Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/Wfy0gOYhm-HascTZbFNE4aSjqyk.roa
File: Wfy0gOYhm-HascTZbFNE4aSjqyk.roa (raw, json)
Hash identifier: oEaMJ8hbo1Wdz39vePS6+bAu9ktqvQAf9/UOh8Uvolc=
Subject key identifier: 59:FC:B4:80:E6:21:9B:E1:DA:B1:C4:D9:6C:53:44:E1:A4:A3:AB:29
Certificate issuer: /CN=7832d060932d4785a10ca47de8002f65c1ef33ae
Certificate serial: 020E9285
Authority key identifier: 78:32:D0:60:93:2D:47:85:A1:0C:A4:7D:E8:00:2F:65:C1:EF:33:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eDLQYJMtR4WhDKR96AAvZcHvM64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/Wfy0gOYhm-HascTZbFNE4aSjqyk.roa
Signing time: Sat 01 Jan 2022 04:58:49 +0000
ROA not before: Sat 01 Jan 2022 04:58:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50107
IP address blocks: 45.66.24.0/22 maxlen: 22
45.66.25.0/24 maxlen: 24
2a09:6140::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34509445 (0x20e9285)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7832d060932d4785a10ca47de8002f65c1ef33ae
Validity
Not Before: Jan 1 04:58:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=59fcb480e6219be1dab1c4d96c5344e1a4a3ab29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:50:30:d5:e5:aa:87:7b:fe:0c:ac:74:ae:d5:
0a:3a:50:ca:9d:03:f8:5d:d4:46:27:f0:af:12:0a:
3f:53:a0:9a:e4:41:0a:a2:bb:03:8d:89:0b:8d:1b:
80:bb:fb:b0:24:04:01:18:53:e9:85:29:22:a3:69:
a6:48:4a:1e:0e:bc:02:dd:83:4e:f7:52:ac:35:b2:
ad:15:6b:67:dc:91:e0:88:a8:a1:f3:c3:38:60:25:
da:be:f1:24:63:19:9b:7e:41:a8:9e:12:4d:7f:03:
8a:30:d3:dd:dd:3f:d5:7c:25:4a:f1:13:19:c5:78:
80:a8:09:a8:25:17:e9:bc:a9:29:9c:12:c8:d8:f8:
f6:1a:e8:8e:65:7d:c5:7f:5d:fd:86:1a:b2:6c:39:
1d:f1:88:24:02:18:7c:e2:3c:87:88:3b:d8:63:3d:
f5:58:33:5b:37:98:fa:57:7e:2a:1c:24:14:65:9a:
c0:65:09:41:09:78:a7:df:f8:a3:c9:7f:4c:13:56:
6e:84:4a:f0:e7:e6:35:c6:fd:92:65:06:13:2d:08:
e2:4d:0d:cb:8c:12:73:13:4a:55:38:43:63:58:ca:
8c:25:5b:21:fc:87:d1:5d:1b:be:53:46:08:84:24:
20:ca:7a:61:18:73:dd:a4:4b:3b:05:93:c4:70:a8:
28:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:FC:B4:80:E6:21:9B:E1:DA:B1:C4:D9:6C:53:44:E1:A4:A3:AB:29
X509v3 Authority Key Identifier:
keyid:78:32:D0:60:93:2D:47:85:A1:0C:A4:7D:E8:00:2F:65:C1:EF:33:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eDLQYJMtR4WhDKR96AAvZcHvM64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/Wfy0gOYhm-HascTZbFNE4aSjqyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/eDLQYJMtR4WhDKR96AAvZcHvM64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.24.0/22
IPv6:
2a09:6140::/29
Signature Algorithm: sha256WithRSAEncryption
7f:0a:de:be:7b:81:57:b4:bb:71:e7:ad:23:fe:71:84:14:a5:
4b:6a:4f:aa:d5:a5:f2:50:49:26:3b:e9:86:eb:2d:45:56:78:
85:21:22:ca:1d:21:96:1f:12:a9:4c:3c:2c:c4:3d:97:ca:20:
37:89:52:a2:72:f4:d6:45:a4:df:c6:26:f6:53:8f:00:51:ce:
a2:10:95:13:e7:c8:21:8a:df:1c:60:f9:b1:49:14:e7:07:65:
6a:19:e0:fc:4d:16:f7:b0:a5:88:36:f1:fb:aa:9d:7f:83:86:
70:32:d5:26:11:18:03:06:1b:6c:64:ce:3b:9e:d0:df:06:9c:
fb:96:cb:c0:69:d2:dc:9d:83:5a:7f:b8:2b:20:14:28:66:44:
6a:5f:7f:32:d6:ac:b2:6a:35:a7:49:a1:22:f6:38:02:6b:44:
dc:04:3f:0e:65:59:c2:30:8e:e2:e3:45:f3:f9:f4:e0:f8:cd:
e7:61:0d:c3:24:e2:08:f8:96:d4:a3:bf:0f:66:03:57:d4:e5:
d7:45:02:dc:90:17:96:93:dd:51:5a:5e:23:ed:2c:54:ca:9c:
ba:b8:05:19:92:8d:c5:37:e1:b0:ee:c4:ed:fa:8c:ab:33:e9:
fe:e4:60:84:f9:77:62:4f:ed:ac:72:e5:27:b5:04:f0:a2:20:
8a:08:39:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:41:02 2025 by rpki-client