Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/WwsQrr44H9aIBnk6ajIs2l_MJiw.roa
File: WwsQrr44H9aIBnk6ajIs2l_MJiw.roa (raw, json)
Hash identifier: ezHlC1IjnGi0vCndkDdO5D0ttQmle4fViLn0TvvFCb4=
Subject key identifier: 5B:0B:10:AE:BE:38:1F:D6:88:06:79:3A:6A:32:2C:DA:5F:CC:26:2C
Certificate issuer: /CN=295a92b778eddfa8dcd917cbb87cde31ba2c732f
Certificate serial: 01856C65E704FB0B6B3942C810311E43CF3D
Authority key identifier: 29:5A:92:B7:78:ED:DF:A8:DC:D9:17:CB:B8:7C:DE:31:BA:2C:73:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVqSt3jt36jc2RfLuHzeMboscy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/WwsQrr44H9aIBnk6ajIs2l_MJiw.roa
Signing time: Sun 01 Jan 2023 08:14:55 +0000
ROA not before: Sun 01 Jan 2023 08:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12306
IP address blocks: 194.56.221.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:65:e7:04:fb:0b:6b:39:42:c8:10:31:1e:43:cf:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295a92b778eddfa8dcd917cbb87cde31ba2c732f
Validity
Not Before: Jan 1 08:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5b0b10aebe381fd68806793a6a322cda5fcc262c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:68:e0:84:c2:e2:84:b2:c4:39:35:de:b9:6b:
41:ec:01:48:82:df:24:70:c9:29:49:25:0c:5e:7e:
1a:c6:39:c8:8d:fa:f7:f7:f8:d4:53:b2:99:23:4e:
53:93:04:4a:e2:ba:d5:9d:08:84:33:8f:03:30:08:
70:a2:1e:5a:7c:cf:a4:9d:d1:3e:5e:ca:a8:d5:e0:
0a:22:78:a9:a9:a3:ef:c9:cc:33:b9:a2:23:f5:18:
44:b7:6c:b0:93:1d:83:d5:48:c1:97:3f:be:19:d0:
e3:87:62:30:2d:80:89:60:db:eb:08:53:30:13:84:
5b:3a:32:e5:b0:31:a1:c5:51:dc:a5:ea:b9:ca:83:
27:2e:f1:a6:74:cf:93:c3:b1:7a:84:52:18:1a:95:
e1:3d:17:68:63:32:8b:2b:09:91:b1:39:e1:33:63:
a3:41:e5:e0:1c:ed:09:f3:49:44:c0:fc:03:0a:fa:
72:c7:c5:67:5d:73:44:f3:76:47:4f:41:30:95:2c:
b5:6a:c3:c0:f7:03:5d:57:4b:be:dc:8d:db:00:03:
00:8a:5c:7b:e8:a3:a6:69:7f:7d:c9:cb:12:66:9d:
e4:98:53:2b:79:ac:65:44:c7:7c:2c:f1:61:49:d0:
4a:6e:24:a8:8f:10:78:0d:48:17:d3:1d:62:81:23:
4a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:0B:10:AE:BE:38:1F:D6:88:06:79:3A:6A:32:2C:DA:5F:CC:26:2C
X509v3 Authority Key Identifier:
keyid:29:5A:92:B7:78:ED:DF:A8:DC:D9:17:CB:B8:7C:DE:31:BA:2C:73:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVqSt3jt36jc2RfLuHzeMboscy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/WwsQrr44H9aIBnk6ajIs2l_MJiw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.56.221.0/24
Signature Algorithm: sha256WithRSAEncryption
86:f7:3d:6d:48:20:cf:91:6a:be:fc:21:58:fe:34:92:4c:16:
22:ff:41:43:ae:03:8a:01:e3:42:39:11:dd:4d:70:5f:68:70:
f5:29:26:c8:4a:fd:db:d9:35:19:f6:26:ba:80:89:18:75:9c:
5b:3f:05:f5:d6:2e:6a:2b:46:f6:7a:02:20:55:21:f1:a3:ac:
8e:24:8a:ba:9a:fa:17:07:c8:bb:23:84:8d:c1:01:2c:ce:ad:
1d:6b:c8:a8:24:a8:4d:f4:94:0b:56:c1:1c:8e:46:96:34:e4:
8a:0b:bc:e5:cc:a6:38:2f:98:8a:db:3e:df:4b:82:55:61:a3:
04:56:35:62:95:7d:9f:ae:8d:7c:07:09:82:00:b1:73:cd:b8:
73:fe:93:cd:f5:57:2e:9a:b9:7d:cb:c5:bd:2f:b6:71:8c:07:
4f:72:34:9f:68:58:38:f0:0b:85:50:f3:d7:f0:fe:15:8b:2f:
78:b1:fe:ad:96:60:45:4c:e5:d9:e3:ff:dc:7e:e9:e3:ab:f4:
b9:f6:01:a2:17:48:37:b8:76:c1:c3:08:ff:4f:a1:8d:21:96:
c1:ff:1e:4d:b3:43:21:ee:67:5b:0b:76:51:f8:76:3f:43:09:
05:fd:6f:8b:88:a2:b0:3a:5e:51:21:ef:d0:f0:d2:2f:37:4a:
2c:6d:5f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:27:58 2025 by rpki-client