Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/0b06bc-b8c7-4f75-b29e-c107a7ac0488/1/WBQiQRQzb5wZzIuVx42V3pwxkM4.roa
File: WBQiQRQzb5wZzIuVx42V3pwxkM4.roa (raw, json)
Hash identifier: iSX3OC9HNjjtcZaX/RUPlwWee3iYwY3Sw3DZX3+n1HE=
Subject key identifier: 58:14:22:41:14:33:6F:9C:19:CC:8B:95:C7:8D:95:DE:9C:31:90:CE
Certificate issuer: /CN=58ffa14df2a89cb6709636f2b0b570abccf8b84b
Certificate serial: 018AB79C20FA90D9F93633D7A8316581EEEC
Authority key identifier: 58:FF:A1:4D:F2:A8:9C:B6:70:96:36:F2:B0:B5:70:AB:CC:F8:B8:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WP-hTfKonLZwljbysLVwq8z4uEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/0b06bc-b8c7-4f75-b29e-c107a7ac0488/1/WBQiQRQzb5wZzIuVx42V3pwxkM4.roa
Signing time: Thu 21 Sep 2023 11:59:37 +0000
ROA not before: Thu 21 Sep 2023 11:59:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205388
IP address blocks: 185.216.212.0/22 maxlen: 32
2a0b:bbc0::/32 maxlen: 128
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b7:9c:20:fa:90:d9:f9:36:33:d7:a8:31:65:81:ee:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ffa14df2a89cb6709636f2b0b570abccf8b84b
Validity
Not Before: Sep 21 11:59:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5814224114336f9c19cc8b95c78d95de9c3190ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:36:01:8f:d0:4f:97:00:fb:45:df:26:1d:08:
94:1d:62:b5:9f:4b:fc:2d:40:12:1d:81:63:97:b9:
7c:82:99:f6:87:51:3e:11:b6:a7:ab:85:35:f0:d9:
a1:58:c6:2c:2c:5e:0d:47:e6:d4:4d:66:2b:19:85:
77:18:dd:84:7d:84:11:02:ae:d8:3f:32:1f:44:b0:
0b:31:6c:38:b9:41:26:3d:d1:f8:c6:00:d0:e1:b2:
c2:d9:99:b4:28:fc:5a:06:f0:88:15:68:ab:9d:3c:
c6:4a:6f:36:81:06:8d:64:21:98:ca:a1:51:d6:5f:
5f:80:36:5c:17:bf:30:8f:c5:1a:f0:6b:97:e2:e5:
76:cd:5c:39:cc:34:1f:82:37:e3:5e:62:f8:d7:dc:
fa:47:78:50:09:88:15:fd:6a:49:19:9b:80:ee:83:
0f:e1:53:a1:17:71:b2:20:72:5e:58:c5:fa:2c:b0:
7e:dc:7a:4b:a3:8e:56:af:e7:e9:49:a9:cf:0e:a4:
40:d7:da:5a:35:18:0d:94:d2:e4:ea:5c:ce:00:bf:
2d:b9:4a:69:04:92:20:40:3f:69:58:f7:4e:76:37:
3b:9e:63:d9:84:a7:c3:6b:c4:db:54:1d:a0:fc:d7:
5c:b6:78:20:a3:c0:f9:0b:eb:e1:c3:15:63:f8:b8:
4e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:14:22:41:14:33:6F:9C:19:CC:8B:95:C7:8D:95:DE:9C:31:90:CE
X509v3 Authority Key Identifier:
keyid:58:FF:A1:4D:F2:A8:9C:B6:70:96:36:F2:B0:B5:70:AB:CC:F8:B8:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WP-hTfKonLZwljbysLVwq8z4uEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0b06bc-b8c7-4f75-b29e-c107a7ac0488/1/WBQiQRQzb5wZzIuVx42V3pwxkM4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0b06bc-b8c7-4f75-b29e-c107a7ac0488/1/WP-hTfKonLZwljbysLVwq8z4uEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.216.212.0/22
IPv6:
2a0b:bbc0::/32
Signature Algorithm: sha256WithRSAEncryption
d1:c5:00:41:a6:12:8c:f5:c1:85:a9:dc:19:ba:c7:3c:d3:6c:
7b:29:38:5e:ca:ae:8b:e3:d4:ed:a3:af:eb:d2:9e:b4:0b:6e:
e8:35:a6:3e:88:49:09:06:2f:18:0a:ed:9b:bb:28:c4:d6:ff:
e2:a8:97:af:53:53:9a:c9:2d:d3:a0:41:80:e1:b2:20:db:29:
18:39:d5:84:af:d8:e2:3a:b6:a1:02:8b:dd:cb:d4:1e:4c:08:
52:ef:5e:54:ea:4b:82:96:7c:e0:84:93:53:5a:61:14:e3:2d:
7c:20:db:68:f3:8e:a2:15:b7:0c:4b:19:3e:28:d5:4e:9a:a4:
2a:76:7c:49:a5:50:fc:bc:03:8c:5b:95:ef:ef:71:c2:3f:c2:
46:1d:ba:8e:68:a8:d5:68:6a:aa:1e:76:3f:da:6e:d1:8f:bf:
81:0a:54:a5:f4:4c:5f:d0:c5:f6:48:b6:49:70:d3:b7:38:85:
04:e9:16:9b:30:40:2f:e0:19:1a:92:48:da:81:41:37:93:37:
f0:11:88:77:80:65:cf:1c:91:b7:84:37:b4:89:46:a3:d8:2c:
91:ed:c1:75:bc:c2:21:a9:da:71:e0:f4:f2:d1:7f:4a:03:01:
51:c7:18:df:f9:4a:2a:bb:23:e2:eb:60:e4:ed:de:4c:0b:cf:
17:21:7f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:53:12 2025 by rpki-client