Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/WRBs3Y1KBkooQ1tfSMW8KoD9fmo.roa
File: WRBs3Y1KBkooQ1tfSMW8KoD9fmo.roa (raw, json)
Hash identifier: tmzyESD42i65c6NsIX4GqSgSoqpjNGT+Zdkcq2RdfOY=
Subject key identifier: 59:10:6C:DD:8D:4A:06:4A:28:43:5B:5F:48:C5:BC:2A:80:FD:7E:6A
Certificate issuer: /CN=c23642d1ab39d309ec5f33e4e8814adc3584825f
Certificate serial: 018644F05BA8A57BA1CD236C06D40ACB939D
Authority key identifier: C2:36:42:D1:AB:39:D3:09:EC:5F:33:E4:E8:81:4A:DC:35:84:82:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjZC0as50wnsXzPk6IFK3DWEgl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/WRBs3Y1KBkooQ1tfSMW8KoD9fmo.roa
Signing time: Sun 12 Feb 2023 09:24:08 +0000
ROA not before: Sun 12 Feb 2023 09:24:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42440
IP address blocks: 185.211.57.0/24 maxlen: 24
185.211.56.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:44:f0:5b:a8:a5:7b:a1:cd:23:6c:06:d4:0a:cb:93:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c23642d1ab39d309ec5f33e4e8814adc3584825f
Validity
Not Before: Feb 12 09:24:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=59106cdd8d4a064a28435b5f48c5bc2a80fd7e6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:9b:86:c6:91:ac:15:96:fb:11:bc:d1:b7:11:
f2:b9:12:7b:55:37:85:86:f8:0a:25:c3:6a:f9:7c:
ff:2d:2f:36:2f:ca:29:20:9d:bb:ef:ca:1a:89:9f:
64:66:50:1c:69:62:6d:c7:35:2d:dd:4c:fb:0c:d5:
3d:fd:39:f0:a1:0b:13:00:c9:43:69:79:9d:81:46:
84:40:e9:a1:f6:74:28:9e:5a:e0:4f:aa:9b:06:95:
20:60:e5:df:d2:49:6f:51:bf:7b:59:73:6f:54:1f:
79:7b:57:70:7d:e7:c1:5f:60:d1:5b:5a:fa:c3:d1:
62:79:37:97:61:e0:7a:f4:de:f6:64:f7:82:df:06:
fb:7b:59:b8:28:33:0f:19:20:2d:5e:6e:1b:98:d4:
be:ae:6f:6d:48:ed:43:19:90:5a:bd:d2:46:52:01:
0c:d5:a5:d4:49:13:ea:db:c0:5c:80:7a:bf:ab:4e:
d7:01:df:27:06:27:cd:7c:af:ab:da:9f:71:db:25:
f8:c7:68:4d:99:a6:0a:fd:99:89:e5:92:1f:f1:83:
0d:0d:c7:d4:cc:92:f0:0b:28:80:d8:f9:fd:bc:50:
3d:9d:64:d3:32:6d:99:db:22:97:72:77:e9:f6:b7:
3a:ab:ee:40:8d:9e:85:2a:a1:76:bc:e3:62:20:d6:
4e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:10:6C:DD:8D:4A:06:4A:28:43:5B:5F:48:C5:BC:2A:80:FD:7E:6A
X509v3 Authority Key Identifier:
keyid:C2:36:42:D1:AB:39:D3:09:EC:5F:33:E4:E8:81:4A:DC:35:84:82:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjZC0as50wnsXzPk6IFK3DWEgl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/WRBs3Y1KBkooQ1tfSMW8KoD9fmo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.211.56.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:95:60:95:8a:e2:59:47:14:88:0e:f2:f0:9a:8e:b6:eb:92:
