Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/a43850-02a2-4859-9bde-564ebdcf3f96/1/WEDBCBUao6mdlowklLWtkV7tSz4.roa
File: WEDBCBUao6mdlowklLWtkV7tSz4.roa (raw, json)
Hash identifier: n4yA4xKnq+1rCYX0v42u+N6FtT6VjfWOqEtjc0etcis=
Subject key identifier: 58:40:C1:08:15:1A:A3:A9:9D:96:8C:24:94:B5:AD:91:5E:ED:4B:3E
Certificate issuer: /CN=7c3532e52eaafef948c42c8b1d51145cac9d4c96
Certificate serial: 01821A07538B17EE6AAD5148C4BFE13FA5B2
Authority key identifier: 7C:35:32:E5:2E:AA:FE:F9:48:C4:2C:8B:1D:51:14:5C:AC:9D:4C:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fDUy5S6q_vlIxCyLHVEUXKydTJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/a43850-02a2-4859-9bde-564ebdcf3f96/1/WEDBCBUao6mdlowklLWtkV7tSz4.roa
Signing time: Wed 20 Jul 2022 05:14:23 +0000
ROA not before: Wed 20 Jul 2022 05:14:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204591
IP address blocks: 193.22.232.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:1a:07:53:8b:17:ee:6a:ad:51:48:c4:bf:e1:3f:a5:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3532e52eaafef948c42c8b1d51145cac9d4c96
Validity
Not Before: Jul 20 05:14:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5840c108151aa3a99d968c2494b5ad915eed4b3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f6:7b:1f:69:7d:98:95:9c:25:71:56:ee:9c:
f9:9e:f0:3f:c4:f8:47:9f:ff:d3:7f:c8:b6:31:8a:
29:4c:68:62:e0:db:3b:d6:50:55:57:52:08:95:1f:
e4:9a:f4:92:ec:9b:b3:d6:ba:e1:bf:32:39:81:8e:
1f:4c:0a:89:bb:3b:25:f8:a0:09:a9:02:af:ea:13:
21:fc:eb:80:61:d5:c9:d6:6c:e5:ce:10:b3:22:3b:
58:1a:57:5e:07:45:f9:e3:6a:bd:76:fd:3d:1f:ef:
30:df:0b:d8:4b:fd:be:29:79:9f:b7:64:2c:90:0d:
f0:48:2c:3d:b4:15:73:7a:65:00:e1:44:0e:2a:7c:
1a:28:76:f3:12:6a:6a:40:58:43:97:f2:fd:8c:03:
b1:9a:a7:b3:e0:af:90:84:77:89:e0:1f:36:c7:ae:
a1:7c:e1:24:04:5f:46:dd:b6:87:a2:dc:3b:2e:8e:
e8:f5:6b:ae:d0:ae:8f:a5:be:21:5e:8c:4f:08:c2:
21:f6:74:50:be:2c:69:e2:55:01:87:d8:1a:91:6d:
2f:c4:26:bb:25:f4:e1:6b:12:7a:e7:3e:0c:67:01:
98:27:b8:b1:f4:e5:04:0d:62:fb:17:3e:84:d2:6e:
eb:c8:f9:e3:e6:6c:dc:34:64:15:78:cb:44:e8:05:
21:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:40:C1:08:15:1A:A3:A9:9D:96:8C:24:94:B5:AD:91:5E:ED:4B:3E
X509v3 Authority Key Identifier:
keyid:7C:35:32:E5:2E:AA:FE:F9:48:C4:2C:8B:1D:51:14:5C:AC:9D:4C:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDUy5S6q_vlIxCyLHVEUXKydTJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a43850-02a2-4859-9bde-564ebdcf3f96/1/WEDBCBUao6mdlowklLWtkV7tSz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a43850-02a2-4859-9bde-564ebdcf3f96/1/fDUy5S6q_vlIxCyLHVEUXKydTJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.22.232.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:75:0e:01:04:c8:2b:01:13:9f:c8:03:44:a5:f2:53:e0:52:
f8:54:f1:86:6b:ad:99:e0:28:a0:26:06:73:a9:d1:a4:b2:e5:
fb:d1:dd:bb:bc:b7:ea:2a:aa:a3:7b:70:ec:36:38:91:3d:d8:
f8:b7:26:68:3f:17:72:ad:11:a8:1a:32:78:1a:31:cf:ec:ea:
b7:b2:f6:8a:6d:95:7b:65:2a:04:8a:0c:99:01:9d:2b:7a:1a:
80:cb:96:16:df:a2:3c:56:a9:e7:e2:74:94:60:a9:8c:a7:79:
a7:5a:04:2b:86:0d:a5:fc:c4:32:e9:d9:00:47:61:b5:fb:ff:
d8:53:0f:f9:96:87:19:31:1b:de:67:90:41:10:a0:83:ba:29:
a1:b4:da:89:59:43:85:64:68:42:e1:41:7a:ed:00:46:74:6c:
cc:a0:4e:68:a9:5f:cf:b2:56:06:1e:41:d9:3b:39:45:6f:99:
b9:d6:fc:fa:eb:1d:0f:ef:d3:f7:46:1b:b3:46:f7:d7:f0:4c:
44:3b:42:0f:45:6b:d7:ce:8d:ee:1d:c5:16:0d:f1:dc:6b:34:
1c:b5:cd:ae:17:b8:4e:53:84:76:13:b5:fd:dc:da:d2:f4:b2:
e2:dc:1c:36:b6:73:18:c1:6f:58:a5:f0:27:35:b9:02:88:53:
0f:e7:ad:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:10:51 2025 by rpki-client