Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/cwkr7qpzV2tn_vv7k1RmZjC3d9Y.roa
File: cwkr7qpzV2tn_vv7k1RmZjC3d9Y.roa (raw, json)
Hash identifier: ZxjUn4AeWE61ZWPLZs8Rgtue2lx46QN9F4jdRtj4EUU=
Subject key identifier: 73:09:2B:EE:AA:73:57:6B:67:FE:FB:FB:93:54:66:66:30:B7:77:D6
Certificate issuer: /CN=8ac14985cb544c6d23d19bb43ac93711afe91f18
Certificate serial: 038D2ADD
Authority key identifier: 8A:C1:49:85:CB:54:4C:6D:23:D1:9B:B4:3A:C9:37:11:AF:E9:1F:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/isFJhctUTG0j0Zu0Osk3Ea_pHxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/cwkr7qpzV2tn_vv7k1RmZjC3d9Y.roa
Signing time: Sat 01 Jan 2022 16:03:29 +0000
ROA not before: Sat 01 Jan 2022 16:03:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51621
IP address blocks: 185.216.49.0/24 maxlen: 24
2a10:a900::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59583197 (0x38d2add)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ac14985cb544c6d23d19bb43ac93711afe91f18
Validity
Not Before: Jan 1 16:03:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=73092beeaa73576b67fefbfb9354666630b777d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:2d:0a:49:d2:61:d4:29:44:5e:8d:95:44:0b:
b2:c7:37:da:19:05:01:f6:47:69:a4:ce:95:92:d5:
cd:2c:78:07:b7:9b:ca:37:e3:a2:de:f0:f5:93:59:
cc:3d:db:0d:12:5e:32:73:d3:e0:ca:20:71:1f:cb:
68:e5:c0:54:82:35:d7:84:98:1a:8b:56:06:38:18:
11:2f:8f:4d:42:30:6c:60:f9:fc:e4:80:53:3c:b6:
f6:f7:29:86:61:5e:79:69:af:5d:81:13:db:fa:66:
15:e4:09:9b:b9:62:e3:cd:ea:4b:58:47:88:32:ed:
23:18:11:90:6d:88:4a:f8:18:e3:cd:74:64:3d:69:
96:d4:fc:a1:85:ad:fe:73:cf:16:f0:38:18:ba:90:
b1:c2:69:2c:de:7c:44:7e:6a:8a:92:77:2e:5a:3f:
20:dc:1d:72:73:05:63:8e:4e:50:7d:ad:57:7c:bc:
f8:0a:62:8f:9c:82:a5:ae:8e:ef:05:c4:27:66:b9:
7b:ef:f2:04:03:32:bb:5d:7d:a7:8d:27:62:b5:0c:
98:46:00:2c:55:e3:17:35:05:fd:dc:3b:fc:37:e3:
a8:2e:f6:2f:2f:2f:e0:dd:cd:e5:62:8d:17:53:3a:
cb:39:ae:88:be:ff:c5:4d:d0:d4:c9:43:ed:db:9a:
57:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:09:2B:EE:AA:73:57:6B:67:FE:FB:FB:93:54:66:66:30:B7:77:D6
X509v3 Authority Key Identifier:
keyid:8A:C1:49:85:CB:54:4C:6D:23:D1:9B:B4:3A:C9:37:11:AF:E9:1F:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/isFJhctUTG0j0Zu0Osk3Ea_pHxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/cwkr7qpzV2tn_vv7k1RmZjC3d9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.216.49.0/24
IPv6:
2a10:a900::/29
Signature Algorithm: sha256WithRSAEncryption
b3:6f:25:bd:07:d7:ae:ee:c3:f2:c9:90:4b:ad:05:2a:fb:d6:
65:f1:d2:c2:70:90:8e:80:ea:c2:3b:ea:83:d1:f4:45:80:43:
be:41:8c:4a:af:1b:ef:44:b1:f9:22:7e:a9:16:b4:90:d3:df:
33:3e:69:19:6d:f4:8d:e8:ee:03:86:a7:20:49:9e:6e:22:ad:
5f:85:38:c7:da:02:61:26:c2:fc:46:94:76:3e:34:00:ac:93:
89:d2:2e:17:11:a9:de:43:7b:74:81:0f:b9:8b:48:28:e1:e9:
b7:bd:34:84:2b:d3:ec:90:2e:17:8e:64:eb:a6:e3:1b:e9:6a:
12:6a:58:11:aa:a3:4b:ef:d5:08:c2:06:05:65:30:b3:5b:84:
df:09:27:b6:4b:db:77:4d:a4:24:cb:8c:02:0a:44:b6:b0:a4:
22:a1:c2:de:85:37:ad:0a:65:4e:2d:5f:cc:8f:be:a9:52:0c:
db:92:70:f9:b0:f3:e0:b2:c6:cd:a1:0a:cb:25:2f:cd:0e:7c:
f6:d6:6f:5c:1c:c7:8f:65:90:42:45:0c:6d:a6:44:6f:69:1e:
e7:21:66:a0:8e:b4:85:4e:7a:1b:3e:7b:6a:04:60:f0:35:a9:
23:6d:e0:1c:07:da:0a:50:15:c4:0a:87:2a:37:88:ea:1b:5c:
c0:98:63:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:35:49 2025 by rpki-client