Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/fdb398-3fb5-4b6a-a003-cfc4a676d6e0/1/gwecalpk9oHeX6yl5qH1WsXHXH8.roa
File: gwecalpk9oHeX6yl5qH1WsXHXH8.roa (raw, json)
Hash identifier: T4XMbVcwoNcR7FCOEXXwIKm8IQf4LXOhEQBamekGJMg=
Subject key identifier: 83:07:9C:6A:5A:64:F6:81:DE:5F:AC:A5:E6:A1:F5:5A:C5:C7:5C:7F
Certificate issuer: /CN=0395add86baf6b2d06ff41f5526d347f71eeb410
Certificate serial: 01856C6F0ED7DB4C61D1D0A2E1E9978B6ED9
Authority key identifier: 03:95:AD:D8:6B:AF:6B:2D:06:FF:41:F5:52:6D:34:7F:71:EE:B4:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A5Wt2Guvay0G_0H1Um00f3HutBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/fdb398-3fb5-4b6a-a003-cfc4a676d6e0/1/gwecalpk9oHeX6yl5qH1WsXHXH8.roa
Signing time: Sun 01 Jan 2023 08:24:55 +0000
ROA not before: Sun 01 Jan 2023 08:24:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2200
IP address blocks: 163.9.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:6f:0e:d7:db:4c:61:d1:d0:a2:e1:e9:97:8b:6e:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0395add86baf6b2d06ff41f5526d347f71eeb410
Validity
Not Before: Jan 1 08:24:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=83079c6a5a64f681de5faca5e6a1f55ac5c75c7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:85:c2:f8:30:7b:8a:f8:63:93:92:14:8c:45:
19:c0:56:5d:62:4f:33:be:54:72:ea:66:a2:f6:3a:
17:56:93:d6:3a:53:14:53:29:90:dd:00:39:66:8b:
db:22:a1:95:7d:4e:3a:a2:26:2b:3f:b9:94:40:4c:
2d:6b:a4:77:14:59:90:a9:60:7a:28:03:91:4b:35:
e3:cf:db:e3:ff:c9:9a:88:27:9c:ae:a9:55:a1:03:
d5:d5:c6:0a:1a:03:07:f9:33:f0:ef:2e:d8:f5:da:
a8:fc:46:02:7a:70:18:28:05:ee:1b:56:84:c2:d3:
2b:85:e5:42:a6:b1:53:f8:51:49:5e:ab:40:23:4c:
77:80:95:30:24:2e:a5:a8:ec:c8:da:b9:2e:de:fd:
01:02:4e:9a:70:ab:04:0b:3c:ae:4e:dc:63:53:c1:
a8:84:3a:e9:47:09:2e:aa:c2:9e:5e:f2:a7:4d:32:
51:98:ab:3f:51:97:f4:fe:69:83:fd:27:3f:29:50:
9f:55:10:d0:9c:81:82:db:a5:89:44:cb:75:1e:59:
6c:04:da:b7:7d:bd:c7:7e:63:58:9a:da:e4:c8:df:
10:62:68:41:49:93:58:ef:19:10:c5:43:90:e7:83:
58:44:53:7b:f4:29:06:71:1e:ae:46:bc:0c:74:00:
82:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:07:9C:6A:5A:64:F6:81:DE:5F:AC:A5:E6:A1:F5:5A:C5:C7:5C:7F
X509v3 Authority Key Identifier:
keyid:03:95:AD:D8:6B:AF:6B:2D:06:FF:41:F5:52:6D:34:7F:71:EE:B4:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5Wt2Guvay0G_0H1Um00f3HutBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fdb398-3fb5-4b6a-a003-cfc4a676d6e0/1/gwecalpk9oHeX6yl5qH1WsXHXH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fdb398-3fb5-4b6a-a003-cfc4a676d6e0/1/A5Wt2Guvay0G_0H1Um00f3HutBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.9.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2f:75:0b:93:2d:f0:39:50:ca:73:52:08:63:1f:35:fb:e6:a3:
