Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/WVMyAIKn9WVa_msBBSA0-QufdWw.roa
File: WVMyAIKn9WVa_msBBSA0-QufdWw.roa (raw, json)
Hash identifier: NukNlhoewrPWcHLJ9mBHoOFkxywKfjJZP500/1oTfKI=
Subject key identifier: 59:53:32:00:82:A7:F5:65:5A:FE:6B:01:05:20:34:F9:0B:9F:75:6C
Certificate issuer: /CN=202f4c1a37e9313cdd2eea7750ae028d18cd5aae
Certificate serial: 018572559D1804EC75E951CF45F4487D9E39
Authority key identifier: 20:2F:4C:1A:37:E9:31:3C:DD:2E:EA:77:50:AE:02:8D:18:CD:5A:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IC9MGjfpMTzdLup3UK4CjRjNWq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/WVMyAIKn9WVa_msBBSA0-QufdWw.roa
Signing time: Mon 02 Jan 2023 11:54:51 +0000
ROA not before: Mon 02 Jan 2023 11:54:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35179
IP address blocks: 212.127.78.0/24 maxlen: 24
212.127.88.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:55:9d:18:04:ec:75:e9:51:cf:45:f4:48:7d:9e:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=202f4c1a37e9313cdd2eea7750ae028d18cd5aae
Validity
Not Before: Jan 2 11:54:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5953320082a7f5655afe6b01052034f90b9f756c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b6:aa:54:c3:62:46:39:95:3a:2d:d3:b8:e6:
26:55:6a:4d:51:16:73:cd:41:1d:f1:32:36:56:c0:
9d:d2:72:cf:4f:c2:72:73:0e:b4:c8:3f:66:1c:ad:
e4:1c:1c:db:e0:32:f6:d3:fc:db:04:c2:33:ff:35:
ea:36:ec:7c:60:38:40:c7:f4:68:e8:53:eb:74:6b:
b6:0d:9c:88:e2:ef:4c:cc:7e:51:33:d6:e6:0d:a8:
38:66:58:19:f4:72:8b:94:9f:7c:30:e5:f4:7a:b3:
77:a8:c7:14:9b:26:ba:75:92:b2:01:7c:62:2b:44:
6c:c0:f9:0e:32:35:6e:32:21:02:ad:33:c3:5d:eb:
9e:7f:ea:0b:88:27:26:97:76:9e:2b:93:ba:b7:db:
13:78:fc:bc:50:f9:13:7b:d7:45:eb:82:57:9f:e5:
3c:51:9d:18:b1:6d:9a:28:f3:92:ee:e9:8b:31:3a:
ea:d9:0a:94:1e:47:d5:55:89:4d:23:17:44:04:d6:
51:15:83:27:7f:97:41:75:fd:62:af:c2:88:30:0d:
14:9f:97:88:cb:eb:c7:bf:57:e4:2a:07:d1:e4:01:
09:f9:b9:00:54:7a:ce:35:b9:de:4d:a0:eb:ff:87:
de:22:b9:b7:3b:b9:3f:fe:01:16:24:a0:ee:ab:c9:
60:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:53:32:00:82:A7:F5:65:5A:FE:6B:01:05:20:34:F9:0B:9F:75:6C
X509v3 Authority Key Identifier:
keyid:20:2F:4C:1A:37:E9:31:3C:DD:2E:EA:77:50:AE:02:8D:18:CD:5A:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IC9MGjfpMTzdLup3UK4CjRjNWq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/WVMyAIKn9WVa_msBBSA0-QufdWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.127.78.0/24
212.127.88.0/21
Signature Algorithm: sha256WithRSAEncryption
6e:11:a0:dd:63:d0:54:7e:33:dd:be:1d:76:f8:ce:e3:4a:6a:
1c:12:ba:be:4c:0a:62:89:97:07:28:16:74:23:85:64:f4:19:
fe:f4:71:a4:00:64:be:d7:50:d4:6e:8f:9a:9f:1a:83:9a:8d:
61:e3:83:47:4b:8b:44:b5:ea:9a:75:22:be:0c:2a:53:60:2b:
15:8b:6e:f8:22:f4:7c:2e:a9:0f:32:4f:e4:0e:11:86:48:41:
70:e4:7f:ab:f6:41:c9:aa:91:8a:55:51:5e:5e:f8:9a:41:97:
98:08:a6:d3:7f:52:5b:cc:14:2e:b0:3b:f3:ce:80:51:53:37:
da:da:87:e3:10:4e:d8:7d:d2:ae:d2:a7:b6:2b:01:90:08:39:
20:87:fb:20:6c:64:48:c1:56:53:62:08:d9:c6:b9:ba:1d:c1:
8b:03:1b:c9:e8:9e:16:02:65:f0:6e:67:38:d8:3d:5a:b0:49:
35:35:d0:62:e3:9c:91:03:87:11:6a:7b:81:8e:ac:cb:3d:3d:
86:ef:02:41:ad:16:c8:4b:d5:ac:2b:36:45:2e:45:8d:c3:ca:
f0:93:0d:f6:a9:27:6c:62:ec:43:47:0a:81:0a:6a:38:aa:ff:
84:3e:dd:92:56:31:fb:36:03:f5:5e:43:45:d1:1c:b7:7c:98:
7d:f2:6e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:33:09 2025 by rpki-client