Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/wnRmnEz-NWLrCMn9AObUlOkpRqA.roa
File: wnRmnEz-NWLrCMn9AObUlOkpRqA.roa (raw, json)
Hash identifier: isd10RP1g1KLXa36LPdufFRgDj7Nt06gUOvmj1H27aI=
Subject key identifier: C2:74:66:9C:4C:FE:35:62:EB:08:C9:FD:00:E6:D4:94:E9:29:46:A0
Certificate issuer: /CN=beba48c7e2c9e05eda546d899146b89f799df85d
Certificate serial: 35A2E8C6
Authority key identifier: BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/wnRmnEz-NWLrCMn9AObUlOkpRqA.roa
Signing time: Sat 01 Jan 2022 08:54:56 +0000
ROA not before: Sat 01 Jan 2022 08:54:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47333
IP address blocks: 213.108.32.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 899868870 (0x35a2e8c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beba48c7e2c9e05eda546d899146b89f799df85d
Validity
Not Before: Jan 1 08:54:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c274669c4cfe3562eb08c9fd00e6d494e92946a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:98:14:79:37:93:eb:94:df:04:0a:19:00:32:
9f:17:4e:a1:ee:75:38:45:aa:bb:42:5f:bd:c1:b7:
34:fc:6c:67:57:f1:84:10:6e:d5:3d:49:c5:92:30:
7e:b9:e3:86:d5:7d:0a:81:4a:1e:1b:95:80:98:8b:
b7:79:d8:ab:36:b8:9b:df:43:cc:91:14:93:78:1d:
bd:dd:c0:c4:4d:c8:9c:4f:79:4b:95:80:22:75:1f:
d1:c8:1d:c9:3a:04:7d:9e:c5:66:6d:db:e9:ec:33:
0f:71:1e:0e:7b:30:e1:87:e2:40:49:2a:a7:d7:6b:
c6:a2:d1:c2:4a:7b:af:70:d7:a8:0c:e8:ae:86:47:
d7:37:4b:2f:c8:fc:a5:d0:3c:75:ad:d0:00:64:e1:
71:84:e0:b4:6b:03:a3:06:6c:f4:bd:47:84:30:f4:
a1:14:63:1d:2d:d2:f0:c6:d0:47:22:cd:1e:d2:71:
f2:65:1a:6f:23:b6:c4:eb:5f:ac:99:96:00:41:d1:
71:b1:f1:9d:aa:ba:e5:df:df:2b:ea:dd:fb:10:ae:
8f:10:9c:bf:a8:1e:d7:49:ed:4d:77:cb:fc:31:07:
68:e5:a9:96:68:33:c8:c9:00:19:61:e4:b0:66:6b:
a4:e4:e4:47:a4:ce:b1:83:0a:b2:30:32:5d:45:3b:
b1:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:74:66:9C:4C:FE:35:62:EB:08:C9:FD:00:E6:D4:94:E9:29:46:A0
X509v3 Authority Key Identifier:
keyid:BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/wnRmnEz-NWLrCMn9AObUlOkpRqA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.108.32.0/21
Signature Algorithm: sha256WithRSAEncryption
66:84:85:23:2e:6f:07:4e:e7:bf:3a:2d:54:c7:62:c2:9a:7d:
33:a3:8d:84:d3:e3:98:e4:3b:f1:9f:38:e8:a3:55:54:cd:81:
8c:14:12:27:65:be:5a:4b:0b:96:1e:de:0b:fc:35:89:e4:d1:
fb:d0:e3:57:a6:fa:33:d1:bf:a4:59:ea:d2:42:18:44:a4:9d:
98:66:64:31:4f:98:d7:85:ca:bf:00:28:5a:18:40:5b:fa:17:
69:9e:14:3c:80:4d:f1:98:5e:10:60:4d:a2:cc:f0:bc:67:a8:
d0:38:18:a0:0a:85:1f:fa:e5:6b:2c:a4:6b:96:0c:14:15:25:
25:6d:86:99:c9:50:8c:dd:87:5f:f7:76:ba:63:d7:6f:d6:71:
bf:ca:01:ab:0d:69:90:a1:a6:9c:66:4d:b3:0c:7b:a5:36:7b:
26:b2:4d:ce:b1:f8:50:3c:b8:54:dc:e1:e9:4d:ce:49:95:e0:
98:ea:a7:c6:f9:b9:f8:da:31:c1:64:33:4e:8c:d6:a1:68:db:
20:39:e9:a7:fd:05:ba:67:c8:48:93:d1:d6:ab:d7:82:8b:5f:
51:13:35:00:33:2f:68:f8:56:f9:64:e4:b9:17:bc:04:f4:bd:
aa:87:e5:0d:ac:82:64:67:3f:7b:25:f8:1f:0c:be:cd:07:db:
54:f4:2f:37
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIENaLoxjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
ZWJhNDhjN2UyYzllMDVlZGE1NDZkODk5MTQ2Yjg5Zjc5OWRmODVkMB4XDTIyMDEw
MTA4NTQ1NloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzI3NDY2OWM0Y2Zl
MzU2MmViMDhjOWZkMDBlNmQ0OTRlOTI5NDZhMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALWYFHk3k+uU3wQKGQAynxdOoe51OEWqu0JfvcG3NPxsZ1fx
hBBu1T1JxZIwfrnjhtV9CoFKHhuVgJiLt3nYqza4m99DzJEUk3gdvd3AxE3InE95
S5WAInUf0cgdyToEfZ7FZm3b6ewzD3EeDnsw4YfiQEkqp9drxqLRwkp7r3DXqAzo
roZH1zdLL8j8pdA8da3QAGThcYTgtGsDowZs9L1HhDD0oRRjHS3S8MbQRyLNHtJx
8mUabyO2xOtfrJmWAEHRcbHxnaq65d/fK+rd+xCujxCcv6ge10ntTXfL/DEHaOWp
lmgzyMkAGWHksGZrpOTkR6TOsYMKsjAyXUU7sc8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTCdGacTP41YusIyf0A5tSU6SlGoDAfBgNVHSMEGDAWgBS+ukjH4sngXtpU
bYmRRrifeZ34XTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3ZycEl4LUxKNEY3YVZHMkprVWE0bjNtZC1GMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNmQvN2Y4ODIxLTE1NjYtNDNmNC1hYjI2LTNkNTIyMTgxYTJjNC8x
L3duUm1uRXotTldMckNNbjlBT2JVbE9rcFJxQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmQv
N2Y4ODIxLTE1NjYtNDNmNC1hYjI2LTNkNTIyMTgxYTJjNC8xL3ZycEl4LUxKNEY3
YVZHMkprVWE0bjNtZC1GMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA9VsIDANBgkqhkiG9w0BAQsFAAOC
AQEAZoSFIy5vB07nvzotVMdiwpp9M6ONhNPjmOQ78Z846KNVVM2BjBQSJ2W+WksL
lh7eC/w1ieTR+9DjV6b6M9G/pFnq0kIYRKSdmGZkMU+Y14XKvwAoWhhAW/oXaZ4U
PIBN8ZheEGBNoszwvGeo0DgYoAqFH/rlayyka5YMFBUlJW2GmclQjN2HX/d2umPX
b9Zxv8oBqw1pkKGmnGZNswx7pTZ7JrJNzrH4UDy4VNzh6U3OSZXgmOqnxvm5+Nox
wWQzTozWoWjbIDnpp/0FumfISJPR1qvXgotfURM1ADMvaPhW+WTkuRe8BPS9qofl
DayCZGc/eyX4Hwy+zQfbVPQvNw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:55:12 2025 by rpki-client