Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/WBX4x_vifCzVmDeVIjBuQB4z5sI.roa
File: WBX4x_vifCzVmDeVIjBuQB4z5sI.roa (raw, json)
Hash identifier: dK/lNKslYMCxo8tlRq89hWvL27/N9H6As4jcKfgslZU=
Subject key identifier: 58:15:F8:C7:FB:E2:7C:2C:D5:98:37:95:22:30:6E:40:1E:33:E6:C2
Certificate issuer: /CN=f2d593b1c87b81739ec41910295bf385f2c9a992
Certificate serial: 0183C2555874F30C4FFCB319A3722BCBFB71
Authority key identifier: F2:D5:93:B1:C8:7B:81:73:9E:C4:19:10:29:5B:F3:85:F2:C9:A9:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8tWTsch7gXOexBkQKVvzhfLJqZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/WBX4x_vifCzVmDeVIjBuQB4z5sI.roa
Signing time: Mon 10 Oct 2022 14:38:36 +0000
ROA not before: Mon 10 Oct 2022 14:38:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210892
IP address blocks: 79.135.124.0/24 maxlen: 24
79.135.126.0/24 maxlen: 24
5.1.45.0/24 maxlen: 24
2a11:2b07:f000::/48 maxlen: 48
2a11:2b07:f001::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c2:55:58:74:f3:0c:4f:fc:b3:19:a3:72:2b:cb:fb:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2d593b1c87b81739ec41910295bf385f2c9a992
Validity
Not Before: Oct 10 14:38:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5815f8c7fbe27c2cd598379522306e401e33e6c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:48:97:68:75:9f:e2:d2:06:31:7f:40:8c:bb:
81:64:53:e4:97:cf:e5:d3:b0:d8:c1:b9:2c:10:e8:
96:e0:38:42:96:89:cc:f5:81:0a:31:93:b2:79:f4:
ec:94:e3:41:23:4f:3d:4e:73:1c:9a:02:46:3a:4e:
69:41:c1:21:2b:36:2e:0f:1e:70:6f:21:66:fe:61:
25:1b:16:3d:ac:08:83:b3:8f:2c:d1:c6:c5:ec:bb:
1e:15:b8:f9:8c:20:84:5f:de:2f:bf:fc:d5:25:5e:
0d:6a:0f:a6:84:e5:08:f6:d8:6a:76:94:c1:bf:46:
18:b9:a1:23:2c:55:ce:d7:f3:53:e1:56:40:31:0f:
87:d7:da:62:76:05:01:a8:c8:d4:b3:61:f7:5c:ad:
33:19:6e:e0:b8:c5:2a:00:36:5e:14:3d:f4:2d:03:
ab:cc:47:eb:31:18:8f:3c:51:9b:77:c9:80:e0:74:
60:07:00:c7:9d:95:ba:50:76:b6:64:ba:7c:75:fc:
16:d8:51:05:5f:78:63:27:17:7a:5d:84:60:3f:ef:
01:6c:a6:3b:0f:b3:78:09:db:fc:ea:71:35:0c:f3:
74:31:c5:a9:ac:4a:00:13:05:d6:1b:13:a9:e3:12:
b1:ac:17:2b:28:7b:53:7f:74:84:90:8e:6e:58:49:
0d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:15:F8:C7:FB:E2:7C:2C:D5:98:37:95:22:30:6E:40:1E:33:E6:C2
X509v3 Authority Key Identifier:
keyid:F2:D5:93:B1:C8:7B:81:73:9E:C4:19:10:29:5B:F3:85:F2:C9:A9:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8tWTsch7gXOexBkQKVvzhfLJqZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/WBX4x_vifCzVmDeVIjBuQB4z5sI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.45.0/24
79.135.124.0/24
79.135.126.0/24
IPv6:
2a11:2b07:f000::/47
Signature Algorithm: sha256WithRSAEncryption
25:a6:2c:bf:f7:39:83:76:82:c9:24:3e:a7:53:6c:9c:dd:74:
60:da:b5:3c:a5:c7:fb:15:a3:53:13:cf:b7:36:35:cf:df:01:
d9:ea:80:cf:93:d9:2a:a4:60:3f:e6:94:1c:02:4f:2f:cd:8c:
48:da:89:fc:59:b2:7c:be:f8:eb:d9:07:52:de:67:fd:ee:69:
b7:83:0d:6f:6e:32:7c:ac:3e:b9:19:df:6d:cd:3a:44:6b:da:
5e:04:d9:35:1f:26:25:84:b7:4a:2c:25:c5:ff:82:98:99:c9:
d1:c4:bf:62:67:ff:f5:f5:1e:94:4b:a7:f9:dd:f3:7b:14:b0:
6e:11:0b:63:b4:ad:d4:0a:11:32:a0:44:ba:3a:d8:24:2b:0d:
b4:5b:17:3d:8c:27:0d:cb:bf:97:75:30:4c:5c:49:47:64:b8:
29:ff:25:d6:19:87:23:3d:1e:fc:89:6c:99:f6:9d:31:cb:c4:
65:d6:5e:92:e7:58:3c:f2:82:e1:97:5f:e5:fa:c5:af:a4:91:
9d:8e:db:90:7a:b3:62:a4:24:ab:5a:5e:2e:34:c7:87:60:2f:
79:22:d6:f2:9f:e4:db:f0:3b:96:4a:92:75:82:34:4c:18:20:
60:00:b2:e9:50:08:23:5c:d4:97:82:d2:91:a5:0e:07:09:6d:
c1:09:7b:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 14:40:16 2025 by rpki-client