Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/WUxmTVSywO-dLd4gSFTw9TcD8m4.roa
File: WUxmTVSywO-dLd4gSFTw9TcD8m4.roa (raw, json)
Hash identifier: 3QG7nhL9R1LzzY8vsngUXzVcYbu0kpDyis45ryUCG5Q=
Subject key identifier: 59:4C:66:4D:54:B2:C0:EF:9D:2D:DE:20:48:54:F0:F5:37:03:F2:6E
Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial: 01856E41DB28FBEAF86EFA1A55E3AD0C6A0E
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/WUxmTVSywO-dLd4gSFTw9TcD8m4.roa
Signing time: Sun 01 Jan 2023 16:54:47 +0000
ROA not before: Sun 01 Jan 2023 16:54:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47134
IP address blocks: 188.213.32.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:41:db:28:fb:ea:f8:6e:fa:1a:55:e3:ad:0c:6a:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
Validity
Not Before: Jan 1 16:54:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=594c664d54b2c0ef9d2dde204854f0f53703f26e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:2a:5f:c8:d1:8c:1e:e9:19:0c:5f:c7:3b:6a:
d9:bc:6a:82:c5:84:aa:1b:05:91:76:f5:7e:99:61:
2c:51:84:61:82:a1:c9:5d:d0:6d:c0:80:15:e6:45:
37:b3:56:df:91:00:3a:35:ec:83:d5:8f:cb:c4:c2:
45:12:dd:58:bf:a8:25:15:4f:14:67:f4:13:54:32:
6e:ab:11:c3:bd:5d:6a:d2:0a:ec:f2:ae:28:0f:c6:
ef:5e:fa:69:97:07:7f:a6:26:26:65:f7:de:79:1f:
87:06:01:d2:2b:77:67:c2:63:0a:60:68:54:b9:ac:
26:87:ed:0b:a9:1e:2b:8f:77:a2:8c:ca:48:62:dc:
5a:1c:95:31:fc:ab:36:7a:2f:e7:ed:ce:ca:6e:17:
50:91:91:aa:cb:e4:9f:c4:54:a4:16:40:b1:d5:44:
69:39:22:87:52:47:91:a3:9f:e2:99:79:86:8a:0f:
3f:d0:4f:e3:28:7c:b2:e5:11:6e:55:a3:e0:08:d8:
dc:71:25:db:f2:6d:13:a4:38:4d:ee:cb:d6:c6:0c:
d9:c5:30:c2:90:3e:08:a3:40:be:b7:59:30:ce:ac:
e1:0c:4c:f6:8d:14:be:7d:08:2d:f8:1c:64:b3:45:
e9:44:3b:96:2b:47:76:1a:82:7b:23:ed:b5:94:fd:
ab:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:4C:66:4D:54:B2:C0:EF:9D:2D:DE:20:48:54:F0:F5:37:03:F2:6E
X509v3 Authority Key Identifier:
keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/WUxmTVSywO-dLd4gSFTw9TcD8m4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.213.32.0/24
Signature Algorithm: sha256WithRSAEncryption
24:c6:66:9c:b9:46:a3:f2:a4:db:35:e3:98:a6:ee:a7:d2:44:
c7:31:3f:f0:cb:31:40:f3:6e:50:4f:0b:83:21:dd:39:74:ad:
9c:a4:3d:39:a0:bf:d6:2b:8d:81:f7:98:80:5a:a8:d6:a9:99:
bd:f9:85:e3:06:46:bb:f4:a7:b9:d9:e6:bd:d1:05:d8:74:bc:
e0:64:11:93:de:54:67:0b:aa:54:84:11:e2:be:18:1c:97:9c:
92:c0:d1:e2:5a:ef:11:b1:61:96:4f:b1:94:1e:0f:7b:4a:b1:
61:49:14:98:1f:88:0f:34:d3:81:56:4c:4c:a4:33:ca:f6:be:
d3:30:48:b6:6b:69:31:8e:dc:2b:ea:71:6e:7f:89:95:b0:7c:
e0:f8:1b:8a:5e:dc:7e:db:ad:6d:98:34:da:bb:47:5c:09:c3:
fb:4b:d2:7f:05:9d:9f:e4:da:75:89:63:ed:7e:99:8e:ca:eb:
02:9e:9c:7f:f3:12:ea:19:34:f1:74:0a:aa:88:da:ae:09:7a:
e3:71:08:eb:98:26:46:e1:7f:39:be:c7:9e:c8:39:f6:f9:64:
49:7a:21:11:fd:16:03:7a:4e:aa:57:f4:21:ec:d4:fe:85:46:
77:29:f0:04:23:16:e6:3e:bd:0f:d1:e0:ed:d6:a9:04:96:c7:
19:a8:c9:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:28:04 2025 by rpki-client