Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/whZzggqRSgUSl-mwXvOv87QkFU0.roa
File: whZzggqRSgUSl-mwXvOv87QkFU0.roa (raw, json)
Hash identifier: 8487IxjciWL3m8hCxOmY3cOB2HTjEi1yrLOZ+OZEQpo=
Subject key identifier: C2:16:73:82:0A:91:4A:05:12:97:E9:B0:5E:F3:AF:F3:B4:24:15:4D
Certificate issuer: /CN=c2eafaa30b340ecf810a4cb9af3b51c702566598
Certificate serial: 0189457659775C4DF83BF6101CCADEDC1F76
Authority key identifier: C2:EA:FA:A3:0B:34:0E:CF:81:0A:4C:B9:AF:3B:51:C7:02:56:65:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wur6ows0Ds-BCky5rztRxwJWZZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/whZzggqRSgUSl-mwXvOv87QkFU0.roa
Signing time: Tue 11 Jul 2023 14:58:51 +0000
ROA not before: Tue 11 Jul 2023 14:58:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8410
IP address blocks: 212.15.41.0/24 maxlen: 24
212.15.42.0/24 maxlen: 24
212.15.40.0/24 maxlen: 24
212.15.43.0/24 maxlen: 24
212.15.44.0/24 maxlen: 24
212.15.48.0/24 maxlen: 24
212.15.49.0/24 maxlen: 24
212.15.46.0/24 maxlen: 24
212.15.47.0/24 maxlen: 24
212.15.50.0/24 maxlen: 24
212.15.51.0/24 maxlen: 24
212.15.45.0/24 maxlen: 24
212.15.52.0/24 maxlen: 24
194.55.163.0/24 maxlen: 24
194.55.161.0/24 maxlen: 24
212.15.53.0/24 maxlen: 24
212.15.54.0/24 maxlen: 24
194.55.171.0/24 maxlen: 24
194.55.168.0/24 maxlen: 24
195.140.180.0/22 maxlen: 22
212.15.32.0/21 maxlen: 21
194.0.120.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:45:76:59:77:5c:4d:f8:3b:f6:10:1c:ca:de:dc:1f:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2eafaa30b340ecf810a4cb9af3b51c702566598
Validity
Not Before: Jul 11 14:58:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c21673820a914a051297e9b05ef3aff3b424154d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b3:a9:ae:e0:9f:e2:f4:34:c6:2c:04:ce:f3:
bd:5b:9d:d7:2d:04:58:b3:b8:e3:05:83:e1:c3:54:
ff:1a:21:8a:09:a4:cb:ca:6d:ef:36:2f:84:6e:99:
7a:06:e9:9f:22:ab:37:61:7e:a2:bf:c3:b0:ea:80:
90:59:8b:34:d2:6b:d0:d4:44:41:24:c7:f8:20:2e:
6a:77:f9:5d:2f:d8:1c:2e:49:6d:57:0a:ea:9e:ff:
0c:97:6e:5b:1c:27:a6:4e:a0:b2:39:48:95:c6:24:
2c:70:94:d7:a9:65:2f:64:ca:a9:ee:bb:91:0d:26:
c0:59:5f:7c:67:2f:91:d7:41:95:23:f8:d6:f0:a4:
e9:f9:b5:69:d6:e6:85:5f:21:00:17:3c:02:76:95:
8f:0b:34:23:7a:e0:da:c2:a9:bb:cf:3b:74:54:fd:
a6:38:28:4b:a5:f0:00:fb:27:fc:8a:47:0e:f0:40:
7b:b1:5f:f4:45:95:6d:d8:d5:ca:68:9b:cb:b8:00:
31:43:2e:b1:75:1d:6e:fe:38:a4:f4:b1:6c:89:43:
22:57:e8:35:18:a1:f9:5b:44:07:ea:90:26:1b:13:
21:4c:25:e2:c2:96:94:86:64:2e:95:6a:1e:3c:ed:
b8:68:e4:f6:96:e8:41:61:c5:05:a2:40:6a:a5:ca:
cd:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:16:73:82:0A:91:4A:05:12:97:E9:B0:5E:F3:AF:F3:B4:24:15:4D
X509v3 Authority Key Identifier:
keyid:C2:EA:FA:A3:0B:34:0E:CF:81:0A:4C:B9:AF:3B:51:C7:02:56:65:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wur6ows0Ds-BCky5rztRxwJWZZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/whZzggqRSgUSl-mwXvOv87QkFU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.120.0/22
194.55.161.0/24
194.55.163.0/24
194.55.168.0/24
194.55.171.0/24
195.140.180.0/22
212.15.32.0-212.15.54.255
Signature Algorithm: sha256WithRSAEncryption
40:0d:a1:42:2f:b8:e2:32:fa:88:a7:ad:88:54:6e:b2:eb:4e:
37:d7:9d:4f:b8:3a:cf:73:02:15:89:09:96:77:31:cd:66:ad:
e8:cd:b7:8c:99:f2:72:6c:66:ab:8f:14:b7:67:79:76:02:23:
a0:66:a4:ba:e7:0f:a9:67:c8:53:86:9c:3b:c8:e0:bb:e1:ba:
5e:0b:05:19:4c:d2:ee:4b:b7:15:ea:04:42:5f:05:fc:eb:50:
9c:20:b3:85:bf:0b:89:eb:51:c5:fd:ec:18:fb:1d:cf:46:2f:
c2:93:6a:98:d5:df:fe:29:aa:e4:cf:1d:e2:b0:44:46:c3:1d:
0d:e5:23:84:3b:c8:df:1e:0d:3a:6c:26:6f:11:c1:37:83:3c:
53:77:d4:42:8a:1c:8b:1c:25:76:b7:7a:e8:ee:6d:4f:ce:e8:
4a:44:0c:de:09:f4:b9:90:aa:86:0b:2d:24:b6:41:68:d4:dd:
bd:ae:a5:b6:ac:b1:46:cb:90:40:bc:02:93:e4:0e:d8:44:0d:
4e:45:de:47:a0:4a:59:74:b7:94:29:25:fc:91:b5:94:01:58:
f0:e7:a8:17:c4:60:4a:f9:3d:1c:18:ac:4a:60:99:13:00:36:
04:23:97:d3:9a:a7:b6:85:73:5d:e4:d3:73:1a:89:2e:88:4b:
ea:69:1b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 07:02:42 2025 by rpki-client