Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/wGwNqbjE58rKRa1FnnSCsDyTWqs.roa
File: wGwNqbjE58rKRa1FnnSCsDyTWqs.roa (raw, json)
Hash identifier: LV9twufm3nZIww342sifgQ4xGhYaZNlV6/rriaBuH/I=
Subject key identifier: C0:6C:0D:A9:B8:C4:E7:CA:CA:45:AD:45:9E:74:82:B0:3C:93:5A:AB
Certificate issuer: /CN=f9d7469be0d9c4ba889d3e2026ad8adc42c3cf53
Certificate serial: 92B7
Authority key identifier: F9:D7:46:9B:E0:D9:C4:BA:88:9D:3E:20:26:AD:8A:DC:42:C3:CF:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ddGm-DZxLqInT4gJq2K3ELDz1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/wGwNqbjE58rKRa1FnnSCsDyTWqs.roa
Signing time: Mon 04 Apr 2022 12:06:20 +0000
ROA not before: Mon 04 Apr 2022 12:06:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49049
IP address blocks: 91.212.105.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37559 (0x92b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9d7469be0d9c4ba889d3e2026ad8adc42c3cf53
Validity
Not Before: Apr 4 12:06:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c06c0da9b8c4e7caca45ad459e7482b03c935aab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7b:fc:d0:22:e5:74:3d:32:90:e8:7b:ca:a2:
05:48:2a:4f:5a:ba:20:f4:b1:b3:21:a1:49:a9:bc:
ac:61:48:fe:24:da:a3:72:a4:6d:11:67:9e:e7:17:
2c:98:08:3b:5c:76:10:80:6a:f8:b6:df:39:98:20:
33:c1:29:8c:88:18:ee:32:ea:56:76:cd:fa:71:ca:
74:57:18:1b:bd:19:be:be:a3:de:2b:d8:ee:5c:ce:
45:8a:a8:48:04:67:72:0b:79:5f:b7:77:fc:6b:2e:
0e:f6:e9:65:a4:e4:58:27:15:65:5b:e5:37:c3:f5:
c7:b0:7f:87:ed:5b:48:74:2d:d0:0e:bb:6a:86:36:
8e:79:95:04:17:d3:39:67:27:f0:41:c1:81:7f:4a:
62:2d:65:bd:86:38:fa:1f:35:7e:80:b6:d1:32:10:
09:67:19:62:3f:54:fc:51:f6:01:89:1d:3d:b7:80:
64:b5:b3:81:b5:cc:e5:2d:fe:1e:2e:fc:33:2f:e4:
1f:3d:7b:20:e6:e7:44:5e:93:1b:a5:a9:15:96:88:
c5:a9:4d:f1:7d:63:78:c3:76:42:04:e2:ef:dc:16:
b3:e8:3f:e7:83:fc:06:b9:c5:17:3b:64:45:cc:a3:
c7:95:10:90:7e:ab:95:b0:be:6d:58:2f:9f:89:51:
6d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:6C:0D:A9:B8:C4:E7:CA:CA:45:AD:45:9E:74:82:B0:3C:93:5A:AB
X509v3 Authority Key Identifier:
keyid:F9:D7:46:9B:E0:D9:C4:BA:88:9D:3E:20:26:AD:8A:DC:42:C3:CF:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ddGm-DZxLqInT4gJq2K3ELDz1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/wGwNqbjE58rKRa1FnnSCsDyTWqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/1-ddGm-DZxLqInT4gJq2K3ELDz1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.105.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:99:c9:2a:93:5a:cd:69:71:e6:e8:de:41:95:65:00:f4:45:
c2:76:23:29:7a:9e:5d:55:65:90:1f:b1:1b:88:0c:6a:b1:d1:
5b:99:e7:c4:2e:9d:de:3a:56:34:49:10:e5:a8:91:a6:6f:3a:
6c:f9:a5:c7:fe:a6:2e:19:d5:ed:f9:09:41:1e:f5:6e:70:fa:
64:c6:f1:b2:5c:3e:e6:ba:47:99:d2:99:28:ac:45:fc:c6:07:
4d:9d:53:6c:11:2e:fb:d4:89:d6:83:ac:9a:55:25:f7:02:c5:
4f:17:4b:3f:c1:17:22:1b:09:cb:ce:21:00:76:4f:02:f0:30:
e2:ff:c0:d9:83:22:c3:da:64:17:8e:d4:95:f5:25:fa:d1:5e:
d7:3a:83:8e:26:62:e7:8d:9c:df:91:a2:43:93:cc:b7:e4:0a:
5a:5c:79:39:da:41:6b:3d:03:c9:e7:03:e4:12:8a:be:45:ae:
c3:66:56:5a:19:d7:d7:70:ac:53:68:6a:8b:89:00:60:71:52:
52:b9:8b:15:e1:1c:17:d5:c2:fb:6e:70:9c:dc:30:7a:06:f4:
f3:58:b9:ce:c5:f3:3c:95:e5:e8:7d:15:27:46:f4:05:42:e1:
54:88:16:0f:31:d7:12:4f:c4:97:84:2e:b2:69:8f:64:51:74:
27:13:08:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:16:59 2025 by rpki-client