Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/WWL4BfFIqzIgMLwmxv8kXS6SShY.roa
File: WWL4BfFIqzIgMLwmxv8kXS6SShY.roa (raw, json)
Hash identifier: bi9rrKjfW//xQ8zlZIYp0IgT9mGxxA21GSZnjGBDWok=
Subject key identifier: 59:62:F8:05:F1:48:AB:32:20:30:BC:26:C6:FF:24:5D:2E:92:4A:16
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 285F75CA
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/WWL4BfFIqzIgMLwmxv8kXS6SShY.roa
Signing time: Sat 01 Jan 2022 16:10:20 +0000
ROA not before: Sat 01 Jan 2022 16:10:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212206
IP address blocks: 95.47.156.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 677344714 (0x285f75ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:10:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5962f805f148ab322030bc26c6ff245d2e924a16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:06:0c:dd:c3:d4:20:d6:5b:fc:08:82:51:e0:
38:73:c9:17:32:57:51:9f:b2:0d:0b:f9:3d:1e:87:
f0:e5:fd:c0:29:92:aa:c0:e2:8f:3d:1f:f0:f9:4a:
6d:5b:93:3a:27:fe:75:f2:5a:bb:90:af:15:d3:eb:
95:7a:3f:66:19:83:fb:51:50:f0:73:df:e1:dd:d4:
fd:60:7a:df:8c:a9:1a:c6:ec:6a:d1:38:5d:d1:d2:
9d:69:92:3f:14:d0:75:8c:1b:85:e3:7c:ce:ca:61:
06:3a:2b:dd:c5:b7:d4:dc:56:af:57:f7:8c:a4:60:
3a:5b:97:c4:95:d2:61:99:38:97:f9:4a:74:c2:64:
cb:64:af:7a:50:8e:c9:47:c5:9c:9a:85:6d:5d:5f:
42:74:5c:8d:51:27:27:f9:e5:57:c8:fd:93:b9:19:
99:26:79:cc:69:4b:db:58:05:42:f9:3a:8a:47:dd:
99:77:b0:72:dc:c9:05:97:c2:8f:60:ec:63:e5:ca:
05:4a:6c:5c:92:d4:ca:e9:24:cd:49:fc:6b:9d:60:
84:6f:3f:c0:9b:24:d7:f7:49:b4:3c:dc:75:82:00:
ff:0b:dd:b2:bb:91:c5:d9:d3:64:7b:00:e1:0c:a2:
3c:84:b6:07:a5:bd:ea:39:fb:39:58:4c:47:f4:31:
7c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:62:F8:05:F1:48:AB:32:20:30:BC:26:C6:FF:24:5D:2E:92:4A:16
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/WWL4BfFIqzIgMLwmxv8kXS6SShY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.47.156.0/24
Signature Algorithm: sha256WithRSAEncryption
66:e7:00:1b:88:71:63:8e:bd:12:83:5e:3c:99:ef:e0:d9:5e:
22:84:50:2f:1d:16:93:04:5f:10:20:db:d0:18:4a:0c:11:6a:
46:f8:66:21:28:4d:e1:ad:fa:82:c4:f1:9e:64:f4:da:74:20:
66:78:9c:54:97:73:95:55:c5:4f:6d:d5:07:a0:43:ea:49:c2:
14:e3:40:7d:49:f5:34:b9:05:b1:18:37:67:0e:87:9c:69:dd:
dd:e0:80:ad:89:ba:8f:37:a0:36:da:2f:b9:85:66:5a:af:29:
2d:eb:25:75:18:4f:74:54:90:95:05:b1:ae:f9:9b:21:9d:c0:
e8:15:23:2a:9c:7f:22:8b:c7:3f:1b:73:b4:36:2c:4f:2e:0b:
c8:32:ed:c1:cb:12:bf:0e:fd:77:f4:1c:11:bd:e9:9f:4d:17:
61:8b:71:b2:9a:27:20:3c:79:ed:c8:bd:6a:e7:d8:d6:30:0c:
5f:e2:c8:4d:f4:d0:5e:29:f5:f0:f5:f9:86:ab:64:9a:b4:40:
3a:d4:15:c4:a3:b2:b2:a5:32:02:f3:e0:dc:4e:0e:3f:96:98:
38:80:9a:94:18:7a:2b:9a:1b:97:80:24:8f:20:32:21:23:64:
ed:21:21:58:1c:cb:e6:07:de:52:38:3f:bd:b9:5c:fb:7c:39:
b1:97:ee:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:41:38 2025 by rpki-client