Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/wgWSP1DoFep7UNq5tOIonNw9wUg.roa
File: wgWSP1DoFep7UNq5tOIonNw9wUg.roa (raw, json)
Hash identifier: QnmXZjpRfMiIq4YlO5D9aUrO04nfi2W99jmr+/n88mw=
Subject key identifier: C2:05:92:3F:50:E8:15:EA:7B:50:DA:B9:B4:E2:28:9C:DC:3D:C1:48
Certificate issuer: /CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Certificate serial: 018630E1AEF25BE0D0A7394DCD4EC8B9291F
Authority key identifier: 69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/wgWSP1DoFep7UNq5tOIonNw9wUg.roa
Signing time: Wed 08 Feb 2023 11:55:42 +0000
ROA not before: Wed 08 Feb 2023 11:55:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57814
IP address blocks: 2a01:8640:10::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:30:e1:ae:f2:5b:e0:d0:a7:39:4d:cd:4e:c8:b9:29:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Validity
Not Before: Feb 8 11:55:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c205923f50e815ea7b50dab9b4e2289cdc3dc148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:97:3d:ff:04:4b:f5:6e:7c:b0:5f:06:2b:c3:
52:10:af:fd:d2:38:e6:c3:26:9d:51:0c:45:0e:b4:
52:be:4f:ea:67:46:ab:81:4f:55:48:59:c2:ac:e1:
41:e7:f7:8e:51:c4:51:de:5e:01:70:2c:fe:28:aa:
e8:23:19:4f:8d:84:4e:84:ec:7e:e4:04:06:66:d9:
ea:92:78:a9:e6:f9:d1:ae:48:39:88:22:53:7e:69:
01:e3:15:b0:8f:04:85:1d:76:e7:82:ef:79:ea:07:
e8:e6:b2:fa:9a:fe:bd:64:cb:e1:2a:be:af:ca:50:
f0:a8:2f:eb:03:4d:a4:90:82:03:1b:a7:8d:93:14:
e6:e2:a0:95:a0:a0:ad:4b:78:88:4b:9f:3c:dc:49:
6f:85:ad:5b:f8:98:23:41:5c:2f:25:41:ed:d6:7b:
ae:9e:6b:02:81:3f:36:55:be:36:f5:22:0c:65:fa:
3d:95:a6:23:d2:00:6f:30:ea:9e:eb:44:f2:94:70:
b1:b6:35:da:bd:1f:5a:4d:73:e3:e2:de:1f:51:d2:
e4:b7:3d:8b:aa:0e:37:5e:d7:24:6c:d9:53:82:6b:
4f:72:a2:69:6f:45:4d:58:c2:59:ef:47:43:9a:8e:
8d:08:b6:33:15:0c:6e:64:8f:7a:09:83:fb:63:d1:
bd:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:05:92:3F:50:E8:15:EA:7B:50:DA:B9:B4:E2:28:9C:DC:3D:C1:48
X509v3 Authority Key Identifier:
keyid:69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/wgWSP1DoFep7UNq5tOIonNw9wUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:8640:10::/48
Signature Algorithm: sha256WithRSAEncryption
2d:30:0d:56:1c:25:91:cb:11:6c:5a:96:1e:1e:7a:bf:19:c0:
65:19:63:99:d5:58:60:49:26:82:34:0b:f7:95:f5:38:36:f6:
16:92:43:fc:29:c7:7c:17:f1:4d:08:99:56:6d:25:6b:ef:b4:
1e:05:b7:8b:5c:f8:da:24:bf:89:df:d7:0d:9f:83:1b:97:76:
7c:1d:4e:61:2a:f7:5a:af:aa:0b:b8:0a:9b:b4:cc:22:db:77:
8d:0c:33:d9:e1:fe:ec:57:2f:f6:f9:2a:16:5e:81:5e:22:11:
1b:be:7f:33:b2:b5:3e:b6:3f:58:cd:9b:43:01:82:f1:d4:f8:
59:61:be:07:a9:a5:bb:94:47:a3:e1:01:96:a1:00:89:9a:74:
1d:db:57:cd:cb:ae:dd:a6:73:ab:41:6f:ed:56:71:d3:ff:69:
ba:24:40:ab:4c:91:a0:f6:f5:17:33:ae:81:6d:43:54:54:28:
ec:d0:e6:be:8f:74:d5:52:ea:fe:b9:23:e6:35:65:f5:0c:17:
82:01:e0:7a:8f:0c:02:6f:c8:14:55:32:d0:13:90:d9:02:c8:
9b:18:35:14:81:1e:8a:40:1a:28:cf:a6:44:9f:2a:24:88:3a:
e2:a3:6f:f9:b8:58:b7:7c:ab:d9:5c:58:c9:03:55:65:08:44:
9f:c0:f6:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:35:45 2025 by rpki-client