Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/wjOmIh0tpapINC3Z5sGV_XShHa0.roa
File: wjOmIh0tpapINC3Z5sGV_XShHa0.roa (raw, json)
Hash identifier: N76PWZ7VN3oADYKOBOSfPxgX6ThmByTPyCmFMWwF37c=
Subject key identifier: C2:33:A6:22:1D:2D:A5:AA:48:34:2D:D9:E6:C1:95:FD:74:A1:1D:AD
Certificate issuer: /CN=83479514959397c5e3fa76e1ea495e8e1f6c319b
Certificate serial: 1BBC3A63
Authority key identifier: 83:47:95:14:95:93:97:C5:E3:FA:76:E1:EA:49:5E:8E:1F:6C:31:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g0eVFJWTl8Xj-nbh6klejh9sMZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/wjOmIh0tpapINC3Z5sGV_XShHa0.roa
Signing time: Sat 01 Jan 2022 06:01:34 +0000
ROA not before: Sat 01 Jan 2022 06:01:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13030
IP address blocks: 109.202.192.0/19 maxlen: 19
185.72.64.0/22 maxlen: 22
81.6.32.0/20 maxlen: 20
185.72.67.0/24 maxlen: 24
80.253.88.0/21 maxlen: 21
185.137.172.0/22 maxlen: 22
193.47.153.0/24 maxlen: 24
185.246.104.0/22 maxlen: 22
185.183.192.0/22 maxlen: 22
2a07:600::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 465320547 (0x1bbc3a63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83479514959397c5e3fa76e1ea495e8e1f6c319b
Validity
Not Before: Jan 1 06:01:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c233a6221d2da5aa48342dd9e6c195fd74a11dad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:51:50:90:bc:ce:db:72:e1:8b:d2:9a:81:da:
8e:66:e3:8a:68:b5:f7:73:64:56:06:b5:df:33:e5:
c9:e0:fc:d7:e7:c3:60:b7:e3:56:1a:3a:19:40:38:
47:dd:3a:6c:b3:bd:d3:2b:98:14:03:15:97:66:19:
07:7d:2d:7c:96:57:69:7a:16:89:9a:69:05:bb:d9:
3c:4f:ab:eb:2b:40:3d:fe:be:95:b2:d6:3e:b1:3b:
cc:ee:6a:8a:bb:18:2f:b1:50:6f:fc:3b:1b:73:bf:
a2:dc:bd:ee:4a:79:9c:ad:ce:3b:f5:34:25:16:9a:
6f:c5:26:7c:fb:1c:3a:3d:ba:55:8a:19:9e:6d:b4:
81:85:3b:ad:c3:a5:fb:c4:b0:84:df:2f:3e:ec:be:
ec:b8:68:f7:99:46:fe:48:6a:9d:84:26:11:14:d8:
db:aa:19:24:7e:6e:13:cd:70:ca:bb:0a:8c:d7:46:
ae:92:70:50:01:b7:be:15:46:80:3a:62:75:53:5c:
60:48:b6:bc:0f:70:ac:ab:45:38:51:27:1e:83:01:
1b:39:05:19:fd:a5:60:df:d8:06:0d:c1:50:79:05:
17:a6:1b:64:45:6d:54:76:56:e8:63:03:c3:84:5f:
ed:f2:e9:f7:d7:8f:cd:df:22:a9:1b:ed:34:f2:cd:
d2:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:33:A6:22:1D:2D:A5:AA:48:34:2D:D9:E6:C1:95:FD:74:A1:1D:AD
X509v3 Authority Key Identifier:
keyid:83:47:95:14:95:93:97:C5:E3:FA:76:E1:EA:49:5E:8E:1F:6C:31:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0eVFJWTl8Xj-nbh6klejh9sMZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/wjOmIh0tpapINC3Z5sGV_XShHa0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/g0eVFJWTl8Xj-nbh6klejh9sMZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.253.88.0/21
81.6.32.0/20
109.202.192.0/19
185.72.64.0/22
185.137.172.0/22
185.183.192.0/22
185.246.104.0/22
193.47.153.0/24
IPv6:
2a07:600::/29
Signature Algorithm: sha256WithRSAEncryption
4c:4f:23:ac:a0:51:31:7f:0a:4f:2b:a2:be:d3:c6:46:90:3a:
fb:ff:7a:1a:4c:01:3f:60:a8:29:9f:ab:cd:a6:f1:15:54:c2:
9c:93:8f:0d:a6:3f:87:9a:f0:51:21:92:de:4e:7f:0e:1a:a0:
b4:98:c0:80:61:a0:1d:c9:1b:60:90:00:97:2b:53:63:00:53:
0f:0e:6c:2b:01:cf:fc:26:06:c5:4d:d8:21:34:4d:b5:e2:f2:
e2:f8:d0:53:d2:a7:a2:4b:61:4c:36:01:d6:93:4d:ad:17:e2:
74:d7:83:dc:f0:6d:f6:13:d5:10:43:c5:2d:49:c6:0f:c5:90:
e6:ac:ce:7d:fb:0a:76:7e:e8:11:7e:59:ba:e6:27:ef:ba:9c:
d0:71:95:16:48:de:99:12:92:6c:0e:70:1f:9b:16:fd:bf:cf:
df:b5:d5:e5:47:4a:98:df:49:f4:b7:82:59:50:bb:e1:f7:a0:
c4:39:97:9c:cb:fb:dc:a7:06:5c:b6:5e:5a:88:7c:a3:74:77:
c0:bd:50:7a:3f:f9:0f:5b:fc:27:e8:57:5c:47:85:cd:25:67:
5c:1c:fb:45:35:6c:b5:f1:8b:26:c1:3e:89:bf:f4:8d:4e:55:
c6:34:69:40:41:c5:db:ca:6f:a1:39:8c:2f:54:08:22:d2:2f:
b6:78:c8:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:28:33 2025 by rpki-client