Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/WF6Mbl3iPWGcW4Wak79mYnYoEb4.roa
File: WF6Mbl3iPWGcW4Wak79mYnYoEb4.roa (raw, json)
Hash identifier: aNFyeL394KCpGZ8QrhbB3x+68zJiJyA2smuqntdxMGo=
Subject key identifier: 58:5E:8C:6E:5D:E2:3D:61:9C:5B:85:9A:93:BF:66:62:76:28:11:BE
Certificate issuer: /CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Certificate serial: 018572BA48B066E7C948A321D88657787731
Authority key identifier: 5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/WF6Mbl3iPWGcW4Wak79mYnYoEb4.roa
Signing time: Mon 02 Jan 2023 13:44:48 +0000
ROA not before: Mon 02 Jan 2023 13:44:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20551
IP address blocks: 195.251.8.0/21 maxlen: 21
194.177.216.0/24 maxlen: 24
2001:648:2590::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:ba:48:b0:66:e7:c9:48:a3:21:d8:86:57:78:77:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Validity
Not Before: Jan 2 13:44:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=585e8c6e5de23d619c5b859a93bf6662762811be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:34:15:16:6c:f9:30:d7:9a:ff:f6:b0:d2:2e:
49:43:1d:f4:e1:4b:c1:a0:94:6d:03:f3:14:b6:d2:
f0:d4:2f:74:fd:fb:d4:80:bb:fa:93:c7:57:f4:f1:
55:e9:12:28:39:b6:61:58:a9:c9:1b:51:52:ad:ae:
08:3b:d5:61:0c:ff:d8:eb:dc:94:a0:d3:fe:5c:24:
4f:80:77:34:6f:8f:65:1c:d2:8c:30:c9:3b:e2:dd:
64:d6:6f:0c:6d:d2:bd:c8:55:af:e8:3e:49:ae:73:
fa:91:78:a6:dc:8f:40:4d:9b:d6:99:38:59:3d:b3:
46:fd:66:d0:ec:2b:b4:22:41:9f:bd:b9:72:0b:eb:
dd:de:a1:73:03:16:7a:ae:5c:35:0f:22:be:8c:49:
67:84:6b:9c:45:38:4a:f3:56:9a:46:c1:40:78:82:
30:20:bb:21:fa:92:c0:fe:2e:09:d0:ad:52:9e:df:
a3:07:7a:ce:99:6c:c1:15:30:fb:f1:22:84:d8:b4:
30:ea:84:54:7c:98:40:72:96:85:d5:9c:bf:f0:4e:
2e:a3:f0:8d:4f:6c:07:56:15:63:e8:d8:88:1b:8e:
0a:d0:86:0c:11:ab:5a:9b:87:49:98:f2:81:fe:03:
40:f4:a8:45:8e:0c:52:87:41:d7:06:a8:45:99:91:
a1:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:5E:8C:6E:5D:E2:3D:61:9C:5B:85:9A:93:BF:66:62:76:28:11:BE
X509v3 Authority Key Identifier:
keyid:5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/WF6Mbl3iPWGcW4Wak79mYnYoEb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.177.216.0/24
195.251.8.0/21
IPv6:
2001:648:2590::/48
Signature Algorithm: sha256WithRSAEncryption
1c:b5:da:10:1a:0a:7a:66:9c:25:57:d4:d4:51:be:2e:80:23:
6d:bd:8b:36:44:bc:8e:93:77:65:cf:0a:31:59:41:69:49:84:
1e:d7:71:67:92:ea:18:34:01:cb:2c:f8:82:c1:6f:f7:d2:60:
cd:4f:18:38:88:77:70:ff:81:6a:af:9f:f1:45:7e:d3:ab:30:
51:7f:72:29:8a:f2:f5:d6:5b:41:04:d0:df:7c:aa:be:e5:85:
91:f8:6b:5f:e3:59:5c:0d:0e:de:d0:ae:d0:5e:00:f0:92:06:
6f:7d:0e:5e:4b:d7:26:e3:49:de:29:48:9f:3f:5d:59:54:e6:
70:f1:34:01:8a:62:75:43:40:0b:c6:20:89:68:8e:b3:ce:5c:
dc:95:16:f7:ec:0d:03:5f:5d:90:4f:4f:94:c8:ed:3d:2c:2f:
c0:d2:c8:c5:62:cd:0c:a1:6b:07:7c:70:bb:cc:8e:d3:18:d5:
5b:dd:9c:39:d1:0e:7b:a5:c7:f9:de:38:9a:b5:13:12:91:df:
57:36:ec:48:0f:dc:81:45:f6:a4:55:2d:92:3b:51:ce:4d:67:
13:49:70:53:9d:2e:f9:1b:69:63:17:92:1b:d4:f4:0a:a4:c8:
88:0c:d5:f2:6b:00:4c:7d:90:59:82:03:11:4d:45:a2:e3:23:
4c:e2:70:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:29:34 2025 by rpki-client