Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/WhSkmgV7m0ywmyCRK6xO1DGueeI.roa
File: WhSkmgV7m0ywmyCRK6xO1DGueeI.roa (raw, json)
Hash identifier: BF/HV6LvkuJStSdRrGA9ImMORznoGcmW+nS2pBvfUHY=
Subject key identifier: 5A:14:A4:9A:05:7B:9B:4C:B0:9B:20:91:2B:AC:4E:D4:31:AE:79:E2
Certificate issuer: /CN=579353cb42e0c4fba5cae253a5768bc1f2465b99
Certificate serial: 01BD80AF
Authority key identifier: 57:93:53:CB:42:E0:C4:FB:A5:CA:E2:53:A5:76:8B:C1:F2:46:5B:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5NTy0LgxPulyuJTpXaLwfJGW5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/WhSkmgV7m0ywmyCRK6xO1DGueeI.roa
Signing time: Sat 01 Jan 2022 07:54:17 +0000
ROA not before: Sat 01 Jan 2022 07:54:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48728
IP address blocks: 185.25.12.0/23 maxlen: 23
185.25.14.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29196463 (0x1bd80af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=579353cb42e0c4fba5cae253a5768bc1f2465b99
Validity
Not Before: Jan 1 07:54:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5a14a49a057b9b4cb09b20912bac4ed431ae79e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:6b:aa:6a:93:04:50:56:f5:8e:f1:78:a6:0e:
48:04:b7:5f:42:96:03:91:00:58:fd:92:7b:5e:ef:
f2:73:ff:53:44:9f:0d:fa:00:81:94:93:28:78:ed:
79:12:d3:ed:7c:df:1f:e7:6f:92:46:03:5f:c8:39:
f5:d5:47:f3:99:d2:71:5e:5b:55:8c:f6:a7:68:35:
7a:85:8d:ac:cb:94:09:2d:69:13:d3:22:6e:45:7c:
67:90:d6:71:ce:23:bb:cf:85:0b:43:23:7c:07:ba:
da:bc:05:50:c1:d5:59:8a:4a:2e:8a:7b:d7:f8:84:
e1:5d:40:53:4c:a7:24:99:96:e8:43:fd:5d:81:1d:
b3:b2:23:84:bb:7d:6a:c6:7d:39:4f:a2:f2:06:2f:
f4:18:6e:bc:40:e9:25:4d:47:7d:f0:96:fd:e4:25:
65:2a:7e:fa:5e:e7:09:67:6e:c4:8f:80:b1:6b:19:
7b:d6:af:3d:6a:cf:e9:c4:fd:aa:1a:fc:2e:57:e5:
ba:01:45:78:ff:1a:32:7f:41:2f:2e:c5:51:65:13:
1d:32:24:b5:34:ea:eb:c0:38:78:9a:09:bb:e7:b3:
46:45:27:c0:bf:20:c6:cc:77:5f:e7:f9:6c:ec:87:
1d:39:46:63:f0:69:a0:0e:61:ed:a4:c4:9f:35:62:
57:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:14:A4:9A:05:7B:9B:4C:B0:9B:20:91:2B:AC:4E:D4:31:AE:79:E2
X509v3 Authority Key Identifier:
keyid:57:93:53:CB:42:E0:C4:FB:A5:CA:E2:53:A5:76:8B:C1:F2:46:5B:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5NTy0LgxPulyuJTpXaLwfJGW5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/WhSkmgV7m0ywmyCRK6xO1DGueeI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/V5NTy0LgxPulyuJTpXaLwfJGW5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.25.12.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:e0:20:a4:11:41:77:50:d7:90:5e:5d:3a:a7:89:82:0a:29:
77:0a:92:ac:ca:c7:48:e7:78:07:99:f7:14:71:0b:ce:b7:d3:
a3:a6:14:1b:d7:84:e6:de:25:5b:e9:5f:3e:70:61:56:00:42:
60:a6:3e:96:fa:40:bc:c3:38:82:7c:6d:c5:15:0f:69:26:aa:
c2:41:7c:6f:9d:23:35:71:a7:8d:29:d3:17:a3:11:09:c3:49:
94:6b:ea:cc:98:b0:95:bb:6b:44:c4:88:38:6d:9c:05:c6:cb:
44:2d:16:0d:b4:9b:95:48:bb:bb:7b:95:6d:bd:91:5b:0e:5d:
7d:18:0d:8c:ca:41:87:4a:bf:ec:82:e7:f5:2f:c9:22:c9:ef:
32:a3:a8:10:6d:13:7e:19:79:08:51:c2:f0:3e:39:73:b7:a1:
5b:91:39:35:44:35:25:aa:e4:ad:78:d5:9e:a4:3f:78:77:b9:
03:6b:3c:01:c1:8f:e3:a0:aa:60:92:af:1f:f5:bc:f9:d4:87:
fa:a1:ff:d8:e5:e9:ff:f8:c8:3a:58:38:55:8d:6a:73:c4:51:
f6:fd:74:2e:97:70:87:b6:16:b4:69:21:01:eb:1b:a6:cf:47:
a3:f8:7d:ce:47:1e:b4:55:ad:5e:58:a8:90:d1:df:3d:01:9d:
70:de:9c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:08:42 2025 by rpki-client