Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/c866ce-7db8-4ef1-979b-6b7dda50d5a5/1/_WAXnrl_ODdj4S83GsSPVOLNSGE.roa
File: _WAXnrl_ODdj4S83GsSPVOLNSGE.roa (raw, json)
Hash identifier: prTdsoEQKsg8yhz6hsGFv3bpHCj0DxhbWB3/B0iW9h8=
Subject key identifier: FD:60:17:9E:B9:7F:38:37:63:E1:2F:37:1A:C4:8F:54:E2:CD:48:61
Certificate issuer: /CN=0bb7a29b255451e61bc42c8b9ae4943f71696ccf
Certificate serial: 0187507C93D8ED93888BCA08E445F295AE8E
Authority key identifier: 0B:B7:A2:9B:25:54:51:E6:1B:C4:2C:8B:9A:E4:94:3F:71:69:6C:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C7eimyVUUeYbxCyLmuSUP3FpbM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/c866ce-7db8-4ef1-979b-6b7dda50d5a5/1/_WAXnrl_ODdj4S83GsSPVOLNSGE.roa
Signing time: Wed 05 Apr 2023 08:15:54 +0000
ROA not before: Wed 05 Apr 2023 08:15:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212077
IP address blocks: 185.113.10.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:50:7c:93:d8:ed:93:88:8b:ca:08:e4:45:f2:95:ae:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bb7a29b255451e61bc42c8b9ae4943f71696ccf
Validity
Not Before: Apr 5 08:15:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fd60179eb97f383763e12f371ac48f54e2cd4861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:64:3a:27:1d:59:7d:a1:b4:72:b9:a4:70:b8:
da:6e:2c:e5:ad:d5:4b:8f:b8:20:55:d2:90:48:5b:
a5:0e:ad:d2:95:87:fe:0f:3b:99:b4:34:04:57:3c:
64:0c:97:92:03:0a:b4:56:45:c4:82:fc:18:e9:a6:
c8:55:a5:77:60:05:0b:17:fe:0c:d3:f2:78:98:57:
35:a5:ff:c8:7f:d7:42:72:bf:a1:01:0b:11:ab:01:
b6:20:3b:19:cb:ce:ef:94:f4:6b:12:66:46:00:d8:
93:e4:72:a9:f8:f0:53:b8:d6:ee:52:25:db:75:ca:
a4:52:6e:24:15:4b:fa:9d:a0:1d:88:22:ff:b0:e4:
12:ec:bb:60:4f:38:d6:65:bc:46:ef:74:0b:d6:c0:
d7:5d:08:9b:1b:f2:21:6f:14:98:c1:f0:e8:6c:eb:
61:1a:1a:82:83:70:87:b3:ab:13:6b:2d:81:ca:c3:
c1:7d:91:d1:76:48:53:7b:16:19:a9:9a:b0:e9:43:
ff:ca:5c:c2:1a:a9:89:57:60:33:c2:de:47:dd:30:
9d:ec:7c:0a:ba:39:fc:d5:bb:6f:dc:f9:e3:4b:de:
3b:28:86:0e:d3:f2:fd:c7:b1:5e:b9:90:ca:81:2a:
b8:67:53:41:c6:33:14:85:86:c7:5d:0d:75:dc:79:
b2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:60:17:9E:B9:7F:38:37:63:E1:2F:37:1A:C4:8F:54:E2:CD:48:61
X509v3 Authority Key Identifier:
keyid:0B:B7:A2:9B:25:54:51:E6:1B:C4:2C:8B:9A:E4:94:3F:71:69:6C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7eimyVUUeYbxCyLmuSUP3FpbM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/c866ce-7db8-4ef1-979b-6b7dda50d5a5/1/_WAXnrl_ODdj4S83GsSPVOLNSGE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/c866ce-7db8-4ef1-979b-6b7dda50d5a5/1/C7eimyVUUeYbxCyLmuSUP3FpbM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.113.10.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:a5:02:6b:71:35:10:48:eb:2a:14:eb:fd:e2:d4:2a:c9:92:
45:1b:39:f3:8e:70:98:50:c5:20:6b:33:c3:3d:40:43:da:07:
6f:30:c7:72:f3:b4:d6:75:07:9a:b9:ac:31:6b:44:a2:a1:4d:
09:77:d6:fd:74:16:fc:15:28:34:85:25:ee:b1:41:f8:36:34:
6a:26:73:d3:ae:b5:59:de:be:6f:a2:8d:e9:e8:01:8a:71:db:
4c:0f:dc:c4:90:98:62:e4:dd:0b:bc:54:ec:03:ca:db:2b:df:
60:e6:ec:0f:4d:ef:e0:43:cf:dd:10:8d:aa:38:af:cf:50:85:
f8:5a:96:12:32:ea:33:3e:64:3a:2a:f8:3b:0b:f8:43:87:1f:
82:90:23:28:8e:90:07:bd:9f:c5:d9:2d:ad:d1:bf:29:de:c7:
f1:4a:2d:06:44:3a:1e:ef:ce:e1:3c:53:b6:22:e3:3c:50:0e:
f7:7b:38:a9:72:63:75:1f:3b:fc:d7:e9:0e:3c:06:e8:8a:1d:
88:41:7d:42:46:5b:72:96:f2:8a:62:f0:92:42:3c:5e:8b:39:
09:db:d4:7f:1c:32:cc:e9:12:86:db:65:bf:31:a5:a2:06:33:
c9:73:6e:e1:2c:dc:38:91:78:89:d1:87:70:56:ba:f6:d0:3d:
1c:6d:81:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:58:04 2025 by rpki-client