Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/WIWnarTt1OquvASzqNXDU25YEEQ.roa
File: WIWnarTt1OquvASzqNXDU25YEEQ.roa (raw, json)
Hash identifier: vzhOnn110ETtpu0OSQiMcNbIz8mIUK4g/R0buFtbWMc=
Subject key identifier: 58:85:A7:6A:B4:ED:D4:EA:AE:BC:04:B3:A8:D5:C3:53:6E:58:10:44
Certificate issuer: /CN=082b303cb49e73e2d2a404583d5f8377ceb02545
Certificate serial: 018AD5455C1185747F6B247955BD6DB8A109
Authority key identifier: 08:2B:30:3C:B4:9E:73:E2:D2:A4:04:58:3D:5F:83:77:CE:B0:25:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CCswPLSec-LSpARYPV-Dd86wJUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/WIWnarTt1OquvASzqNXDU25YEEQ.roa
Signing time: Wed 27 Sep 2023 06:13:27 +0000
ROA not before: Wed 27 Sep 2023 06:13:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16242
IP address blocks: 193.134.251.0/24 maxlen: 24
193.247.85.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d5:45:5c:11:85:74:7f:6b:24:79:55:bd:6d:b8:a1:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=082b303cb49e73e2d2a404583d5f8377ceb02545
Validity
Not Before: Sep 27 06:13:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5885a76ab4edd4eaaebc04b3a8d5c3536e581044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e5:50:31:ea:bc:36:b1:c8:1f:4e:86:09:ed:
fb:d5:3b:07:39:dc:61:4f:84:5b:1a:db:bc:ae:89:
12:98:b5:e9:9b:29:0e:bd:9e:5a:a5:17:e7:6a:93:
89:34:71:02:d3:80:b4:c8:c0:e0:7c:ce:07:26:7d:
4c:21:24:86:2e:c6:4d:18:f1:54:04:00:6c:5c:1d:
83:aa:e1:d7:8f:a5:0a:ee:a5:c5:53:bd:6c:54:87:
d8:fc:3b:ae:97:db:2a:3d:f2:18:11:56:c5:08:3e:
96:6f:f6:07:f2:b0:36:68:f4:83:a8:63:90:06:31:
b5:69:05:bb:d6:1c:09:0d:2c:2e:8d:39:09:26:fd:
1c:1b:a6:ae:fd:a8:6e:8a:da:b8:c5:73:fc:83:15:
42:c7:84:cc:10:c2:c5:12:4b:93:59:55:71:94:3e:
09:ec:90:13:77:f0:a7:de:7d:20:cd:a6:fb:00:02:
b2:7c:d0:5c:50:aa:76:3c:4c:68:5a:88:d3:f2:a1:
3c:6e:c4:7d:24:ba:bd:1a:61:5e:82:d0:90:04:45:
92:59:94:08:0d:9b:34:dc:33:c9:85:65:55:b5:7a:
d8:a8:40:26:9a:ee:bb:cf:5d:8f:12:e0:3a:7a:53:
a5:4f:6f:3d:0b:5e:15:a3:fb:c1:95:8d:f8:32:f9:
5d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:85:A7:6A:B4:ED:D4:EA:AE:BC:04:B3:A8:D5:C3:53:6E:58:10:44
X509v3 Authority Key Identifier:
keyid:08:2B:30:3C:B4:9E:73:E2:D2:A4:04:58:3D:5F:83:77:CE:B0:25:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCswPLSec-LSpARYPV-Dd86wJUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/WIWnarTt1OquvASzqNXDU25YEEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.134.251.0/24
193.247.85.0/24
Signature Algorithm: sha256WithRSAEncryption
31:04:eb:24:dc:83:37:14:41:b4:df:e3:c5:e3:b5:d6:fc:e4:
12:ed:48:72:51:6c:ac:93:db:f4:6d:aa:71:43:21:48:2a:ed:
1a:4d:37:73:f1:64:16:b5:43:f0:78:a1:5d:ff:c1:7f:95:60:
9d:5f:54:5c:44:b2:cc:45:e0:d9:18:27:42:ca:7b:80:91:f7:
0f:b6:0e:8d:23:86:f3:32:f9:5b:15:52:ce:4c:31:e3:82:9b:
eb:85:42:4c:82:38:67:e9:d1:37:70:e0:f8:39:c0:b7:ba:f3:
39:0c:1e:78:22:50:01:b0:ea:52:07:a3:35:20:46:dc:af:3d:
94:d6:2b:54:d8:30:aa:00:1b:f5:e2:da:f5:df:73:e3:2e:7a:
d5:ef:93:0e:85:2d:3b:f2:23:e2:ee:c9:70:f0:cc:1e:e5:4f:
ca:98:d2:c1:15:dd:19:3c:2c:a4:8a:0b:9b:ad:ca:b6:74:ec:
20:ff:62:8a:c6:03:69:fd:20:d6:f2:14:bc:27:28:f6:a8:d8:
5c:1e:56:27:83:bf:6c:63:1f:e7:62:30:f1:f6:ba:30:5e:16:
65:44:9b:16:c8:b1:cb:25:81:1c:d7:35:a8:4f:0a:3c:26:f9:
65:f6:1d:83:f6:93:fb:46:e4:db:5a:30:fb:46:2e:3a:fe:f3:
c9:61:59:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:43:38 2025 by rpki-client