Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/f08716-4d2a-46ed-bded-af3e7d42968d/1/W0ksoGLUqT35Y4SCe5zbiZwPpWw.roa
File: W0ksoGLUqT35Y4SCe5zbiZwPpWw.roa (raw, json)
Hash identifier: sgYxdZJTqMhY4q83x2GYS8ozmGxlR4DCbotXdbof9sE=
Subject key identifier: 5B:49:2C:A0:62:D4:A9:3D:F9:63:84:82:7B:9C:DB:89:9C:0F:A5:6C
Certificate issuer: /CN=994aadef709be37b9ccd42cc2b8c732c397150fa
Certificate serial: 01856F42DBC8EA8E17AB3250D269451BAAD4
Authority key identifier: 99:4A:AD:EF:70:9B:E3:7B:9C:CD:42:CC:2B:8C:73:2C:39:71:50:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mUqt73Cb43uczULMK4xzLDlxUPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/f08716-4d2a-46ed-bded-af3e7d42968d/1/W0ksoGLUqT35Y4SCe5zbiZwPpWw.roa
Signing time: Sun 01 Jan 2023 21:35:30 +0000
ROA not before: Sun 01 Jan 2023 21:35:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59780
IP address blocks: 85.115.216.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:db:c8:ea:8e:17:ab:32:50:d2:69:45:1b:aa:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=994aadef709be37b9ccd42cc2b8c732c397150fa
Validity
Not Before: Jan 1 21:35:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5b492ca062d4a93df96384827b9cdb899c0fa56c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:9f:5f:bb:08:ab:8f:7d:db:5c:ce:ef:2e:d1:
2d:e2:c8:0b:44:4b:19:82:1b:1d:76:56:14:f3:1d:
29:35:3b:e9:69:9c:ee:0e:24:06:3a:c0:87:e0:cf:
16:95:5a:14:7d:01:8e:7c:d0:a2:14:8d:cc:12:bd:
0d:53:40:1b:8f:fa:78:b5:9b:d6:71:9b:e5:65:15:
10:d1:ac:90:72:a4:1c:ef:56:70:01:b6:5e:6e:9c:
ff:9d:a8:81:57:38:28:90:a7:97:6d:2a:b2:d7:51:
eb:d6:32:04:5e:f4:7e:eb:57:9d:4c:b7:e7:0a:04:
48:b8:c4:f4:c7:09:7e:61:cd:db:1d:7d:0d:34:22:
c7:0e:99:d7:ad:f1:fa:10:d7:cc:7b:fa:4f:21:5d:
28:49:4d:f9:c3:f5:65:dc:b1:40:a3:0a:00:66:ec:
2d:60:6f:35:07:a1:21:dd:e1:25:f0:60:37:4a:00:
4e:dc:e7:f9:1b:2f:c3:7d:e6:88:74:e9:9b:d7:4e:
5a:c7:ba:a0:e3:b8:e0:8f:2f:28:86:ce:f0:18:a7:
cc:a6:ed:fb:38:6c:ec:4e:5e:1a:71:f3:dd:48:73:
b3:bb:e6:37:62:84:f4:3c:be:7f:b2:15:d8:04:a6:
34:a4:27:ef:eb:cf:11:bd:e7:c5:4c:21:f5:a7:9b:
a9:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:49:2C:A0:62:D4:A9:3D:F9:63:84:82:7B:9C:DB:89:9C:0F:A5:6C
X509v3 Authority Key Identifier:
keyid:99:4A:AD:EF:70:9B:E3:7B:9C:CD:42:CC:2B:8C:73:2C:39:71:50:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mUqt73Cb43uczULMK4xzLDlxUPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/f08716-4d2a-46ed-bded-af3e7d42968d/1/W0ksoGLUqT35Y4SCe5zbiZwPpWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/f08716-4d2a-46ed-bded-af3e7d42968d/1/mUqt73Cb43uczULMK4xzLDlxUPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.115.216.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:b4:80:a1:e8:81:e6:57:af:f0:85:3e:7e:fd:c7:a7:41:5e:
2c:48:5c:b5:6e:e2:bd:63:82:e4:96:53:12:c3:26:fb:6d:0a:
23:d9:ed:49:36:da:25:53:db:b2:9f:35:e9:13:02:da:74:9f:
5e:1d:da:e2:47:e6:ef:c0:9b:4a:37:5d:b5:3b:10:51:ec:ab:
8a:7e:71:52:3d:d5:ab:90:81:dd:aa:b3:f4:f0:97:ba:3f:34:
45:ca:09:e0:65:18:60:bc:10:84:4e:73:b0:03:1e:0a:33:1f:
fd:02:c8:78:ec:93:75:61:57:9a:d3:b9:5f:6c:8c:f6:c3:8a:
54:aa:5b:54:24:15:3a:71:01:2f:7b:0d:42:3d:1f:a9:f5:b6:
9b:42:eb:f5:55:a9:79:ed:40:40:89:c5:59:fd:48:df:ed:a5:
17:53:81:f9:df:68:b3:60:45:b7:e1:bb:ff:3e:cf:c9:c7:d0:
8c:ce:f2:49:33:26:a6:65:fa:6f:69:3a:78:63:50:4b:27:47:
58:81:52:4d:38:41:dd:e9:6c:31:1c:79:31:90:42:9e:48:21:
78:99:ae:df:72:4a:96:54:c0:52:27:af:45:d1:72:9e:6a:fb:
d0:9b:3c:9f:c5:e4:70:de:e5:e1:52:22:11:1b:cb:01:19:a4:
88:38:40:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:18:54 2025 by rpki-client