Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/958fef-0d55-4c00-be8a-cc580521d00f/1/WsngaNSvK6B3ENmobNlOtfREvuE.roa
File: WsngaNSvK6B3ENmobNlOtfREvuE.roa (raw, json)
Hash identifier: H5AHaDvsgLVefpWxrUuqfmTh6BQpUZbL/fPu+SG/kkk=
Subject key identifier: 5A:C9:E0:68:D4:AF:2B:A0:77:10:D9:A8:6C:D9:4E:B5:F4:44:BE:E1
Certificate issuer: /CN=87943cb86e3a703813778fab790d65f0da21615a
Certificate serial: 01856E38AA6F319619E753909DE3A18F34F9
Authority key identifier: 87:94:3C:B8:6E:3A:70:38:13:77:8F:AB:79:0D:65:F0:DA:21:61:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5Q8uG46cDgTd4-reQ1l8NohYVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/958fef-0d55-4c00-be8a-cc580521d00f/1/WsngaNSvK6B3ENmobNlOtfREvuE.roa
Signing time: Sun 01 Jan 2023 16:44:45 +0000
ROA not before: Sun 01 Jan 2023 16:44:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43882
IP address blocks: 79.133.160.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:38:aa:6f:31:96:19:e7:53:90:9d:e3:a1:8f:34:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87943cb86e3a703813778fab790d65f0da21615a
Validity
Not Before: Jan 1 16:44:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5ac9e068d4af2ba07710d9a86cd94eb5f444bee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:36:7a:8d:48:a9:5a:6f:f8:2d:89:da:c5:61:
24:84:fd:96:ca:bb:9f:05:95:75:99:f2:83:00:bb:
59:cd:e8:e0:07:83:06:9c:02:5d:dd:d3:f1:03:1e:
0f:f7:1b:2d:0a:1e:a5:72:59:b1:1f:90:84:e5:64:
7d:67:fd:34:2f:71:e6:ac:cf:1a:30:e1:09:ab:00:
5b:68:65:d3:3e:20:f2:d4:89:c3:07:27:3e:1e:33:
ad:7b:32:cc:47:29:51:7c:77:0e:96:1a:d6:2b:32:
9e:3a:3d:ad:00:7f:44:76:f1:82:8d:65:f1:b0:6d:
1f:bf:9a:67:88:ab:80:2b:61:ba:5a:46:f5:a6:74:
5b:51:82:85:9b:3c:fb:88:17:cf:19:31:cd:6e:43:
77:47:ae:48:31:33:0a:94:8e:24:3e:98:2a:fb:80:
d1:c2:a0:5d:f3:18:99:48:93:ba:aa:22:20:ee:1d:
4b:27:3e:b6:10:e1:d9:23:1e:48:59:34:d2:61:27:
d5:ef:59:3a:e1:f5:72:69:7a:42:51:05:e5:79:87:
55:8f:ff:d0:e9:d2:75:45:e2:79:00:7c:c4:75:ae:
b9:eb:ae:e7:80:68:c4:d9:fb:0c:0c:fd:0b:5b:c4:
75:4b:01:3d:75:f9:3a:3d:30:92:42:79:5e:f1:e5:
6c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:C9:E0:68:D4:AF:2B:A0:77:10:D9:A8:6C:D9:4E:B5:F4:44:BE:E1
X509v3 Authority Key Identifier:
keyid:87:94:3C:B8:6E:3A:70:38:13:77:8F:AB:79:0D:65:F0:DA:21:61:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5Q8uG46cDgTd4-reQ1l8NohYVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/958fef-0d55-4c00-be8a-cc580521d00f/1/WsngaNSvK6B3ENmobNlOtfREvuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/958fef-0d55-4c00-be8a-cc580521d00f/1/h5Q8uG46cDgTd4-reQ1l8NohYVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.133.160.0/20
Signature Algorithm: sha256WithRSAEncryption
15:47:7f:9e:e7:49:69:ff:45:f8:17:19:1b:d1:f2:22:19:df:
b6:94:12:9f:27:f5:e8:9c:5b:86:df:fc:3f:0f:f6:0f:1c:cb:
51:7b:be:98:14:b6:31:02:15:e8:dd:33:f8:38:ed:3d:8d:2e:
ef:06:76:61:95:42:99:98:5a:6c:67:21:01:78:39:80:34:dd:
0a:0a:e2:91:79:80:b9:1a:bc:f7:68:81:6f:f1:2d:83:ee:c1:
94:2e:b0:d7:a9:74:7b:ff:e3:d3:00:0e:23:95:3f:ce:00:7d:
17:70:63:b7:fc:7f:aa:15:3a:13:31:55:05:5e:e0:f2:91:60:
c3:a1:38:73:b3:75:a4:c7:d7:82:5f:bc:9d:05:1b:aa:9f:5b:
f5:d2:72:c0:81:ad:98:56:ab:4d:75:fa:e9:af:4d:fd:18:54:
08:1e:52:85:be:e9:8e:3a:77:8d:e5:d0:47:e9:ee:fa:14:12:
60:c2:d0:db:d7:a6:c2:75:74:d0:cc:e0:31:97:0b:ce:93:70:
1c:39:e4:53:0a:fd:ac:b3:67:12:2f:f8:f6:81:55:83:20:fe:
ef:0c:b8:88:94:bd:b5:1e:eb:5b:c1:27:1a:65:05:11:c7:01:
e2:59:b8:91:da:de:33:21:75:b1:54:d3:4e:f1:b9:64:a2:1a:
34:3e:fc:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:35:26 2025 by rpki-client