Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/wiFRHQlZ9VynnVlFur9DUuXODrg.roa
File: wiFRHQlZ9VynnVlFur9DUuXODrg.roa (raw, json)
Hash identifier: jAuRyoF75hhahFRDl0WiiZkeXedbu5raPcipRkOVH3g=
Subject key identifier: C2:21:51:1D:09:59:F5:5C:A7:9D:59:45:BA:BF:43:52:E5:CE:0E:B8
Certificate issuer: /CN=8c6eadb8659bc734dccb29f638421036bb922e36
Certificate serial: 01852B1DB95BBFB24F907CE8A9FF46EC6B6E
Authority key identifier: 8C:6E:AD:B8:65:9B:C7:34:DC:CB:29:F6:38:42:10:36:BB:92:2E:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jG6tuGWbxzTcyyn2OEIQNruSLjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/wiFRHQlZ9VynnVlFur9DUuXODrg.roa
Signing time: Mon 19 Dec 2022 16:00:46 +0000
ROA not before: Mon 19 Dec 2022 16:00:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1299
IP address blocks: 45.13.124.0/22 maxlen: 24
185.96.40.0/22 maxlen: 24
2a03:fd83::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2b:1d:b9:5b:bf:b2:4f:90:7c:e8:a9:ff:46:ec:6b:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c6eadb8659bc734dccb29f638421036bb922e36
Validity
Not Before: Dec 19 16:00:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c221511d0959f55ca79d5945babf4352e5ce0eb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:02:8c:04:f3:c5:58:83:3c:9f:7b:9c:8f:4f:
cf:aa:e2:90:bb:45:14:39:50:f8:75:05:42:ab:eb:
6c:bd:b6:10:b8:2a:fe:ce:ef:cb:7f:16:46:33:02:
9b:08:45:ed:52:95:29:3e:17:e5:fb:cc:9f:73:b4:
05:67:d1:4f:7a:0f:27:e2:3d:45:8c:f1:51:91:50:
d0:16:69:d5:ab:55:88:6d:d5:21:29:62:74:69:98:
59:3c:5f:9f:7e:a8:d4:06:c6:46:a6:59:09:f6:4c:
8f:b0:b9:9a:88:7a:fd:29:e4:26:21:b7:79:f5:18:
2b:ac:fe:36:1a:8a:d3:8f:ed:4c:3a:57:b3:79:bc:
54:a3:93:f6:01:2d:7f:4f:48:3e:2e:a5:27:3e:1e:
a7:3c:9c:10:8a:5b:64:a1:04:aa:16:81:c1:95:26:
85:28:fb:fb:3b:e7:0b:2d:28:13:0f:7c:8c:a1:02:
68:fe:b5:8c:b3:f6:22:d5:f4:35:19:64:21:a6:d9:
51:9c:d3:b2:0b:d9:97:a6:26:9b:42:8e:44:81:93:
5c:33:d8:3b:a5:46:5f:7f:aa:98:40:3c:3f:94:e7:
5e:a8:b5:ae:67:25:19:e9:62:6a:b5:44:1d:df:9c:
57:6a:62:c0:b4:c2:28:3b:19:a3:5d:23:25:28:12:
dd:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:21:51:1D:09:59:F5:5C:A7:9D:59:45:BA:BF:43:52:E5:CE:0E:B8
X509v3 Authority Key Identifier:
keyid:8C:6E:AD:B8:65:9B:C7:34:DC:CB:29:F6:38:42:10:36:BB:92:2E:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jG6tuGWbxzTcyyn2OEIQNruSLjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/wiFRHQlZ9VynnVlFur9DUuXODrg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.124.0/22
185.96.40.0/22
IPv6:
2a03:fd83::/32
Signature Algorithm: sha256WithRSAEncryption
a6:60:45:6d:3f:33:f9:34:4c:64:3a:f4:0c:53:42:20:d0:95:
88:00:98:9b:08:9b:f4:47:ea:69:f6:78:4c:16:0d:16:55:63:
2f:3f:2c:13:66:02:a9:bb:49:44:70:85:2c:f1:f1:aa:95:6c:
88:18:33:92:a6:8c:9f:43:7d:b1:d1:03:b9:21:21:e6:b7:94:
82:ea:2f:56:28:bb:ff:45:2a:85:e4:a4:b8:91:76:18:fa:be:
a0:87:e0:f5:c6:56:ad:8e:2b:50:71:5a:57:8f:cb:8d:ec:5b:
89:fa:a4:a1:80:72:bb:c8:f0:13:e2:f8:39:33:1f:28:00:6e:
3c:f9:8f:e1:52:ad:13:a6:eb:02:31:8c:c2:92:eb:32:8a:fe:
31:81:2a:a9:a4:58:e5:de:c0:41:f3:0d:4a:07:b2:72:94:8c:
e9:3c:60:e5:eb:39:a8:2f:54:f2:47:43:63:87:cf:fa:1a:7a:
f4:e8:2c:01:e7:48:58:cb:61:e4:f5:34:88:2d:af:bb:b4:b4:
91:f5:93:cd:7b:a3:49:be:55:77:f8:d6:af:5c:b4:68:27:8e:
88:3e:75:0f:03:73:d9:a9:a4:e1:a9:1a:c0:58:70:6e:a8:54:
b1:92:a6:bd:07:32:70:96:12:1e:4a:72:4d:7a:5f:3d:93:e9:
25:49:48:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 08:25:25 2025 by rpki-client