Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/WmqiIzEt7VcHsKW8jvwArjXGzto.roa
File: WmqiIzEt7VcHsKW8jvwArjXGzto.roa (raw, json)
Hash identifier: ry4jFuVnHNfqGqCKrgII2xx+ZVryewNwtvjZw7reW5A=
Subject key identifier: 5A:6A:A2:23:31:2D:ED:57:07:B0:A5:BC:8E:FC:00:AE:35:C6:CE:DA
Certificate issuer: /CN=faf64476ef3945b344ffee38da56caccc5d039b0
Certificate serial: 37E43043
Authority key identifier: FA:F6:44:76:EF:39:45:B3:44:FF:EE:38:DA:56:CA:CC:C5:D0:39:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-vZEdu85RbNE_-442lbKzMXQObA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/WmqiIzEt7VcHsKW8jvwArjXGzto.roa
Signing time: Sat 01 Jan 2022 01:50:45 +0000
ROA not before: Sat 01 Jan 2022 01:50:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208896
IP address blocks: 185.57.164.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 937701443 (0x37e43043)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faf64476ef3945b344ffee38da56caccc5d039b0
Validity
Not Before: Jan 1 01:50:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5a6aa223312ded5707b0a5bc8efc00ae35c6ceda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:97:0d:cf:0d:9d:2d:6f:35:af:49:33:79:ce:
d7:3c:51:f4:20:21:7b:40:17:b0:27:95:ca:fa:55:
73:a8:48:e1:4f:6e:e0:4c:cf:fa:e7:54:7f:6b:10:
bb:e0:01:22:52:9b:24:2f:ba:30:85:79:9d:8c:08:
1e:7c:60:2d:a9:11:6b:37:0b:a5:d6:39:4c:1f:af:
8d:81:1d:7e:6a:63:39:13:21:87:d1:eb:88:9a:49:
25:28:75:c5:7e:24:30:62:96:f6:04:2d:0c:2a:3e:
68:1e:7c:6a:5b:09:33:d3:95:3a:a8:93:e1:2f:e3:
71:fc:bd:c9:05:80:f2:b8:74:0d:17:15:4f:78:8c:
30:9a:71:a6:af:49:cf:27:3b:c6:55:48:01:cc:ad:
34:bc:93:c0:d7:35:c9:92:b7:3e:20:f2:11:10:12:
c6:40:80:c1:80:46:0b:57:ff:7c:a9:be:77:fa:93:
cb:b4:aa:b1:5f:7c:b7:71:06:47:4e:2b:75:e0:9c:
ee:82:44:11:3f:2a:de:bd:89:f8:f9:67:97:1e:a4:
3f:fe:3b:f3:48:24:ac:d8:19:90:68:39:29:dd:83:
7f:71:2e:8d:29:b0:ff:f5:a0:b1:e4:ec:2a:0d:3c:
a4:84:ba:23:ef:4c:2f:57:af:68:83:68:92:40:92:
9e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:6A:A2:23:31:2D:ED:57:07:B0:A5:BC:8E:FC:00:AE:35:C6:CE:DA
X509v3 Authority Key Identifier:
keyid:FA:F6:44:76:EF:39:45:B3:44:FF:EE:38:DA:56:CA:CC:C5:D0:39:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vZEdu85RbNE_-442lbKzMXQObA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/WmqiIzEt7VcHsKW8jvwArjXGzto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.57.164.0/24
Signature Algorithm: sha256WithRSAEncryption
20:81:e3:7e:c4:6b:cb:cf:a1:03:ce:44:27:f0:37:70:da:e3:
85:96:db:a8:b9:58:59:20:5c:7a:97:24:87:f3:b7:e4:c6:56:
a3:6c:54:f6:67:d4:bb:e2:3b:fc:6f:76:97:f7:9b:c8:1a:69:
90:a5:6b:dc:1b:b7:d7:c4:c3:30:9a:c0:ea:b1:0f:a4:92:c5:
0a:6a:1e:f1:e5:09:41:01:df:68:3c:b7:9d:bd:ca:2e:e6:87:
2c:a6:ee:d5:2a:46:36:af:3a:38:e4:c0:29:5b:2b:e1:33:65:
f5:6e:4d:77:1f:53:a3:8c:f2:68:8f:ec:b2:bf:99:9d:e3:9a:
7a:fc:d2:1b:ce:23:59:c7:d2:e5:da:b0:8a:d1:56:42:87:ad:
3a:94:9a:a6:4c:33:a1:7f:71:34:49:10:c5:bb:af:19:77:81:
25:93:46:86:b6:e6:d3:65:ae:3f:47:e3:90:83:46:99:e4:9d:
5f:1e:a4:df:dd:97:cd:7d:33:5f:ad:59:39:19:50:8d:ad:39:
66:b8:1c:08:2a:88:8b:89:16:17:ef:6d:bb:f5:42:71:49:26:
f7:99:f2:3a:06:57:7b:8a:ef:fc:48:c4:3d:7d:ae:63:e8:02:
56:8b:c6:60:78:75:4b:3d:8b:fb:26:59:d8:b2:0b:6c:c4:33:
47:cd:9d:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:52:01 2025 by rpki-client