Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/WRKojrBMR5shEpopfF0AovlMSKI.roa
File: WRKojrBMR5shEpopfF0AovlMSKI.roa (raw, json)
Hash identifier: 9V+Slx4wK8pkNb/AqGEWJK9PxljjbV/q1EFMaalr82g=
Subject key identifier: 59:12:A8:8E:B0:4C:47:9B:21:12:9A:29:7C:5D:00:A2:F9:4C:48:A2
Certificate issuer: /CN=ab8c6c58b607ff23ae7175a61682c75480f1e214
Certificate serial: 01857283740DFCA7DC66A7FDBF1187944D20
Authority key identifier: AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/WRKojrBMR5shEpopfF0AovlMSKI.roa
Signing time: Mon 02 Jan 2023 12:44:55 +0000
ROA not before: Mon 02 Jan 2023 12:44:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57444
IP address blocks: 188.247.234.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:83:74:0d:fc:a7:dc:66:a7:fd:bf:11:87:94:4d:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab8c6c58b607ff23ae7175a61682c75480f1e214
Validity
Not Before: Jan 2 12:44:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5912a88eb04c479b21129a297c5d00a2f94c48a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c3:06:c8:44:52:ad:59:b6:b4:09:5b:0b:e1:
e8:a6:d4:72:59:8b:4d:f5:8f:78:f9:4b:4e:63:02:
7a:da:82:29:98:a7:18:c8:b9:0a:2c:3c:c5:4f:88:
06:50:b1:32:83:41:9b:f5:95:48:05:a9:80:db:ab:
50:7a:2a:01:a5:b1:85:0c:6c:58:f2:1d:fc:cc:b6:
70:e9:2f:e0:a2:e6:e2:b3:08:9d:34:6c:ed:fd:59:
6f:c6:39:b3:c2:6e:95:ad:f5:2d:b3:2b:09:e9:d8:
f8:7b:ad:87:f0:58:8e:fd:8f:22:15:2e:e6:ed:64:
4d:be:7d:b0:b5:89:c6:c5:f6:46:11:52:72:d0:fb:
76:1f:18:8c:51:03:d2:17:13:c4:e1:3e:c9:85:68:
b0:43:87:b4:c5:cc:13:44:ac:55:68:d3:55:e8:25:
61:19:42:a9:e8:f6:d2:ad:f2:30:71:49:13:29:1b:
1d:72:e9:e3:03:75:8f:34:30:c2:3f:cb:6d:0f:d9:
51:60:14:8b:33:84:71:fb:cc:91:5c:82:85:ff:76:
a2:8d:47:5f:94:36:90:59:5a:9e:05:6c:30:93:28:
37:7b:11:ff:d3:0b:c5:6f:77:c7:4a:08:1d:fa:98:
5c:4e:6a:bd:80:f3:f0:ee:8a:01:38:11:68:3b:90:
32:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:12:A8:8E:B0:4C:47:9B:21:12:9A:29:7C:5D:00:A2:F9:4C:48:A2
X509v3 Authority Key Identifier:
keyid:AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/WRKojrBMR5shEpopfF0AovlMSKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.247.234.0/24
Signature Algorithm: sha256WithRSAEncryption
14:41:72:d0:ca:7f:a8:32:d8:a3:30:91:22:bc:1f:5c:48:15:
ee:b9:14:35:27:c8:ce:6d:04:ad:e6:2f:14:63:fc:13:0a:d7:
95:ee:ee:d3:e8:75:20:ae:ee:74:55:2a:54:1b:5f:10:26:c4:
c1:84:04:1f:49:88:fe:f3:50:df:cb:80:55:a1:f2:cb:e9:49:
f8:af:66:c4:46:56:c1:8d:6e:63:27:94:ac:9d:d0:67:eb:7d:
30:0a:80:95:07:bb:ce:41:79:01:ee:09:b7:57:a1:6e:7c:d2:
23:fe:eb:07:8a:b6:bb:9d:75:a4:13:6f:24:9c:bb:a5:96:b9:
ca:42:39:5a:3b:87:17:a2:7c:4f:15:80:5b:c2:28:d7:a3:41:
b1:3c:f7:d7:34:f5:b8:35:bd:33:2d:00:11:30:00:aa:14:de:
63:35:87:2d:f5:90:b4:0c:1f:dd:1c:f6:65:f8:ea:b8:2c:40:
e5:e1:a9:60:58:34:6c:71:8d:78:e2:a8:b6:4c:aa:b1:8d:01:
67:96:f9:1d:82:d6:70:cb:fe:a1:46:aa:68:01:04:1e:91:49:
4b:82:a3:58:f2:37:6a:aa:76:f2:fa:d8:3f:66:d2:d3:f7:99:
e6:f7:a2:29:59:04:c2:81:78:9d:7f:61:d6:31:ee:c0:8b:40:
a0:02:99:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:10:56 2025 by rpki-client