Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/wjcEsLF6_3h4KxRxfTzwVv0op10.roa
File: wjcEsLF6_3h4KxRxfTzwVv0op10.roa (raw, json)
Hash identifier: 6xudyJLXM/8/MJ2ZU929eKxXpHKQjsA+Onqt97YIfnI=
Subject key identifier: C2:37:04:B0:B1:7A:FF:78:78:2B:14:71:7D:3C:F0:56:FD:28:A7:5D
Certificate issuer: /CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692
Certificate serial: 0185EF6F9E7334761FE11E36AC37E3A9CEC9
Authority key identifier: 87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/wjcEsLF6_3h4KxRxfTzwVv0op10.roa
Signing time: Thu 26 Jan 2023 18:55:47 +0000
ROA not before: Thu 26 Jan 2023 18:55:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56322
IP address blocks: 178.250.188.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ef:6f:9e:73:34:76:1f:e1:1e:36:ac:37:e3:a9:ce:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692
Validity
Not Before: Jan 26 18:55:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c23704b0b17aff78782b14717d3cf056fd28a75d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a1:d5:16:d0:09:53:2b:4c:60:c7:ac:e6:81:
e9:86:bf:89:63:8d:55:05:cf:d3:d4:e3:b8:76:4a:
2b:8e:72:10:7d:6d:d7:84:97:99:f2:d9:9c:b8:7e:
f8:d5:3b:e6:44:0a:14:60:5d:bc:e1:2e:81:86:81:
4e:a0:d8:96:85:f6:b9:df:dc:cd:35:50:d6:bd:2d:
07:38:e2:fa:f2:4c:76:c3:b6:f7:81:16:ee:f9:81:
4b:5c:07:c2:58:f1:4a:1c:af:ec:9a:5c:5c:10:3c:
f1:23:93:59:da:3c:4a:26:a5:0a:d1:21:de:b8:75:
cf:1b:81:a5:1c:c3:0f:77:d9:6a:9b:cb:b8:01:e4:
c4:9d:6d:e5:20:65:d1:98:c9:0f:8d:f2:fa:4d:7e:
aa:af:f3:f6:84:43:21:ee:18:8b:7b:65:c0:a0:e0:
11:a3:a5:8f:9f:c9:6f:fe:47:77:bd:f2:cd:36:b8:
03:2a:29:e2:6e:b5:82:75:3d:01:72:fb:bf:07:2b:
ec:95:79:0e:dd:7a:7d:24:53:4f:c6:35:4d:54:f6:
33:7a:3d:5b:19:32:f9:ce:9d:cc:ec:98:fc:66:1a:
88:d1:1e:26:30:12:82:e7:0e:8f:e1:a2:cb:bc:a3:
19:ee:fb:48:07:9d:80:36:24:5b:6e:78:4a:4b:19:
c6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:37:04:B0:B1:7A:FF:78:78:2B:14:71:7D:3C:F0:56:FD:28:A7:5D
X509v3 Authority Key Identifier:
keyid:87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/wjcEsLF6_3h4KxRxfTzwVv0op10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.250.188.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:ac:85:91:e2:7f:ef:b6:14:94:f6:bc:5f:13:7a:b4:74:6e:
59:14:88:3b:8a:15:19:07:bf:57:70:28:6d:94:2d:4a:8c:b8:
20:f0:ec:31:c1:e7:a9:b5:49:cd:43:c8:7c:55:77:e3:c6:4d:
f5:61:0a:0d:8f:3a:d3:47:91:39:aa:06:c4:f4:a2:0d:b6:36:
0f:3b:ac:fd:83:25:f8:7c:af:68:07:60:a2:8c:7f:5d:6f:e9:
b0:6d:17:4d:65:65:46:c5:a9:63:fe:15:37:90:77:07:7a:2f:
38:2e:55:c3:a6:a7:7c:dc:f9:d1:06:bb:41:6e:35:20:a1:d4:
0f:55:8d:64:46:f4:65:e6:a8:51:79:d8:f4:bd:01:ae:bc:f9:
0b:15:8f:6a:08:1d:0a:4c:70:76:b5:87:99:12:e4:6a:58:c6:
74:c5:50:59:5d:b4:95:90:0c:a8:a5:32:12:4b:0c:86:82:b4:
66:f2:2a:f7:67:e7:78:8c:75:22:db:5d:7e:cd:0a:13:30:70:
23:2c:57:29:de:73:d1:18:d5:75:7a:ab:7a:da:9b:04:ab:74:
64:37:28:9b:51:a9:c8:ef:54:48:47:d7:35:af:ac:9c:06:9a:
9c:91:01:0a:6a:18:d4:a0:a7:7f:64:bd:41:2a:21:9b:2a:01:
5e:59:2b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 14:54:08 2025 by rpki-client