlPxhkYrI2S1ZTd1eFUdN4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.63.33.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:f6:cf:d5:db:05:58:e2:b8:26:a4:2f:df:d7:23:be:13:eb:
94:d8:d0:ed:c0:22:ad:29:ee:37:6e:4f:db:43:42:07:bc:11:
0b:19:73:b8:0c:42:a3:dc:ae:85:50:20:7e:eb:0a:46:f5:09:
df:14:80:f4:ff:15:e0:05:89:08:02:51:53:08:ee:12:82:03:
67:b6:cd:31:db:ac:6a:8c:97:1a:ee:0f:eb:b3:6d:5b:ab:95:
27:1e:8e:68:f4:f3:f1:ef:63:32:2f:96:64:ae:bb:df:97:81:
a3:4b:e9:4b:d4:d0:2f:05:e4:be:24:4c:45:76:f5:94:04:cf:
50:32:ab:74:08:4f:a7:ae:55:08:b8:e4:83:2c:51:3c:c1:af:
00:0c:14:8d:54:81:29:b3:a0:a7:4b:a9:d7:5d:0c:93:8b:a1:
de:8b:f6:9e:3c:ed:0a:38:82:50:eb:25:80:57:10:a3:78:44:
fe:89:51:4b:8e:a8:3b:59:c6:8d:b8:f7:26:1a:7e:de:a9:2a:
2a:7f:a5:1f:62:85:2e:b5:7f:fc:34:05:95:46:e8:16:34:8f:
dc:45:8c:51:b9:a4:84:f3:ee:18:7d:5e:e6:a9:ac:54:0b:41:
b7:ec:aa:0f:09:10:e6:96:08:fb:71:49:05:b3:cb:29:84:20:
3b:bc:f5:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 05:30:00 2025 by rpki-client