Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/WYsmHyaIESx_u4v4wbqIk9P7IuA.roa
File: WYsmHyaIESx_u4v4wbqIk9P7IuA.roa (raw, json)
Hash identifier: +gMJaIVDPQFddhhwsTiOJzKQLGqggKKmhPcxDsxt7WU=
Subject key identifier: 59:8B:26:1F:26:88:11:2C:7F:BB:8B:F8:C1:BA:88:93:D3:FB:22:E0
Certificate issuer: /CN=712f9cb3c298b150beb79080376f74bdeac438ac
Certificate serial: 1C6A4AEA
Authority key identifier: 71:2F:9C:B3:C2:98:B1:50:BE:B7:90:80:37:6F:74:BD:EA:C4:38:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cS-cs8KYsVC-t5CAN290verEOKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/WYsmHyaIESx_u4v4wbqIk9P7IuA.roa
Signing time: Sat 01 Jan 2022 13:04:17 +0000
ROA not before: Sat 01 Jan 2022 13:04:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203500
IP address blocks: 185.22.130.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 476728042 (0x1c6a4aea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=712f9cb3c298b150beb79080376f74bdeac438ac
Validity
Not Before: Jan 1 13:04:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=598b261f2688112c7fbb8bf8c1ba8893d3fb22e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:fd:5a:08:6c:c5:7a:c2:00:d0:4e:e3:52:97:
ac:65:ad:b9:ce:f5:29:c2:fb:2b:01:e1:34:de:3d:
6c:66:3d:03:81:07:79:4d:30:cc:14:3a:7f:63:89:
1e:7c:bf:04:a0:21:ce:0e:1f:33:13:cd:f7:bb:6b:
8c:f0:c8:77:dd:92:e1:a4:0d:bb:e7:87:d4:49:f0:
0d:51:1e:c4:c9:a3:c9:43:72:0d:9e:03:92:47:29:
61:a0:19:2f:f8:30:40:7f:66:c7:fc:d7:d2:07:4c:
e1:93:40:d3:c2:cf:8b:d9:a0:f8:44:65:27:03:d9:
ee:39:20:9b:d7:20:ce:8c:42:e2:54:48:8f:87:09:
74:b6:15:20:27:60:42:7e:c2:02:cb:96:b9:46:49:
13:2b:46:85:9e:eb:96:84:53:2d:53:91:e5:40:02:
c1:25:b6:ae:4a:db:6b:bd:68:22:f3:c5:29:0b:8c:
0c:4b:1b:67:b4:e2:7d:81:45:a6:53:0b:72:62:78:
45:7e:9f:01:bf:ba:f9:ac:fb:29:77:be:e1:e2:a2:
70:6e:9b:85:74:4e:e0:18:8e:f9:88:f2:b6:04:2a:
12:1e:44:ec:9c:86:24:1e:46:8b:21:ff:bd:43:14:
19:89:07:99:c3:77:14:3f:bb:38:c6:d8:60:88:f1:
22:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:8B:26:1F:26:88:11:2C:7F:BB:8B:F8:C1:BA:88:93:D3:FB:22:E0
X509v3 Authority Key Identifier:
keyid:71:2F:9C:B3:C2:98:B1:50:BE:B7:90:80:37:6F:74:BD:EA:C4:38:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS-cs8KYsVC-t5CAN290verEOKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/WYsmHyaIESx_u4v4wbqIk9P7IuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.22.130.0/24
Signature Algorithm: sha256WithRSAEncryption
20:4e:72:f5:0d:d8:0c:d4:0e:31:e6:a2:e2:ae:bf:bc:53:5b:
9d:1d:99:59:39:f0:48:91:08:74:66:05:0e:df:45:b2:e0:31:
be:e8:da:14:8a:5b:81:1f:4d:3e:04:da:2c:52:4b:78:90:f2:
60:02:7c:ce:13:a5:2f:79:95:a2:16:00:79:82:ed:e7:cc:7d:
7f:81:8f:f8:06:04:2c:ee:a6:53:b1:30:1e:a8:5f:62:ba:11:
cd:71:fc:b1:89:6a:1f:f5:2a:6b:fb:01:69:c6:fb:6a:3e:60:
3a:3f:38:46:00:89:cf:60:7d:75:3f:cc:dc:03:92:08:3e:89:
cc:b7:04:f9:97:46:79:a1:f5:0d:21:6f:4f:1b:69:94:2b:a9:
78:18:16:74:bc:09:68:31:26:c2:9b:7c:71:04:fe:e8:45:5f:
43:0c:91:c1:69:ed:69:50:c3:67:9c:1d:04:7d:f0:a6:8d:cd:
e4:f7:e0:23:82:66:6a:ad:22:55:35:0f:ad:af:a0:8c:a3:7a:
f0:52:f1:f3:a0:e1:3d:db:26:78:20:3b:5d:9b:8e:d7:9e:81:
e3:c1:af:a3:bb:1e:1b:4d:f7:e7:93:f7:35:92:a0:d1:77:85:
85:33:4a:41:45:e0:01:a2:9e:2a:ef:21:bb:a1:8d:4b:41:93:
61:9f:6c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:11:24 2025 by rpki-client