25:88:23:b8:df:5c:47:23:bf:01:bb:fd:a0:81:37:a8:1e:ce:
8d:97:be:46:cc:11:d9:1c:07:a6:53:03:07:cf:cc:07:d7:ba:
c6:ae:45:ed:3b:b3:dc:e8:13:c2:93:cb:e7:c7:0e:88:31:cb:
ec:57:79:ad:1a:b4:d7:77:4e:77:89:e8:8b:9e:22:24:bb:aa:
35:a6:3e:d8:f6:24:bf:8d:ae:22:38:ef:f4:95:e4:ed:c0:ea:
ab:ea:f7:7b:bd:42:97:a9:06:c8:ee:88:37:ed:ec:46:92:5a:
b1:10:e0:89:be:39:e0:b1:b1:28:7a:fa:db:73:1b:9a:7c:46:
32:a2:60:9a:82:52:ea:37:1b:19:5e:dd:38:1c:5a:74:5d:fc:
5f:70:82:c2:bc:47:b0:5f:c7:14:02:28:8d:b2:a8:9a:ec:73:
a0:60:59:62:81:20:fc:72:29:04:73:16:1e:1a:32:52:1a:c5:
49:b4:34:1e:7f:5f:ac:b2:4b:99:f3:92:2b:2f:45:ef:c8:42:
22:47:d4:72:4c:82:a3:c5:08:52:7c:52:2a:84:b9:ab:e3:20:
89:3d:ae:53:24:a7:06:d5:07:bf:0d:f9:2e:dc:05:01:25:66:
55:0a:19:1d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYZE8FuopXuhzSNsBtQKy5OdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyMzY0MmQxYWIzOWQzMDllYzVmMzNlNGU4ODE0YWRjMzU4
NDgyNWYwHhcNMjMwMjEyMDkyNDA4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OTEwNmNkZDhkNGEwNjRhMjg0MzViNWY0OGM1YmMyYTgwZmQ3ZTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZuGxpGsFZb7EbzRtxHyuRJ7VTeF
hvgKJcNq+Xz/LS82L8opIJ2778oaiZ9kZlAcaWJtxzUt3Uz7DNU9/TnwoQsTAMlD
aXmdgUaEQOmh9nQonlrgT6qbBpUgYOXf0klvUb97WXNvVB95e1dwfefBX2DRW1r6
w9FieTeXYeB69N72ZPeC3wb7e1m4KDMPGSAtXm4bmNS+rm9tSO1DGZBavdJGUgEM
1aXUSRPq28BcgHq/q07XAd8nBifNfK+r2p9x2yX4x2hNmaYK/ZmJ5ZIf8YMNDcfU
zJLwCyiA2Pn9vFA9nWTTMm2Z2yKXcnfp9rc6q+5AjZ6FKqF2vONiINZOcwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFkQbN2NSgZKKENbX0jFvCqA/X5qMB8GA1UdIwQY
MBaAFMI2QtGrOdMJ7F8z5OiBStw1hIJfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2paQzBhczUwd25zWHpQazZJRkszRFdFZ2w4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9lNDE2OTgtZTdhYy00MThjLWI5MWQt
MjI2Nzk2OGI2NTJmLzEvV1JCczNZMUtCa29vUTF0ZlNNVzhLb0Q5Zm1vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9lNDE2OTgtZTdhYy00MThjLWI5MWQtMjI2Nzk2OGI2NTJm
LzEvd2paQzBhczUwd25zWHpQazZJRkszRFdFZ2w4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBudM4MA0G
CSqGSIb3DQEBCwUAA4IBAQB7lWCViuJZRxSIDvLwmo6265IliCO431xHI78Bu/2g
gTeoHs6Nl75GzBHZHAemUwMHz8wH17rGrkXtO7Pc6BPCk8vnxw6IMcvsV3mtGrTX
d053ieiLniIku6o1pj7Y9iS/ja4iOO/0leTtwOqr6vd7vUKXqQbI7og37exGklqx
EOCJvjngsbEoevrbcxuafEYyomCaglLqNxsZXt04HFp0XfxfcILCvEewX8cUAiiN
sqia7HOgYFligSD8cikEcxYeGjJSGsVJtDQef1+sskuZ85IrL0XvyEIiR9RyTIKj
xQhSfFIqhLmr4yCJPa5TJKcG1Qe/Dfku3AUBJWZVChkd
-----END CERTIFICATE-----
Generated at Tue Apr 15 19:56:19 2025 by rpki-client