Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/WtiK4YeW8PZKkstplyW_o24hEng.roa
File: WtiK4YeW8PZKkstplyW_o24hEng.roa (raw, json)
Hash identifier: T9+22izBWQGGZ+OSuoiuPCeCYJqPMVWXxmcFaFDL/SA=
Subject key identifier: 5A:D8:8A:E1:87:96:F0:F6:4A:92:CB:69:97:25:BF:A3:6E:21:12:78
Certificate issuer: /CN=05cf6ad9cbe9f7b2863e0cec36c153c5d0736ae2
Certificate serial: 01856BC10C6BC1B1DF5F3F7227FBD534A2E7
Authority key identifier: 05:CF:6A:D9:CB:E9:F7:B2:86:3E:0C:EC:36:C1:53:C5:D0:73:6A:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bc9q2cvp97KGPgzsNsFTxdBzauI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/WtiK4YeW8PZKkstplyW_o24hEng.roa
Signing time: Sun 01 Jan 2023 05:14:51 +0000
ROA not before: Sun 01 Jan 2023 05:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 137
IP address blocks: 149.132.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:c1:0c:6b:c1:b1:df:5f:3f:72:27:fb:d5:34:a2:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05cf6ad9cbe9f7b2863e0cec36c153c5d0736ae2
Validity
Not Before: Jan 1 05:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5ad88ae18796f0f64a92cb699725bfa36e211278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f4:9b:c5:99:25:e9:6e:25:53:86:a4:68:74:
ad:03:2b:8a:54:61:7d:80:8f:11:ba:ed:4b:50:67:
ad:8c:a8:26:62:49:83:34:6a:8a:fe:9c:33:ca:40:
f4:39:34:2f:4a:a2:54:91:91:21:25:e3:07:9c:bd:
a4:0e:a2:b6:f5:a6:e9:ee:dd:a7:fe:73:99:26:aa:
38:5e:6e:dd:7f:1a:73:ec:6a:d2:fd:97:0d:27:3f:
82:4e:91:5b:1c:2a:d7:8d:a9:72:0f:6e:76:be:0d:
65:75:91:23:db:01:66:1f:9c:30:46:ac:4f:6e:6d:
46:1c:a2:e4:8b:20:71:7e:4b:34:fb:f8:c6:49:3b:
cc:49:6a:85:b1:1a:f2:57:07:2d:d0:4a:5c:9f:6c:
bc:38:a0:ea:a4:6a:f9:bf:9b:c2:87:8f:e7:40:b8:
de:35:6d:55:bc:7c:93:d5:a2:0e:89:7f:28:c4:78:
b2:6f:35:13:de:0f:32:62:3b:fd:91:47:8d:72:63:
73:72:22:77:bd:0d:f0:5f:61:e7:44:90:2e:cf:ec:
a5:c7:4b:f5:f8:6e:f9:e1:ab:22:68:61:04:2d:13:
1d:85:10:ff:82:cd:80:da:6c:46:bb:8f:56:06:74:
07:a7:f9:91:18:40:42:0b:a3:c7:dc:da:00:30:3a:
28:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:D8:8A:E1:87:96:F0:F6:4A:92:CB:69:97:25:BF:A3:6E:21:12:78
X509v3 Authority Key Identifier:
keyid:05:CF:6A:D9:CB:E9:F7:B2:86:3E:0C:EC:36:C1:53:C5:D0:73:6A:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bc9q2cvp97KGPgzsNsFTxdBzauI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/WtiK4YeW8PZKkstplyW_o24hEng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.132.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4e:f2:f9:27:f8:a6:2d:cd:59:ca:2b:d5:6e:89:35:89:5d:07:
d6:ca:54:05:ba:a2:41:af:50:6e:ea:99:7e:09:b7:3d:10:b3:
01:97:aa:0d:f1:66:28:83:1a:5c:9a:72:87:3a:9a:fd:a4:0a:
d7:7c:e4:ba:99:77:a1:08:65:9b:a8:de:2f:e0:4b:14:98:08:
3d:ec:fc:6a:e3:f5:0f:59:3f:06:21:92:7d:bd:7c:54:65:5d:
82:a7:80:0e:06:a2:7c:fd:f6:4e:9b:c4:7e:14:2d:48:79:ca:
80:c3:80:9a:a2:58:31:d5:f1:c3:fd:a7:09:37:c1:9b:36:a9:
50:3f:41:a3:f4:9a:6e:34:18:e5:3f:75:5a:9e:02:bd:f6:cc:
23:b5:1e:82:b6:5e:66:3c:6c:f3:35:07:66:18:e2:89:d0:be:
0c:cf:d3:6f:f1:a0:8b:a4:3c:86:e8:ca:78:69:35:9f:eb:f4:
e1:f5:87:b7:6b:a1:d6:03:0c:49:d5:dc:1e:e4:b3:19:4d:51:
e2:22:da:81:cb:96:f0:8c:fb:22:e9:2f:81:30:51:83:d7:e4:
2a:58:0b:5c:e7:ab:01:57:da:61:b1:f5:e6:0c:f6:6a:4b:a7:
c5:cb:92:96:53:1e:77:ef:56:e5:bf:83:ef:4b:a9:db:1e:e9:
53:8a:2b:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:50:53 2025 by rpki-client