Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/wezQlcM8NbvZFo87wXrUcxsCHfc.roa
File: wezQlcM8NbvZFo87wXrUcxsCHfc.roa (raw, json)
Hash identifier: 0SLYp4grcxJKK4KTOB1lwVDAVv6lMUnd+fyGvLfbHnU=
Subject key identifier: C1:EC:D0:95:C3:3C:35:BB:D9:16:8F:3B:C1:7A:D4:73:1B:02:1D:F7
Certificate issuer: /CN=0f6363d428b7915c108825f09706004b8ea3d4b5
Certificate serial: 0183D03CF06FA8FFAD47EA1CA284646B3A15
Authority key identifier: 0F:63:63:D4:28:B7:91:5C:10:88:25:F0:97:06:00:4B:8E:A3:D4:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/wezQlcM8NbvZFo87wXrUcxsCHfc.roa
Signing time: Thu 13 Oct 2022 07:26:38 +0000
ROA not before: Thu 13 Oct 2022 07:26:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207326
IP address blocks: 37.143.4.0/22 maxlen: 24
46.28.44.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d0:3c:f0:6f:a8:ff:ad:47:ea:1c:a2:84:64:6b:3a:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f6363d428b7915c108825f09706004b8ea3d4b5
Validity
Not Before: Oct 13 07:26:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c1ecd095c33c35bbd9168f3bc17ad4731b021df7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:30:63:96:db:bd:0b:a3:77:b0:ab:34:7e:da:
d3:27:01:ed:5b:21:7c:65:b9:cf:2e:ba:9e:5e:96:
ff:64:f6:a0:4b:70:fb:08:5c:41:04:43:33:cf:a2:
1d:88:d5:7a:34:b0:63:55:a1:8e:dc:8a:92:ae:82:
7a:d6:93:5e:6f:b8:4d:0b:cc:63:09:dc:5e:22:46:
ec:63:50:09:29:fb:ad:aa:41:6a:7d:89:89:a5:ed:
75:ee:60:bf:17:58:53:68:b8:9c:c0:16:e1:51:bb:
02:42:45:40:55:85:ca:ac:c0:96:ac:1e:18:31:76:
6a:e8:91:94:c5:2f:83:f2:06:81:b1:87:05:41:c5:
11:9f:46:ff:c8:37:46:ac:ac:00:8b:16:3d:16:a6:
e3:6c:58:21:6c:e6:a9:94:c3:e7:de:2c:21:1f:7b:
82:70:3b:a6:2f:ca:ed:0a:99:41:a9:85:e1:ba:5c:
e5:2f:28:71:f1:75:d4:c8:d7:7d:56:51:f2:a7:49:
39:44:61:34:e5:22:c8:ac:17:05:7c:59:bd:bb:01:
af:31:55:75:01:33:ea:e5:8b:7f:92:20:e6:83:88:
c7:c9:74:0c:df:63:41:f5:72:b7:d9:04:8d:6b:1c:
0f:08:8a:8e:b1:0d:4d:78:f6:03:39:95:09:01:2c:
08:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:EC:D0:95:C3:3C:35:BB:D9:16:8F:3B:C1:7A:D4:73:1B:02:1D:F7
X509v3 Authority Key Identifier:
keyid:0F:63:63:D4:28:B7:91:5C:10:88:25:F0:97:06:00:4B:8E:A3:D4:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/wezQlcM8NbvZFo87wXrUcxsCHfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.143.4.0/22
46.28.44.0/22
Signature Algorithm: sha256WithRSAEncryption
60:76:71:e6:70:cc:09:0a:74:b1:d2:e6:c2:ee:fc:3b:40:52:
f2:f1:ac:a6:62:b9:07:84:b6:38:37:82:9a:cf:d6:b7:8b:56:
6e:3f:3b:74:4e:cf:d0:df:0e:96:96:81:d9:28:e3:2c:64:1d:
01:69:77:18:8d:66:14:74:76:7f:dd:78:05:90:da:a6:f2:27:
02:ee:8b:c3:95:e5:5a:48:ae:0a:dd:98:69:9a:ba:4f:10:96:
e3:50:43:72:41:0b:93:0c:3e:83:42:f3:9d:5e:0f:c3:12:c4:
e6:78:0d:a5:69:0a:81:88:1f:04:7b:e3:ab:13:48:fa:d0:6a:
9f:6f:c6:42:ec:e8:c9:d0:2b:d4:21:57:70:58:1d:e2:8b:7b:
75:99:ea:16:a6:07:e5:1d:46:19:9d:17:6c:95:f1:6b:37:89:
c2:84:6b:6e:26:4d:0e:8f:2c:6e:29:6c:d4:7b:c6:2f:dd:6d:
7d:78:a7:63:2b:85:0d:ce:28:c2:aa:ce:cf:52:37:6d:ae:42:
7e:8a:aa:e0:a0:ac:cd:df:86:79:d3:b1:11:0f:79:38:b1:43:
74:c3:77:e3:6c:38:2e:87:a3:57:8a:51:de:db:51:44:28:aa:
bf:68:2f:09:77:e8:65:7a:1b:8d:ba:f6:95:73:87:88:ed:e2:
c9:4e:00:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:30:04 2025 by rpki-client