Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/WqyfZRaOue2eknpfM89OFIcsSGo.roa
File: WqyfZRaOue2eknpfM89OFIcsSGo.roa (raw, json)
Hash identifier: rRwaZy2WIwzzv0oc/O1KnYLzNHO1YMdN5qCP+aZYI8I=
Subject key identifier: 5A:AC:9F:65:16:8E:B9:ED:9E:92:7A:5F:33:CF:4E:14:87:2C:48:6A
Certificate issuer: /CN=dbb653bbd1704c47bada62ab6ce3502307f244b6
Certificate serial: 17EC5259
Authority key identifier: DB:B6:53:BB:D1:70:4C:47:BA:DA:62:AB:6C:E3:50:23:07:F2:44:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/27ZTu9FwTEe62mKrbONQIwfyRLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/WqyfZRaOue2eknpfM89OFIcsSGo.roa
Signing time: Tue 01 Mar 2022 07:29:53 +0000
ROA not before: Tue 01 Mar 2022 07:29:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34785
IP address blocks: 193.186.80.0/22 maxlen: 22
193.186.84.0/23 maxlen: 23
193.228.112.0/21 maxlen: 21
193.228.122.0/24 maxlen: 24
193.228.120.0/23 maxlen: 23
80.80.240.0/20 maxlen: 20
193.186.72.0/21 maxlen: 21
2a01:af80::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 401363545 (0x17ec5259)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbb653bbd1704c47bada62ab6ce3502307f244b6
Validity
Not Before: Mar 1 07:29:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5aac9f65168eb9ed9e927a5f33cf4e14872c486a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:72:73:c1:fb:30:8b:cc:4f:20:59:f9:02:ae:
45:0c:68:ee:03:cc:6e:05:f6:81:d7:fc:77:3c:20:
21:32:15:11:36:e6:14:f1:c4:0e:d0:54:49:bc:7a:
e9:6e:f1:26:0a:2e:18:47:a9:30:94:50:ab:c1:6e:
71:63:dd:d7:47:48:da:2b:b6:44:5b:97:f6:ab:df:
20:57:10:78:fb:e0:8c:53:90:5d:59:14:e3:72:71:
38:f2:27:93:b5:4b:a3:9d:67:97:1f:d5:f0:7c:14:
69:43:3b:5d:ab:33:93:3e:e6:8f:53:53:15:b7:1e:
7f:38:ac:1d:0d:16:ae:75:63:fe:ad:fb:8b:67:2f:
36:1e:7b:9c:f2:a3:76:38:79:70:4b:61:89:7c:f9:
73:f0:08:a0:6a:c3:ac:1f:99:31:35:f3:6f:ff:b4:
48:08:a0:5e:08:a8:39:ec:bf:0a:5b:33:36:7f:60:
71:58:ee:11:0d:61:b1:f2:bf:1d:88:19:68:73:8f:
7d:c3:a7:4b:41:01:b5:d2:b5:af:1f:4a:64:7c:1a:
85:6a:31:c6:63:26:78:12:b6:bb:57:49:cd:0e:e4:
18:ed:52:aa:1f:4b:27:f8:45:ac:2f:ab:00:a8:ec:
36:ae:75:2f:2f:16:a1:82:a0:34:31:c8:86:6b:a4:
c0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:AC:9F:65:16:8E:B9:ED:9E:92:7A:5F:33:CF:4E:14:87:2C:48:6A
X509v3 Authority Key Identifier:
keyid:DB:B6:53:BB:D1:70:4C:47:BA:DA:62:AB:6C:E3:50:23:07:F2:44:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27ZTu9FwTEe62mKrbONQIwfyRLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/WqyfZRaOue2eknpfM89OFIcsSGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.80.240.0/20
193.186.72.0-193.186.85.255
193.228.112.0-193.228.122.255
IPv6:
2a01:af80::/32
Signature Algorithm: sha256WithRSAEncryption
0c:99:32:82:7e:35:b9:f3:b2:bc:29:38:64:ab:b3:b1:81:a2:
d6:e4:ae:d1:e3:8a:5a:86:d7:3a:b9:2c:13:8a:5c:20:c1:55:
5f:f4:bb:aa:65:f6:56:55:1b:30:ba:04:62:7d:36:0d:cd:d1:
68:aa:b3:e6:c7:56:0f:0c:82:1f:26:43:fc:eb:d6:af:14:b8:
6b:b8:2e:70:3c:13:53:e9:d7:6a:74:f5:63:41:56:33:e5:48:
f8:7e:83:f2:5f:8c:d9:a7:06:4b:61:a4:97:07:57:92:c8:75:
1a:ed:e2:11:f0:c0:0c:01:4a:e1:76:df:d5:46:f7:62:f8:6f:
b6:f2:ee:60:d7:7c:1b:5f:fd:b2:1f:a2:d6:c0:cb:25:cf:ce:
bd:19:86:0d:a6:89:e8:84:9e:c5:12:22:39:17:7c:eb:69:22:
43:07:6f:1c:4d:8c:3d:b7:e1:0c:f0:0e:8a:45:48:01:20:68:
f6:46:e1:b2:29:63:b6:62:e8:b6:30:e5:c2:6e:d6:35:28:90:
72:78:11:ea:01:33:b8:9a:44:21:e8:74:a9:28:ca:1c:ab:43:
70:96:d7:05:74:10:19:da:c2:aa:28:34:5e:f9:05:41:fc:45:
19:aa:2e:4f:f7:02:25:31:4f:89:3e:01:31:24:b3:06:2e:e8:
b9:56:2a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:36:05 2025 by rpki-client