Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/WT4WSMytb3ogSGxHyxrmADhA8KU.roa
File: WT4WSMytb3ogSGxHyxrmADhA8KU.roa (raw, json)
Hash identifier: eP1LnW95lglV7sVCgwoB0qqaqcE3JrL2TsBDkQBaX/Y=
Subject key identifier: 59:3E:16:48:CC:AD:6F:7A:20:48:6C:47:CB:1A:E6:00:38:40:F0:A5
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 0188387C39FC24D16A882B82507F4A05D4D2
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/WT4WSMytb3ogSGxHyxrmADhA8KU.roa
Signing time: Sat 20 May 2023 09:27:25 +0000
ROA not before: Sat 20 May 2023 09:27:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 85.209.163.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:38:7c:39:fc:24:d1:6a:88:2b:82:50:7f:4a:05:d4:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: May 20 09:27:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=593e1648ccad6f7a20486c47cb1ae6003840f0a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:22:86:64:fc:a9:a7:78:38:9f:d2:46:18:a3:
64:cc:50:12:db:5e:e4:a9:18:48:f2:d3:3a:e9:16:
09:51:b1:69:7c:29:4c:17:9d:bc:01:ef:5d:4c:36:
6c:79:80:bc:da:82:57:6f:72:16:f9:ad:3a:77:39:
a4:16:09:84:d5:e0:f5:52:2a:d4:12:29:8d:21:a7:
ac:9c:fc:53:6e:b7:08:d0:bc:a5:6f:3f:b5:91:51:
e5:5b:9a:93:da:c5:af:8f:1d:d2:f7:99:da:e7:e3:
1e:7e:d5:44:23:81:bb:33:55:2e:23:ca:6c:97:38:
85:99:df:22:82:c6:c1:e8:d3:d5:29:f2:e3:64:99:
24:52:94:5d:c2:72:6a:38:eb:c3:47:44:04:9b:1a:
5d:b3:46:79:34:5c:18:96:e6:a1:73:31:e3:6b:6f:
ae:21:0d:9e:89:c6:24:89:7a:fe:7b:c6:a9:d7:2e:
36:61:a4:28:b3:9c:25:ad:5f:dc:b0:11:38:a2:4b:
ba:36:3d:40:85:dc:c5:e2:8e:c8:8f:6d:47:62:99:
aa:f2:4a:3f:5d:71:50:75:1f:88:bb:6f:d3:41:12:
5e:ed:0e:15:2e:c1:99:e6:90:f9:28:ae:42:fa:c0:
ac:ed:33:fc:7f:4d:85:1b:f1:92:27:08:a8:7b:4c:
0b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:3E:16:48:CC:AD:6F:7A:20:48:6C:47:CB:1A:E6:00:38:40:F0:A5
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/WT4WSMytb3ogSGxHyxrmADhA8KU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.163.0/24
Signature Algorithm: sha256WithRSAEncryption
22:47:c5:32:92:de:41:fb:2e:d1:45:4b:b9:38:fb:2b:94:85:
51:84:bb:96:fb:0b:25:92:8b:8d:b8:8f:a4:f1:04:01:b0:a9:
c4:6b:fc:13:d0:8e:75:51:43:b2:fe:8d:a5:c4:0d:ca:04:87:
58:2e:e9:56:a5:aa:2d:75:9c:7d:25:e4:53:75:d0:cf:75:eb:
7d:65:74:4b:97:e5:22:2d:b8:f4:55:43:c8:bc:0e:13:cd:43:
81:92:b2:f9:9a:b7:01:f5:b7:fc:69:89:25:38:4a:e7:4d:9c:
cc:ee:0e:41:04:00:b8:07:cf:8e:d4:7a:e1:bd:ba:69:c7:29:
c0:90:78:b5:cb:9c:b2:22:8c:d5:57:6a:2d:49:71:2e:76:94:
64:d7:06:9d:6a:24:71:c7:07:20:e9:de:12:49:19:13:9d:f5:
41:9f:bf:cd:25:f4:4c:9a:18:dc:d0:ae:66:bf:fb:78:22:0c:
a3:7d:33:df:a3:c0:f7:34:d7:af:5d:91:a6:2f:93:12:02:5a:
07:78:ca:db:4b:6b:8e:a7:37:0c:ff:1a:1a:31:d5:98:40:d4:
0f:3a:28:90:08:6b:82:e4:13:da:41:ff:a0:a8:db:a9:a6:b3:
75:a8:6d:46:ff:ee:34:d3:27:05:d3:03:af:e6:01:66:08:6a:
60:72:55:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:54:16 2025 by rpki-client