Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/WdgBnXtFDiyTfkiiXoiSLJv9E2I.roa
File: WdgBnXtFDiyTfkiiXoiSLJv9E2I.roa (raw, json)
Hash identifier: Gqd2VfBSbixWG2o/ofQIcitvBfbn3N6022abZFG0WsU=
Subject key identifier: 59:D8:01:9D:7B:45:0E:2C:93:7E:48:A2:5E:88:92:2C:9B:FD:13:62
Certificate issuer: /CN=ab069058b4d367612be4807372b5e593e0347766
Certificate serial: 105D6212
Authority key identifier: AB:06:90:58:B4:D3:67:61:2B:E4:80:73:72:B5:E5:93:E0:34:77:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/WdgBnXtFDiyTfkiiXoiSLJv9E2I.roa
Signing time: Sat 01 Jan 2022 11:58:58 +0000
ROA not before: Sat 01 Jan 2022 11:58:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1930
IP address blocks: 192.135.219.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 274555410 (0x105d6212)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab069058b4d367612be4807372b5e593e0347766
Validity
Not Before: Jan 1 11:58:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=59d8019d7b450e2c937e48a25e88922c9bfd1362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:42:29:ad:b2:52:ce:f7:a6:23:34:cb:c4:30:
14:78:6c:1d:bc:6d:28:8c:ea:96:cd:ab:00:da:7e:
28:23:8e:6d:2c:63:08:ef:79:6a:f0:e6:1e:46:e7:
49:74:15:50:f0:94:f9:30:17:b1:26:82:9c:f1:85:
68:8a:74:0e:69:66:62:6d:2d:74:04:c5:db:b2:8e:
24:28:1d:54:b1:e0:9f:b1:35:26:c0:47:5d:d7:01:
f1:a8:2c:1e:f3:bb:3d:60:c9:5f:95:b7:9f:2f:5e:
2a:c1:06:1c:59:e1:24:76:8d:65:07:21:1c:fb:e4:
fc:41:8d:d7:fd:45:33:f8:de:b2:97:c7:62:70:dd:
42:40:34:fa:41:f3:88:47:58:0c:88:7e:11:0a:f5:
b0:58:77:38:9c:55:6d:2f:f9:51:32:a0:18:af:ff:
55:27:ea:48:de:d3:ae:e6:33:1c:c2:70:d8:d4:76:
53:27:23:33:4c:87:9f:a3:f1:a9:69:e2:64:8f:46:
aa:a7:bd:18:51:02:15:ef:2b:e7:d0:bc:a7:95:05:
8d:0d:9b:4c:06:7b:e0:25:63:2f:86:72:c0:de:f7:
bd:68:01:5b:7a:ed:5e:a3:ca:9d:55:aa:f2:5f:ce:
8f:d6:a6:0b:66:38:94:ec:03:fb:e7:59:11:77:97:
67:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:D8:01:9D:7B:45:0E:2C:93:7E:48:A2:5E:88:92:2C:9B:FD:13:62
X509v3 Authority Key Identifier:
keyid:AB:06:90:58:B4:D3:67:61:2B:E4:80:73:72:B5:E5:93:E0:34:77:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/WdgBnXtFDiyTfkiiXoiSLJv9E2I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.135.219.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:1f:75:75:8f:81:13:24:57:38:41:8a:62:d6:70:5f:60:d4:
ec:64:4b:b0:2d:97:ff:f1:e5:5d:29:73:71:74:e4:95:39:22:
32:43:92:22:2f:71:5f:7b:32:73:25:fd:bb:44:6a:dc:81:99:
ba:19:03:45:52:ea:ed:02:c3:e1:3b:ed:37:2a:97:e7:b3:f6:
6b:4a:45:6b:16:22:cb:49:9d:30:16:d8:01:c8:1c:5b:35:2b:
6b:a1:8a:fb:b3:de:d9:d5:c7:a3:17:2b:d3:f5:57:bc:5f:3b:
13:89:c8:f0:1a:51:41:a1:b1:0c:db:58:e5:e2:94:ac:b2:0a:
e8:f0:33:80:24:f5:aa:41:b9:53:db:29:6e:26:ed:68:e8:a6:
de:85:50:08:05:b5:9f:c7:fe:e9:43:e5:fb:e2:71:40:d3:ca:
a4:bd:bd:b5:c2:9e:1c:e0:09:c0:f9:8f:98:d2:8d:48:47:e7:
e1:0e:93:a9:64:0a:9f:0d:98:f8:74:3b:6f:31:1b:5e:4f:56:
88:05:c0:42:f1:a8:1b:dd:22:1c:09:19:1a:13:34:92:39:09:
86:dc:23:9a:5d:ce:29:2d:ff:1b:f2:09:64:2e:23:1c:c2:d0:
15:b8:47:44:85:b0:ae:18:5e:e2:84:b6:da:ff:61:6e:2c:c7:
86:5d:26:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:13:30 2025 by rpki-client