Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/WlfxumPgf1NXk1CBdVXzWtj1jiY.roa
File: WlfxumPgf1NXk1CBdVXzWtj1jiY.roa (raw, json)
Hash identifier: CCd7VSRcF7HRve4As1GzJu5RVgmWYXQoG0GoG+P3qiw=
Subject key identifier: 5A:57:F1:BA:63:E0:7F:53:57:93:50:81:75:55:F3:5A:D8:F5:8E:26
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01856CCB11675323B18E21F18DF173CA0652
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/WlfxumPgf1NXk1CBdVXzWtj1jiY.roa
Signing time: Sun 01 Jan 2023 10:05:25 +0000
ROA not before: Sun 01 Jan 2023 10:05:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210140
IP address blocks: 193.235.160.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:cb:11:67:53:23:b1:8e:21:f1:8d:f1:73:ca:06:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 10:05:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5a57f1ba63e07f53579350817555f35ad8f58e26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:09:64:98:4c:5e:f7:81:e1:49:f2:e4:93:20:
98:2c:66:59:0d:94:7a:02:1d:22:18:2f:40:bc:f0:
db:0f:c6:b6:de:f1:49:aa:da:63:d3:48:b6:fd:09:
2c:87:6c:b2:79:03:8e:d4:ed:da:a8:7a:2c:67:c7:
bf:ca:18:f4:91:1b:27:a6:19:36:cd:13:7b:52:e5:
81:03:23:20:46:c4:4c:40:0a:78:0e:43:d9:fc:a6:
3b:be:f7:62:e4:a1:92:0a:57:6b:78:66:68:09:82:
f3:53:c6:7f:28:b9:96:d5:8e:ca:4c:57:68:91:06:
e2:11:7d:9b:60:00:51:10:05:21:4a:4e:bc:dc:47:
c6:a0:3c:78:c9:18:3b:ec:74:d7:3e:40:1a:bb:b0:
cf:cf:b3:14:f1:ec:d9:b9:8a:d0:76:47:0a:24:78:
c7:da:72:fe:46:c0:70:b1:d5:cb:60:71:43:9a:00:
62:f9:37:e6:3c:9e:2b:77:85:04:73:3e:9e:e4:4c:
bb:70:e6:16:60:34:13:03:0b:2b:16:22:6e:0a:55:
96:a4:16:79:64:19:6c:d1:28:f5:7d:bd:b2:39:2e:
b9:da:66:93:55:b1:83:57:32:91:b8:60:74:c5:c7:
53:d9:f9:01:90:62:a2:7f:17:1f:92:1b:1a:8a:be:
81:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:57:F1:BA:63:E0:7F:53:57:93:50:81:75:55:F3:5A:D8:F5:8E:26
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/WlfxumPgf1NXk1CBdVXzWtj1jiY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.235.160.0/19
Signature Algorithm: sha256WithRSAEncryption
c6:04:6f:8c:25:30:62:b1:bd:7e:8d:20:78:e4:e9:9f:19:eb:
be:c9:d7:11:9e:53:f1:10:b0:e8:50:0b:04:44:59:9e:fe:5e:
b8:16:1e:4f:cd:3c:92:8e:94:47:b8:e9:b3:d8:4b:7a:a1:26:
12:c1:96:64:3d:46:e6:ce:5f:fc:7e:c1:33:7d:70:9d:ea:26:
d3:38:fe:0f:ed:1f:69:ae:9e:23:2b:70:cd:30:22:65:00:02:
d1:a1:fe:91:6a:46:05:eb:1b:3a:eb:60:81:4f:a4:82:3b:d0:
8e:61:21:48:71:c3:23:b9:ad:bf:e8:66:d3:95:77:ee:7f:69:
2a:96:52:11:a6:f8:95:bd:db:a5:b5:83:b7:75:cd:9e:4f:c5:
a6:4d:55:8c:ee:05:c4:7c:00:9c:5a:07:29:ae:b3:6f:68:35:
03:3a:1d:36:b6:2f:70:a1:90:88:4f:65:3f:b3:db:dd:5b:29:
cc:ab:15:10:b9:51:af:12:f3:6f:3a:a7:2b:2b:75:c5:f4:0a:
1b:1d:6a:c2:94:38:73:47:37:df:0d:83:91:c4:2b:ca:48:b3:
b0:1f:c5:c1:e5:9d:4e:9f:59:aa:b7:b0:1c:f6:30:74:b6:27:
34:37:de:a5:42:18:30:8d:5d:cd:ea:b2:88:2f:18:66:cf:d7:
89:87:68:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:56:40 2025 by rpki-client