Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/WB_PHQDvvtcibCjcJic9PB4XF-A.roa
File: WB_PHQDvvtcibCjcJic9PB4XF-A.roa (raw, json)
Hash identifier: lLq26QTfnOJumEhklgergXmz/wsuOcG0WKMwaCbpaJc=
Subject key identifier: 58:1F:CF:1D:00:EF:BE:D7:22:6C:28:DC:26:27:3D:3C:1E:17:17:E0
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 424ED2DB
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/WB_PHQDvvtcibCjcJic9PB4XF-A.roa
Signing time: Sat 01 Jan 2022 14:02:54 +0000
ROA not before: Sat 01 Jan 2022 14:02:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1299
IP address blocks: 193.180.119.0/24 maxlen: 24
193.235.104.0/24 maxlen: 24
193.235.106.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1112462043 (0x424ed2db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 14:02:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=581fcf1d00efbed7226c28dc26273d3c1e1717e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2a:38:d2:12:77:4f:1b:79:6e:31:15:df:d8:
4c:5b:55:78:90:1c:3f:e4:e8:6a:99:82:a0:6f:55:
ad:0d:91:42:c0:59:7b:14:ee:73:84:91:79:93:3f:
2b:dd:64:aa:b6:9d:3d:67:56:31:2f:60:ca:cc:02:
52:c8:d4:f8:88:4d:a6:cf:8d:f1:29:2a:f6:58:79:
b8:e8:9a:c4:93:c1:a1:dd:a3:e2:e3:73:fb:67:94:
fa:06:46:95:6a:50:16:ea:81:e2:ae:37:f5:25:fe:
35:ed:1c:77:c1:d0:d6:f5:3c:a8:a6:aa:ad:7f:6c:
4b:b1:78:b8:29:02:be:74:d8:dd:ed:4a:27:13:d1:
74:9b:82:eb:c9:5b:14:72:33:30:82:2a:34:cb:9c:
9d:f2:5b:08:80:fa:13:3d:77:82:4e:f6:fe:c9:b2:
24:66:2c:73:72:ef:cf:d4:a4:c1:2f:9a:bf:8e:38:
0b:80:4f:19:4e:e4:fd:47:d1:67:93:95:0c:d2:04:
90:48:cb:96:13:27:c4:33:72:ed:39:e5:e2:2a:c9:
ee:f9:f0:0f:9a:41:18:d0:6c:ff:8a:8f:e8:f3:6f:
97:9a:64:4d:bb:26:94:4e:33:91:81:71:f4:a3:0a:
2c:87:e1:f7:f1:ab:a8:03:c3:d4:2a:a3:df:03:10:
fa:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:1F:CF:1D:00:EF:BE:D7:22:6C:28:DC:26:27:3D:3C:1E:17:17:E0
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/WB_PHQDvvtcibCjcJic9PB4XF-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.180.119.0/24
193.235.104.0/24
193.235.106.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:5f:9f:91:45:ad:72:d2:dc:a0:cf:d4:8c:36:8c:11:7a:5d:
ea:27:9a:2b:15:bc:66:46:5e:38:ae:4a:dd:db:00:9a:cd:f7:
bd:69:c4:81:67:75:6b:2a:8a:7c:d8:52:6b:e1:65:5e:1c:36:
01:5b:9a:aa:23:37:c5:8c:29:a8:7b:1c:dc:66:da:96:97:e8:
d0:e8:af:25:3d:0a:e4:7b:90:9a:99:f0:ed:5e:a2:e1:b5:d5:
ab:51:69:f2:08:dd:48:bd:17:fb:7c:07:2c:d1:5d:39:23:6c:
85:35:f0:06:b9:78:61:de:07:42:1e:46:fb:2a:0c:5e:82:35:
f9:fc:c4:a9:ea:a7:ef:d8:0e:b5:00:ea:b4:1c:ec:3f:0b:d0:
f3:af:7f:4e:ff:81:39:29:c4:b7:fb:0e:8e:ee:32:f0:48:19:
d8:99:8c:89:15:d2:95:0d:b0:3d:bc:55:12:0a:45:d6:0f:98:
b4:0f:66:4f:5c:11:91:ce:8d:9d:e4:30:92:47:e5:96:66:e1:
40:45:77:4c:70:6b:94:ff:79:dd:8e:fe:ee:36:41:2a:6d:a0:
35:19:e3:56:45:7d:2d:8a:cd:a0:55:fa:4b:d1:13:e5:35:09:
30:db:7b:7c:af:8d:18:6e:28:be:7b:92:76:37:3b:d6:c7:64:
2b:7e:c6:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:02:56 2025 by rpki-client