Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/wHAg_f8fiZn1-tFXV14iCCL_LdM.roa
File: wHAg_f8fiZn1-tFXV14iCCL_LdM.roa (raw, json)
Hash identifier: wT8Q7rDrM0cw9XXPw/BaZiKIsNwHb2JDraQACT0rkm8=
Subject key identifier: C0:70:20:FD:FF:1F:89:99:F5:FA:D1:57:57:5E:22:08:22:FF:2D:D3
Certificate issuer: /CN=015b6d1596ac0501a71a393447051a62ff1dda16
Certificate serial: 01889F703994F300981FCB77CFC8CC07411E
Authority key identifier: 01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/wHAg_f8fiZn1-tFXV14iCCL_LdM.roa
Signing time: Fri 09 Jun 2023 09:15:12 +0000
ROA not before: Fri 09 Jun 2023 09:15:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209595
IP address blocks: 5.153.172.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:9f:70:39:94:f3:00:98:1f:cb:77:cf:c8:cc:07:41:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015b6d1596ac0501a71a393447051a62ff1dda16
Validity
Not Before: Jun 9 09:15:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c07020fdff1f8999f5fad157575e220822ff2dd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:bc:8c:d9:18:a3:a2:e5:b3:8c:85:5e:f4:09:
ff:c4:25:bb:7a:d0:df:21:24:9b:bd:d4:4d:63:e6:
2a:76:bc:21:5b:48:e2:1a:77:04:8b:f5:54:9e:c9:
a4:0e:f3:7b:ca:69:c1:5b:13:71:38:1d:8d:6d:08:
ac:37:52:e1:27:78:8d:28:37:9b:22:79:f8:55:92:
f0:17:b9:90:bf:a5:d1:5a:d5:a2:64:3d:10:05:9e:
62:fd:b8:18:0d:f7:7c:bb:d2:ff:ab:02:27:19:67:
c9:3d:c5:40:90:55:25:bc:e7:3f:18:f1:35:13:92:
71:fb:34:47:39:a4:38:29:1d:20:12:63:94:db:d9:
80:20:53:82:25:1c:b3:63:44:94:70:55:8b:6f:40:
12:14:ff:ec:dc:be:e6:b6:24:19:43:4a:e9:b7:31:
ae:b3:b7:59:6b:07:42:a3:24:4d:4a:a1:5a:3c:4c:
81:80:0e:f6:0b:e6:26:71:a4:14:ef:0c:fc:ce:48:
50:04:65:6d:b9:d4:96:00:83:1f:d6:dc:22:18:2e:
0b:3e:55:10:85:a8:a7:61:e0:53:89:2e:7e:62:45:
1d:b6:e0:77:1b:6c:a9:7b:74:b1:f4:ab:43:a5:9c:
fa:a3:db:5e:69:bc:d0:cb:8b:d8:68:33:25:a5:56:
66:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:70:20:FD:FF:1F:89:99:F5:FA:D1:57:57:5E:22:08:22:FF:2D:D3
X509v3 Authority Key Identifier:
keyid:01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/wHAg_f8fiZn1-tFXV14iCCL_LdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.153.172.0/24
Signature Algorithm: sha256WithRSAEncryption
20:ad:59:11:d3:db:42:c6:ef:eb:69:a3:99:ee:cd:85:99:0b:
a6:68:18:b8:80:82:f9:55:8e:ba:62:21:88:32:57:18:2e:ac:
97:c3:ad:9f:54:e3:23:68:4b:e6:ca:bf:1b:dc:9f:ea:84:cb:
e2:77:da:fd:d1:4d:f5:33:e3:bf:3c:f0:7e:55:f6:9f:d9:1e:
de:6a:77:b5:31:de:d2:e5:12:55:d3:7b:4c:c3:cd:ec:eb:3d:
45:a2:a1:33:be:17:ff:34:2a:43:10:26:d4:06:96:3b:3f:47:
ee:f1:15:44:83:e3:6f:b7:29:0a:67:e0:00:6c:71:71:be:1d:
aa:f9:dd:5e:b1:bc:29:09:72:d4:f5:3f:7c:33:1f:3e:8f:92:
ec:d9:66:f8:8d:a2:6d:a3:5c:68:f7:11:e1:e4:36:7d:f4:b5:
96:cc:37:d8:ff:7b:f9:da:fe:6e:5b:8f:6c:cc:85:cc:b2:7c:
97:f6:a5:a0:64:3e:de:4c:ec:f5:da:d1:84:26:17:49:23:4f:
2d:ab:a7:25:82:08:1e:69:c3:91:09:a5:65:18:58:bb:f0:98:
77:94:e0:23:3e:94:fe:c7:8d:68:f3:c5:76:19:65:bb:5f:fd:
56:57:46:a2:6e:4c:0d:91:63:97:b1:8a:6c:0f:07:06:d6:37:
3e:96:fe:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:38:06 2025 by rpki-client