Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/WHUimQB36XcHW8s5YfEsDOrXdHw.roa
File: WHUimQB36XcHW8s5YfEsDOrXdHw.roa (raw, json)
Hash identifier: xKggBlPniJ1zeBq6OPSNq8XLycyfERzmpEKxgUAQBDE=
Subject key identifier: 58:75:22:99:00:77:E9:77:07:5B:CB:39:61:F1:2C:0C:EA:D7:74:7C
Certificate issuer: /CN=10f7741cd1af2bb34c86c73ea3bd6c76d9968d0d
Certificate serial: 0AD787FF
Authority key identifier: 10:F7:74:1C:D1:AF:2B:B3:4C:86:C7:3E:A3:BD:6C:76:D9:96:8D:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/WHUimQB36XcHW8s5YfEsDOrXdHw.roa
Signing time: Sat 01 Jan 2022 08:01:25 +0000
ROA not before: Sat 01 Jan 2022 08:01:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51088
IP address blocks: 185.37.4.0/23 maxlen: 23
185.37.6.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 181897215 (0xad787ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10f7741cd1af2bb34c86c73ea3bd6c76d9968d0d
Validity
Not Before: Jan 1 08:01:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=587522990077e977075bcb3961f12c0cead7747c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:33:15:c7:19:58:3b:69:66:67:1c:46:ca:3e:
8b:d8:1d:24:b4:0c:e1:4e:63:04:55:17:b7:62:d2:
3d:d1:58:11:8c:2a:11:fb:f1:64:d6:c4:29:65:ea:
90:de:71:2f:d4:1a:4b:46:22:7f:f9:1d:18:1f:e4:
69:f6:28:6a:e8:e4:85:bd:c7:fc:56:49:99:4e:bf:
69:d3:20:73:2e:fb:77:8a:53:8e:4a:f1:41:03:d4:
92:12:3c:cc:e9:7c:b6:9c:96:a5:c0:2d:12:50:cb:
26:8f:34:c9:9d:9b:b0:97:45:74:78:0a:18:81:1e:
3b:da:33:7d:32:5a:f2:36:33:69:71:b4:90:4b:54:
b7:b1:05:d3:de:3e:af:98:94:b4:55:f4:89:19:d3:
1e:71:fb:c3:40:0f:fc:90:d5:1f:7d:8b:13:c0:e1:
5e:84:85:7f:48:fa:b4:36:43:21:c4:7a:3b:12:87:
1e:c2:62:0a:69:c8:10:52:08:4d:00:c1:19:d6:9d:
d1:4a:98:f6:00:b8:04:2e:a7:56:f1:52:a8:d9:86:
02:68:f1:f0:0b:a3:f1:34:54:88:0b:c2:6b:2f:c4:
bd:70:90:84:da:c1:45:62:87:0e:9d:7f:94:58:7a:
18:96:24:c4:4f:d2:34:db:ce:28:81:15:c6:f9:33:
4e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:75:22:99:00:77:E9:77:07:5B:CB:39:61:F1:2C:0C:EA:D7:74:7C
X509v3 Authority Key Identifier:
keyid:10:F7:74:1C:D1:AF:2B:B3:4C:86:C7:3E:A3:BD:6C:76:D9:96:8D:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/WHUimQB36XcHW8s5YfEsDOrXdHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.37.4.0-185.37.6.255
Signature Algorithm: sha256WithRSAEncryption
4d:77:37:81:fc:63:e6:4a:08:9c:18:c5:99:2a:5c:93:93:6a:
2a:c7:c4:06:b9:4d:4d:33:3a:f3:eb:d9:41:30:76:d7:05:33:
0c:36:0a:8a:6b:63:57:b0:8d:3f:51:52:ea:23:a3:bb:dc:2d:
de:2d:c8:e4:2c:48:fc:c6:a5:30:b0:c4:db:99:be:29:b2:3a:
8d:e9:c0:b2:84:4a:7b:33:31:4b:97:93:06:2c:df:80:98:fd:
3a:c8:33:b6:47:63:b6:cd:4b:1c:91:10:45:8e:e1:52:9a:16:
cf:ec:2b:91:5e:67:76:51:32:51:45:ab:44:db:2a:01:b5:c4:
96:0a:37:e4:aa:c6:7a:5f:51:8a:2d:67:73:4b:82:bd:83:63:
b1:c0:62:6e:eb:61:e3:94:05:3e:7f:0f:ed:18:43:19:01:d0:
57:28:0b:31:13:a9:6a:a5:9e:e5:92:8f:d7:53:9e:c4:5c:c0:
2f:25:bc:e5:99:d3:cf:72:21:9c:b6:47:bd:69:b4:88:dd:25:
de:e8:7f:c0:0b:f9:2b:5e:39:50:d8:79:1e:9c:db:6a:f8:1a:
52:e6:59:da:7e:68:b4:3e:73:38:24:66:0d:12:6a:49:94:85:
e0:0e:45:0e:4f:78:52:12:0b:ca:7e:86:43:d3:d5:9b:c2:96:
08:2c:48:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:00:46 2025 by rpki-client