Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/fb39ed-7c73-4478-901d-65a899a60366/1/wo_E2FUksnl83HjFufeE4ZFUnlM.roa
File: wo_E2FUksnl83HjFufeE4ZFUnlM.roa (raw, json)
Hash identifier: bP7a7qRP5/0oAkPDp4Ac8ZBEmBRXtFUA+9gV9W3TSao=
Subject key identifier: C2:8F:C4:D8:55:24:B2:79:7C:DC:78:C5:B9:F7:84:E1:91:54:9E:53
Certificate issuer: /CN=449b18e3296d795d3a9c959be25c70aaab365200
Certificate serial: 341DABB8
Authority key identifier: 44:9B:18:E3:29:6D:79:5D:3A:9C:95:9B:E2:5C:70:AA:AB:36:52:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RJsY4ylteV06nJWb4lxwqqs2UgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/fb39ed-7c73-4478-901d-65a899a60366/1/wo_E2FUksnl83HjFufeE4ZFUnlM.roa
Signing time: Sat 01 Jan 2022 12:55:28 +0000
ROA not before: Sat 01 Jan 2022 12:55:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208857
IP address blocks: 185.44.208.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 874359736 (0x341dabb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=449b18e3296d795d3a9c959be25c70aaab365200
Validity
Not Before: Jan 1 12:55:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c28fc4d85524b2797cdc78c5b9f784e191549e53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:35:ef:3a:a5:74:1c:c7:0e:ef:f7:e0:ec:47:
9c:e1:01:61:44:4d:dc:6c:3e:5d:47:05:0d:5b:7d:
13:3e:1e:7e:24:d9:e1:e2:48:3e:fe:1e:91:d0:ec:
0c:9e:aa:8d:d8:2a:20:b0:9f:8d:f8:e0:e5:d8:e6:
f9:2e:29:56:59:69:23:36:87:e6:30:55:dc:49:4a:
f1:f6:bd:0e:8b:6f:65:7d:56:10:49:69:67:82:68:
9c:63:88:c3:1d:09:3e:b6:16:a5:08:ab:b9:a4:2e:
09:8e:7f:64:bd:34:0e:13:2a:06:b5:7c:8c:02:e7:
5d:02:2c:5e:55:61:4a:8c:f1:5b:7c:b0:d5:28:5c:
c9:d1:4c:22:a5:82:a1:c8:da:e1:1a:4d:a1:f6:af:
d7:09:c2:2e:72:f7:db:9d:05:72:38:b5:9d:e1:ea:
c0:1f:44:2c:c7:98:5c:54:ce:19:97:c9:8d:4c:af:
8f:27:66:ea:ec:a7:f8:ed:3b:20:23:ab:8d:42:fa:
f1:08:17:65:a7:10:c7:11:8e:dc:44:44:75:d0:b9:
ad:b7:c5:28:e4:0d:60:c5:4b:48:85:a1:c7:29:2b:
0e:c3:d8:e0:69:e8:11:31:66:de:16:11:7e:9e:90:
a6:ba:4c:84:a2:19:6e:45:5c:29:84:48:c6:08:73:
41:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:8F:C4:D8:55:24:B2:79:7C:DC:78:C5:B9:F7:84:E1:91:54:9E:53
X509v3 Authority Key Identifier:
keyid:44:9B:18:E3:29:6D:79:5D:3A:9C:95:9B:E2:5C:70:AA:AB:36:52:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RJsY4ylteV06nJWb4lxwqqs2UgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/fb39ed-7c73-4478-901d-65a899a60366/1/wo_E2FUksnl83HjFufeE4ZFUnlM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/fb39ed-7c73-4478-901d-65a899a60366/1/RJsY4ylteV06nJWb4lxwqqs2UgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.44.208.0/23
Signature Algorithm: sha256WithRSAEncryption
25:5d:29:49:05:23:fe:0a:99:9a:d6:7d:e7:d4:ac:5c:dc:34:
1b:04:b9:7e:40:54:0a:d5:92:61:b0:1b:c9:72:b6:d8:49:cc:
09:5a:64:3e:89:f5:67:4a:28:69:c8:6b:a6:d0:8e:dc:8c:7b:
d6:98:f6:81:10:13:10:ce:5f:a5:a0:2b:98:94:f7:59:82:eb:
2c:b1:5d:4a:69:11:a0:1c:b2:10:29:92:17:07:b1:ab:b4:2f:
a4:e1:f4:e0:8f:f7:e0:94:c7:72:8c:be:b7:cc:ac:41:fe:8b:
7a:23:9d:c6:e3:0b:e4:0e:ef:63:91:ce:a8:8c:ab:03:a6:0b:
77:86:ed:31:eb:11:c8:ab:63:d1:6f:8d:69:19:18:28:7f:3c:
81:e8:45:56:3f:6d:af:d9:60:42:0e:56:7e:eb:c1:f9:98:dc:
86:a2:50:90:bc:65:e5:6b:39:50:03:94:e1:67:c0:a5:11:42:
c6:04:32:fc:c3:80:d2:86:77:88:8c:a5:e6:d7:e9:ec:14:9f:
2e:bc:38:b3:61:2a:f2:52:80:03:82:8a:a1:d8:6b:d5:54:20:
f8:f5:e8:75:ce:43:0d:a9:73:91:54:33:a0:ca:89:54:96:cd:
19:11:58:62:5e:b4:ee:ea:f5:f6:52:18:10:f6:e8:56:24:3c:
e3:26:32:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:58:36 2025 by rpki-client