Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/WB7Qqc2c5tpdqElWQMpDbx8KSzk.roa
File: WB7Qqc2c5tpdqElWQMpDbx8KSzk.roa (raw, json)
Hash identifier: bLnyiN3GNrfe/DrPPnUbEwh/M7zadSTeVbRZNh+i2Lo=
Subject key identifier: 58:1E:D0:A9:CD:9C:E6:DA:5D:A8:49:56:40:CA:43:6F:1F:0A:4B:39
Certificate issuer: /CN=a52fc60d36e28bb8df145c84acab19cfa53b025a
Certificate serial: 01867EC79FD978A77C2E617A8F4EA9856DF4
Authority key identifier: A5:2F:C6:0D:36:E2:8B:B8:DF:14:5C:84:AC:AB:19:CF:A5:3B:02:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pS_GDTbii7jfFFyErKsZz6U7Alo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/WB7Qqc2c5tpdqElWQMpDbx8KSzk.roa
Signing time: Thu 23 Feb 2023 14:57:37 +0000
ROA not before: Thu 23 Feb 2023 14:57:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207021
IP address blocks: 176.97.158.0/24 maxlen: 24
2001:67c:10b8::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:7e:c7:9f:d9:78:a7:7c:2e:61:7a:8f:4e:a9:85:6d:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a52fc60d36e28bb8df145c84acab19cfa53b025a
Validity
Not Before: Feb 23 14:57:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=581ed0a9cd9ce6da5da8495640ca436f1f0a4b39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:06:71:b3:df:2e:e7:2e:b7:bf:21:ca:4b:d7:
14:79:9c:c4:38:aa:ff:bc:84:be:82:f9:80:10:e8:
ef:43:85:ab:c5:c6:4f:4e:3e:89:ab:7e:0d:5f:56:
62:da:0c:8c:1e:4e:d3:b2:30:6d:9d:8e:2f:8f:5d:
3a:23:f3:41:da:39:97:e6:60:11:a6:10:4a:8e:1c:
8f:4b:cc:a9:98:00:0b:85:b2:af:2c:f0:6f:a1:ca:
17:c1:ba:b2:92:0e:d2:cb:ba:f6:56:b7:4b:20:1d:
bd:99:9b:a0:3d:c3:ae:a0:35:1a:f1:cb:a4:91:f5:
1d:b1:48:92:7f:5a:74:ab:68:58:4b:44:9e:aa:2a:
30:fc:71:e5:2d:f2:51:e4:5a:0a:e4:ca:e1:f8:22:
7d:2e:db:aa:2c:0d:32:97:f7:81:85:ab:e5:a2:83:
54:31:13:71:fb:4f:f5:de:43:6f:37:d8:14:1b:1f:
0a:c3:63:38:ae:04:e2:15:7c:b2:2d:9a:d9:01:08:
40:e8:45:24:46:50:d5:ed:7c:21:94:c3:dc:57:73:
c9:cc:fd:7a:c3:85:df:86:da:89:1b:de:0a:0a:e1:
26:e2:08:ee:ff:75:8c:c2:28:8f:7b:6e:cc:d5:0e:
87:af:68:36:46:5c:9d:15:43:f2:1d:26:b3:48:dc:
e3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:1E:D0:A9:CD:9C:E6:DA:5D:A8:49:56:40:CA:43:6F:1F:0A:4B:39
X509v3 Authority Key Identifier:
keyid:A5:2F:C6:0D:36:E2:8B:B8:DF:14:5C:84:AC:AB:19:CF:A5:3B:02:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pS_GDTbii7jfFFyErKsZz6U7Alo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/WB7Qqc2c5tpdqElWQMpDbx8KSzk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.97.158.0/24
IPv6:
2001:67c:10b8::/48
Signature Algorithm: sha256WithRSAEncryption
93:ff:fd:ae:37:e4:6f:1b:20:64:ff:1a:0c:0e:ae:30:9a:93:
7b:91:40:07:eb:64:f3:03:eb:e6:71:46:15:4f:48:71:56:cb:
ac:e1:17:aa:0c:62:c7:54:3c:ac:0c:4c:8f:91:dd:fc:db:78:
46:74:19:bf:5e:f6:c2:2d:39:27:41:b1:76:97:c7:b9:ec:3d:
9b:6d:1b:b2:6a:f3:1b:75:33:d4:10:d5:09:f8:a5:61:52:09:
11:da:2a:f3:01:26:4f:ba:c9:4b:b9:62:1c:e4:69:46:92:84:
b0:4c:0c:8d:bb:88:0f:83:a1:50:f0:dd:64:da:1f:2a:5c:92:
58:fe:03:df:93:e2:f9:60:10:12:d6:cd:83:f2:d3:01:2e:6e:
dc:e6:dc:da:0f:58:e2:65:0c:cf:68:50:0c:fa:2f:32:86:2c:
57:e4:af:ad:f1:6a:1e:fb:c9:bb:d1:1c:50:b0:01:fa:4f:fc:
75:55:90:d8:44:19:c3:31:1e:23:9b:15:e4:32:50:28:2b:af:
6b:0a:16:cd:94:a8:32:10:04:ff:24:b6:70:24:a9:aa:cb:23:
f3:9f:05:bc:a8:a5:dc:5f:64:40:9a:49:76:a2:be:66:b6:11:
0d:c1:4f:af:a2:e4:50:8d:f9:89:a9:28:96:51:13:1c:38:2b:
85:e5:29:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:49:31 2025 by rpki-client