Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/wfPMenxtMQCgWWN1KIBJhsdrHbM.roa
File: wfPMenxtMQCgWWN1KIBJhsdrHbM.roa (raw, json)
Hash identifier: jZFCqRj5aq/y1azIUZYZykXnNzXlIJHAsd3MOMuv+kI=
Subject key identifier: C1:F3:CC:7A:7C:6D:31:00:A0:59:63:75:28:80:49:86:C7:6B:1D:B3
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01856CCAC6A494898ADFBD92A5435084D82C
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/wfPMenxtMQCgWWN1KIBJhsdrHbM.roa
Signing time: Sun 01 Jan 2023 10:05:06 +0000
ROA not before: Sun 01 Jan 2023 10:05:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1221
IP address blocks: 192.71.161.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:c6:a4:94:89:8a:df:bd:92:a5:43:50:84:d8:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 10:05:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c1f3cc7a7c6d3100a059637528804986c76b1db3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ff:11:43:2c:2e:cf:a4:ed:40:26:23:5f:2c:
5c:a9:d1:86:e5:2c:dd:97:ae:12:15:9f:01:16:b8:
1b:87:37:67:e3:23:52:8b:ad:21:69:57:5e:c6:35:
b4:6c:17:1b:c4:52:07:e3:24:5f:71:f4:67:1b:9b:
61:3a:a4:9c:be:db:05:36:39:4f:f5:fb:db:96:38:
43:c9:9d:ab:7c:5d:8f:fb:5c:ba:c7:25:24:2b:54:
d4:68:94:68:f5:5d:1d:9b:03:63:0b:bc:3f:6c:30:
7d:98:a3:96:f6:86:b3:0d:7d:55:2b:14:1b:62:be:
bb:f0:1a:76:f6:40:91:6f:cf:49:1c:e1:44:86:01:
9f:82:56:ad:c4:86:66:9c:9a:60:4e:42:bd:69:0e:
e8:0f:49:86:59:33:c2:53:00:4c:c7:f7:39:10:7f:
df:04:45:d3:51:20:2a:e9:12:34:e0:a5:b7:14:a6:
c8:f6:c9:e8:33:9b:fc:41:92:06:24:0b:64:f7:50:
42:38:4c:0a:c5:b4:c8:15:29:0e:85:56:c4:ac:da:
bd:85:2c:77:2c:15:48:dc:2e:b9:06:fc:00:f8:ee:
f3:4f:c4:af:57:8c:0e:ca:2c:dd:fb:c2:cb:68:ed:
f6:ce:b4:46:51:d3:fe:22:e0:67:c0:18:e9:4d:c3:
6d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F3:CC:7A:7C:6D:31:00:A0:59:63:75:28:80:49:86:C7:6B:1D:B3
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/wfPMenxtMQCgWWN1KIBJhsdrHbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.71.161.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:48:e0:cb:5b:df:17:a2:dd:8c:bd:4c:69:ec:61:29:86:ec:
72:a8:e4:56:02:8c:29:d5:7b:2b:bd:df:9e:16:84:a0:82:e8:
3e:f6:a6:83:42:ec:ce:6f:e9:37:ef:e0:3f:c0:d3:9c:5e:49:
d0:97:b1:1c:aa:a7:68:f7:f0:51:63:a7:c4:b1:95:8c:95:38:
8d:b7:0d:88:8f:9b:86:45:78:32:91:4a:72:2f:7a:8c:e5:00:
0c:37:cb:69:8c:19:be:9c:6e:10:aa:f6:ab:8c:88:66:51:c8:
3c:de:d6:71:f5:1b:7a:ac:7d:76:21:ce:b1:00:00:33:e6:27:
aa:87:5a:c6:aa:eb:4f:37:77:0d:b2:b9:32:3b:4b:32:19:28:
f5:bd:e8:bf:af:c6:a9:9c:17:41:8f:b5:cf:8e:dc:00:d5:4e:
12:e0:8c:18:dc:54:d0:e1:f9:5f:71:a1:0b:20:74:ea:e2:d5:
8a:e2:1c:f4:62:6a:3b:0e:1c:06:56:6f:53:37:74:f6:6f:44:
50:e8:95:3b:b6:f3:1b:56:84:a7:29:a7:ce:be:84:94:3e:b8:
48:40:61:e5:df:ca:4a:e6:e4:58:fb:c8:0c:36:e7:55:5a:a2:
b7:da:40:49:23:08:26:34:b9:95:b1:7b:ff:0f:d7:b1:f8:6a:
cf:54:50:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:56:59 2025 by rpki-client