40:76:e0:11:9f:12:12:f5:a2:56:0d:c4:9f:f7:e3:a8:f3:38:
81:ea:b1:d4:b7:be:8c:9d:c3:2c:07:b0:b8:17:09:d0:da:98:
51:74:34:6c:ae:b7:bf:89:75:77:f4:b9:c3:f6:91:ae:0f:85:
e3:7c:41:82:66:32:2a:02:53:9f:50:7b:53:e1:94:05:d4:01:
70:2a:93:62:07:4b:b4:80:6d:f0:99:1c:24:72:84:d0:07:85:
85:ea:5b:93:6b:ce:49:11:d6:09:21:f7:75:7b:da:3a:36:99:
49:6e:e7:86:a5:22:e1:e0:2b:19:c6:00:37:fb:91:9c:9b:a4:
dd:97:5d:3b:b5:4a:a7:d3:33:ae:2c:5a:bc:a6:aa:96:1f:f9:
20:c9:f1:c8:80:8a:9a:f1:6b:f0:7a:97:33:55:59:1f:6d:b8:
dc:d5:59:44:59:21:02:70:a4:8b:95:ed:c0:f0:2e:69:02:e3:
e6:22:86:93:b6:44:b5:fa:be:ed:ec:86:80:a2:aa:a5:b5:f8:
f7:1d:ea:e1:00:2e:ec:30:c3:49:e8:60:13:a6:26:05:d4:f4:
30:a2:25:64:72:e2:ee:bf:55:60:13:87:87:3f:bd:b4:71:52:
c1:ff:f6:9a
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgISAYVsbw7X20xh0dCi4emXi27ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzOTVhZGQ4NmJhZjZiMmQwNmZmNDFmNTUyNmQzNDdmNzFl
ZWI0MTAwHhcNMjMwMTAxMDgyNDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MzA3OWM2YTVhNjRmNjgxZGU1ZmFjYTVlNmExZjU1YWM1Yzc1YzdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2oXC+DB7ivhjk5IUjEUZwFZdYk8z
vlRy6mai9joXVpPWOlMUUymQ3QA5ZovbIqGVfU46oiYrP7mUQEwta6R3FFmQqWB6
KAORSzXjz9vj/8maiCecrqlVoQPV1cYKGgMH+TPw7y7Y9dqo/EYCenAYKAXuG1aE
wtMrheVCprFT+FFJXqtAI0x3gJUwJC6lqOzI2rku3v0BAk6acKsECzyuTtxjU8Go
hDrpRwkuqsKeXvKnTTJRmKs/UZf0/mmD/Sc/KVCfVRDQnIGC26WJRMt1HllsBNq3
fb3HfmNYmtrkyN8QYmhBSZNY7xkQxUOQ54NYRFN79CkGcR6uRrwMdACCJwIDAQAB
o4ICCDCCAgQwHQYDVR0OBBYEFIMHnGpaZPaB3l+speah9VrFx1x/MB8GA1UdIwQY
MBaAFAOVrdhrr2stBv9B9VJtNH9x7rQQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTVXdDJHdXZheTBHXzBIMVVtMDBmM0h1dEJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9mZGIzOTgtM2ZiNS00YjZhLWEwMDMt
Y2ZjNGE2NzZkNmUwLzEvZ3dlY2FscGs5b0hlWDZ5bDVxSDFXc1hIWEg4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9mZGIzOTgtM2ZiNS00YjZhLWEwMDMtY2ZjNGE2NzZkNmUw
LzEvQTVXdDJHdXZheTBHXzBIMVVtMDBmM0h1dEJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAowkwDQYJ
KoZIhvcNAQELBQADggEBAC91C5Mt8DlQynNSCGMfNfvmo0B24BGfEhL1olYNxJ/3
46jzOIHqsdS3voydwywHsLgXCdDamFF0NGyut7+JdXf0ucP2ka4PheN8QYJmMioC
U59Qe1PhlAXUAXAqk2IHS7SAbfCZHCRyhNAHhYXqW5NrzkkR1gkh93V72jo2mUlu
54alIuHgKxnGADf7kZybpN2XXTu1SqfTM64sWrymqpYf+SDJ8ciAiprxa/B6lzNV
WR9tuNzVWURZIQJwpIuV7cDwLmkC4+YihpO2RLX6vu3shoCiqqW1+Pcd6uEALuww
w0noYBOmJgXU9DCiJWRy4u6/VWATh4c/vbRxUsH/9po=
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:30:23 2025 by rpki-client