Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/wGC7UaM6MyzfeacWF3tQZigvOYY.roa
File: wGC7UaM6MyzfeacWF3tQZigvOYY.roa (raw, json)
Hash identifier: 6Sw+gMfG0EZXkiLF/FkrXOhfKtnWRXH94g5sBUbHRFo=
Subject key identifier: C0:60:BB:51:A3:3A:33:2C:DF:79:A7:16:17:7B:50:66:28:2F:39:86
Certificate issuer: /CN=e754c347d68d15493de71bb962f0a567e134d603
Certificate serial: 01856F94D361DD3AC3505FBBF781236FB584
Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/wGC7UaM6MyzfeacWF3tQZigvOYY.roa
Signing time: Sun 01 Jan 2023 23:05:02 +0000
ROA not before: Sun 01 Jan 2023 23:05:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 812
IP address blocks: 45.43.87.0/24 maxlen: 24
107.181.150.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:94:d3:61:dd:3a:c3:50:5f:bb:f7:81:23:6f:b5:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603
Validity
Not Before: Jan 1 23:05:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c060bb51a33a332cdf79a716177b5066282f3986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:fd:2b:7b:4b:70:f5:0b:98:74:2e:36:d6:c1:
9f:cc:1b:c4:2e:f2:d6:89:ad:9c:21:28:59:aa:6b:
6b:ea:ef:53:d1:75:56:33:a6:7a:c5:dc:da:46:3a:
4c:10:36:d3:fa:a6:1d:09:0f:2f:85:45:39:98:ba:
f3:83:b2:aa:23:e1:94:06:3d:fa:8d:41:d4:c5:33:
2f:8a:13:66:47:d8:1e:6f:f8:81:e6:69:3a:af:2f:
84:1c:87:cc:be:3f:cd:3b:59:6b:59:06:ac:b7:bd:
f6:e6:fd:44:e0:3d:6b:b5:8e:32:fe:66:28:2a:e0:
0c:9d:98:0c:86:d1:41:dc:9a:82:09:3f:fc:b2:a9:
2b:4b:f2:5c:04:b3:74:bb:c7:12:38:b0:76:61:1a:
6b:00:17:0a:61:fa:6c:1e:8a:ee:a0:09:5d:f4:b5:
33:fd:90:b7:85:f1:24:2a:c9:e8:92:6e:52:9b:c2:
01:df:82:77:a3:f5:6f:81:7c:d8:6e:10:3a:1c:ad:
9b:f1:89:66:32:8c:f3:a0:b8:a5:40:de:40:64:b8:
de:04:62:ff:95:da:fa:8b:52:f8:91:05:85:9d:7e:
22:50:b9:78:88:ed:b3:27:1d:e1:6e:bd:62:42:4a:
06:d0:e2:05:17:fb:1b:0c:fc:57:0f:35:52:d4:c5:
ac:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:60:BB:51:A3:3A:33:2C:DF:79:A7:16:17:7B:50:66:28:2F:39:86
X509v3 Authority Key Identifier:
keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/wGC7UaM6MyzfeacWF3tQZigvOYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.87.0/24
107.181.150.0/24
Signature Algorithm: sha256WithRSAEncryption
46:a1:41:24:cf:f3:60:cc:f4:6a:ce:62:8b:1f:7e:66:8d:4c:
2c:ee:fd:34:b1:99:a0:7d:9f:a5:89:f0:c0:35:3c:21:64:45:
89:62:73:09:49:63:a4:28:d6:3f:70:b6:1d:c1:05:25:56:6f:
b0:ee:ad:69:5a:34:51:c5:f2:bc:01:42:15:89:f6:f5:95:f8:
a9:c7:e6:b8:41:95:97:9f:d1:4a:ee:98:b8:72:c4:dd:f0:b2:
da:0d:6f:81:7d:e2:85:71:68:a1:87:7a:f1:e6:bf:85:60:61:
0b:30:7a:af:86:99:ef:b4:00:2d:43:9d:34:bd:e6:37:ba:5f:
fa:42:a8:9b:93:a6:08:5f:9b:aa:1d:14:d3:77:7c:9d:62:f5:
af:33:25:c2:47:32:3e:35:b8:b1:94:f2:a4:88:a8:25:a9:52:
eb:13:9c:02:d7:7d:59:ee:51:3b:1f:30:08:99:32:a5:86:a1:
ac:14:71:9a:26:b2:3f:4a:23:ef:ad:fd:a3:53:48:0c:cf:4f:
70:c2:55:f4:ef:6e:5e:b1:71:19:f2:4e:d8:97:11:6c:46:3b:
87:8e:75:f3:81:22:fc:91:46:fe:8a:6a:95:43:ba:a2:64:84:
f6:aa:e1:f5:69:d6:53:ed:8e:1a:1c:4a:1c:af:ff:4e:ad:09:
08:ce:34:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:32 2025 by rpki-client