Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wvRveHYUYUFmg9QNE1LEsWA2zUE.roa
File: wvRveHYUYUFmg9QNE1LEsWA2zUE.roa (raw, json)
Hash identifier: HqxuZcwsBoeeoybd9t7AXepeXVCP96nKrVAvOHPLgBg=
Subject key identifier: C2:F4:6F:78:76:14:61:41:66:83:D4:0D:13:52:C4:B1:60:36:CD:41
Certificate issuer: /CN=c2746ccb7e73a9cc30ef04edd7cf16cc1d946894
Certificate serial: 01B2A82A
Authority key identifier: C2:74:6C:CB:7E:73:A9:CC:30:EF:04:ED:D7:CF:16:CC:1D:94:68:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wnRsy35zqcww7wTt188WzB2UaJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wvRveHYUYUFmg9QNE1LEsWA2zUE.roa
Signing time: Sat 01 Jan 2022 08:00:58 +0000
ROA not before: Sat 01 Jan 2022 08:00:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25145
IP address blocks: 185.203.67.0/24 maxlen: 24
2a11:940::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28485674 (0x1b2a82a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2746ccb7e73a9cc30ef04edd7cf16cc1d946894
Validity
Not Before: Jan 1 08:00:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c2f46f78761461416683d40d1352c4b16036cd41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:59:88:e4:f1:bc:62:c0:39:d8:88:f7:43:93:
d2:7c:73:ca:32:b3:47:f7:3a:75:a4:f5:4d:a5:dd:
74:cf:ee:7b:17:33:92:55:79:4e:99:8b:cd:73:b5:
e8:30:01:8e:a2:7f:29:24:0e:0a:8b:32:c2:e5:1f:
57:f1:5c:84:30:ad:37:2b:80:4e:12:bf:8b:54:f6:
bd:b6:d9:3d:56:f6:01:de:0c:e3:b1:5f:79:2a:75:
e5:8a:62:d9:f6:58:43:7f:f6:ae:df:b6:fb:d1:c1:
47:d2:7a:72:62:63:6a:73:01:f3:b2:98:fe:f0:e7:
09:10:01:a1:7a:d6:97:ac:91:d8:b2:ac:55:83:96:
db:c9:5f:6a:fb:e8:bd:f4:df:47:70:25:45:ae:20:
e3:5a:b5:00:6c:e0:ef:e2:80:b9:a9:08:9f:c5:40:
80:4f:62:f5:62:03:0f:2f:2a:3a:b0:17:49:fc:0f:
37:dd:dc:4d:08:b9:7d:52:35:70:a7:fd:c1:61:f9:
a1:00:8f:4e:cc:17:89:59:4c:31:5c:28:d1:c2:41:
46:ae:b1:d6:4a:fe:c2:8d:88:f0:bf:b7:a2:cf:d6:
be:25:65:b9:99:88:e9:57:9d:c9:66:11:9e:14:02:
69:f5:7c:93:18:7a:db:93:e1:fd:ae:ae:4b:c6:86:
80:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:F4:6F:78:76:14:61:41:66:83:D4:0D:13:52:C4:B1:60:36:CD:41
X509v3 Authority Key Identifier:
keyid:C2:74:6C:CB:7E:73:A9:CC:30:EF:04:ED:D7:CF:16:CC:1D:94:68:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnRsy35zqcww7wTt188WzB2UaJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wvRveHYUYUFmg9QNE1LEsWA2zUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.203.67.0/24
IPv6:
2a11:940::/29
Signature Algorithm: sha256WithRSAEncryption
77:0a:7c:22:b1:53:ce:83:eb:69:01:72:4b:9a:7e:9d:46:c9:
9b:92:fe:aa:14:ad:71:34:2d:30:35:e7:1e:5b:0f:30:25:c0:
97:19:51:bb:94:22:5e:33:48:0e:5f:24:f4:03:f2:ec:54:49:
64:b2:39:a7:1f:46:33:d1:4b:a0:97:84:1d:23:65:4a:7c:05:
48:34:4c:3e:de:b0:8c:f1:cc:dc:af:bc:48:cb:12:6a:50:06:
36:82:e0:6f:5b:64:ea:ea:4d:72:77:4e:e0:f6:bd:72:17:ba:
48:73:83:f5:ab:9a:44:ff:66:68:e3:a1:3a:c6:84:40:14:d0:
71:cf:5d:f4:7d:4e:83:db:df:4f:f8:b4:91:26:73:ac:88:84:
9f:13:ab:52:35:4a:14:4b:1d:56:bd:5c:dd:5b:95:61:a3:60:
fd:88:7b:02:df:a7:28:59:08:35:e5:96:5c:7b:59:f5:0a:69:
95:fe:96:e9:bb:0a:66:b5:93:db:76:08:43:6b:aa:4e:cf:e1:
42:45:09:c5:cc:78:5b:40:8e:7b:50:2c:51:bb:58:30:d4:83:
a4:f5:79:43:d0:4f:28:4c:63:d7:a1:17:16:51:c4:e2:83:90:
07:82:1b:04:50:62:79:7d:02:11:cd:22:25:8b:48:be:fe:3b:
77:02:ff:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:17:16 2025 by rpki-client