Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/Wv9541jm-4Tyrbi__12bfocy8Ek.roa
File: Wv9541jm-4Tyrbi__12bfocy8Ek.roa (raw, json)
Hash identifier: iLH4+P635d7GRK9MtTR1Hb6ZXtjemUExilMNVenTcNs=
Subject key identifier: 5A:FF:79:E3:58:E6:FB:84:F2:AD:B8:BF:FF:5D:9B:7E:87:32:F0:49
Certificate issuer: /CN=607e5caff4f47b2b8dc81cc36c8e346662639898
Certificate serial: 0334F085
Authority key identifier: 60:7E:5C:AF:F4:F4:7B:2B:8D:C8:1C:C3:6C:8E:34:66:62:63:98:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YH5cr_T0eyuNyBzDbI40ZmJjmJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/Wv9541jm-4Tyrbi__12bfocy8Ek.roa
Signing time: Sat 01 Jan 2022 11:00:25 +0000
ROA not before: Sat 01 Jan 2022 11:00:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208821
IP address blocks: 185.189.53.0/24 maxlen: 24
185.189.54.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53801093 (0x334f085)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=607e5caff4f47b2b8dc81cc36c8e346662639898
Validity
Not Before: Jan 1 11:00:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5aff79e358e6fb84f2adb8bfff5d9b7e8732f049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3b:47:e1:98:ef:ef:be:07:7a:be:91:79:3c:
e4:75:d7:04:01:01:21:f0:10:46:ee:f7:9d:ce:5f:
39:1a:cd:1e:86:3f:68:00:86:02:78:b9:07:e5:56:
e1:2f:ce:1f:be:aa:24:18:d2:2a:60:59:1d:27:b2:
53:fe:78:41:c9:46:60:fe:2d:e4:40:a0:e4:8d:83:
7f:0d:5f:40:63:5c:a0:3b:e5:aa:c1:c1:78:f3:68:
3c:38:5e:19:20:64:e3:c7:c2:ec:16:f0:99:c0:04:
7e:30:7d:55:ef:06:b6:14:46:e4:22:e8:f0:c9:d8:
6e:d8:68:78:a2:94:59:1c:25:24:d7:c9:25:e5:01:
95:62:b2:84:33:f0:dd:c3:c2:49:e1:c7:b2:87:16:
b5:08:58:f6:d8:d8:87:14:17:09:59:fb:46:18:29:
ef:23:f6:07:a2:c2:92:4e:a7:44:9f:bd:4d:32:3d:
b9:d6:09:69:9b:d7:df:6b:91:ab:85:68:18:8a:4f:
de:0f:cf:48:eb:59:de:c1:80:14:7c:32:28:b4:0a:
eb:28:f8:75:60:ce:9e:22:ee:6c:c6:9f:7f:34:0d:
82:10:cc:ff:b2:68:44:93:2a:1a:c2:8c:68:8c:f1:
04:de:b4:ec:ff:c5:de:d8:ae:28:f5:71:88:27:8c:
23:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:FF:79:E3:58:E6:FB:84:F2:AD:B8:BF:FF:5D:9B:7E:87:32:F0:49
X509v3 Authority Key Identifier:
keyid:60:7E:5C:AF:F4:F4:7B:2B:8D:C8:1C:C3:6C:8E:34:66:62:63:98:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YH5cr_T0eyuNyBzDbI40ZmJjmJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/Wv9541jm-4Tyrbi__12bfocy8Ek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.189.53.0-185.189.54.255
Signature Algorithm: sha256WithRSAEncryption
22:e4:f1:9f:8b:96:d4:ad:90:00:50:da:a1:38:e8:bb:38:a7:
3e:43:bd:07:a8:89:83:63:f2:6e:09:d7:01:74:37:81:69:89:
f3:0e:40:eb:d3:d8:58:39:ed:bf:e9:8e:40:81:a5:d5:a2:2e:
04:67:be:7b:36:f9:81:38:5a:bf:f6:39:bf:59:e8:9a:2c:e5:
3e:d9:11:4b:ea:19:9d:18:6e:d4:ea:e6:09:ab:10:d6:11:f0:
88:94:12:80:84:af:01:58:a1:d7:1c:ea:b0:54:ab:a9:35:31:
00:70:20:40:a2:62:4d:90:6f:8f:99:24:51:38:2f:d6:91:b5:
76:07:0b:e4:41:b3:31:2c:5c:bf:8a:cb:85:ba:61:9f:f8:9d:
6e:34:86:75:b6:f5:79:8f:41:19:1f:19:14:c3:39:20:9b:02:
d9:d3:e8:27:56:59:03:b7:c6:06:e1:0f:a3:b3:47:34:f0:19:
f1:96:af:a7:52:be:dc:c4:15:4a:9e:70:5e:17:58:dd:80:29:
a1:f2:d0:7b:25:04:40:ff:0c:ae:c5:d1:f6:30:fb:92:73:fd:
9a:89:8c:24:9e:fe:87:b6:80:aa:02:74:36:97:a9:18:d2:20:
a2:09:1a:fe:97:88:4b:cf:3a:64:df:f8:5b:4f:9d:61:da:83:
69:a3:62:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:16:03 2025 by rpki-client