Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/WP7a_OnQaR_FIC1CNGe2akfXNZM.roa
File: WP7a_OnQaR_FIC1CNGe2akfXNZM.roa (raw, json)
Hash identifier: LGuo3u1sACo3KM2Oxcbgm2UAOJyy7MInEbxuhn+PSYg=
Subject key identifier: 58:FE:DA:FC:E9:D0:69:1F:C5:20:2D:42:34:67:B6:6A:47:D7:35:93
Certificate issuer: /CN=5e1bf6a319da2489816aedba1b4fd0cc7ddf3e1e
Certificate serial: 01892A004FAA6C664F38B354712CACC88EA5
Authority key identifier: 5E:1B:F6:A3:19:DA:24:89:81:6A:ED:BA:1B:4F:D0:CC:7D:DF:3E:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xhv2oxnaJImBau26G0_QzH3fPh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/WP7a_OnQaR_FIC1CNGe2akfXNZM.roa
Signing time: Thu 06 Jul 2023 07:00:10 +0000
ROA not before: Thu 06 Jul 2023 07:00:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39386
IP address blocks: 84.235.56.0/23 maxlen: 23
178.86.50.0/24 maxlen: 24
84.235.0.0/17 maxlen: 17
84.235.0.0/24 maxlen: 24
84.235.14.0/24 maxlen: 24
37.224.192.0/24 maxlen: 24
84.235.95.0/24 maxlen: 24
84.235.110.0/24 maxlen: 24
84.235.108.0/24 maxlen: 24
84.235.111.0/24 maxlen: 24
84.235.109.0/24 maxlen: 24
84.235.120.0/22 maxlen: 22
193.19.244.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:2a:00:4f:aa:6c:66:4f:38:b3:54:71:2c:ac:c8:8e:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e1bf6a319da2489816aedba1b4fd0cc7ddf3e1e
Validity
Not Before: Jul 6 07:00:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=58fedafce9d0691fc5202d423467b66a47d73593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:7f:4f:49:fb:8c:91:1e:1b:13:ce:b3:32:08:
21:91:89:90:98:8e:57:29:1c:55:d0:8e:2c:96:ad:
77:1e:fa:b5:f9:17:95:9a:aa:e3:7d:4f:ac:52:2d:
c0:77:b9:63:5e:ab:f6:50:66:98:11:c0:44:fd:08:
e4:bc:7d:0c:e4:62:2c:37:04:74:6f:d2:ed:d3:48:
af:1d:75:f9:d4:78:1a:a5:fd:e2:7f:43:ec:8e:55:
04:15:41:0d:55:62:81:7e:15:00:8d:b9:b9:bf:36:
be:05:ac:4f:f0:23:56:a2:61:32:4b:4d:1d:f8:b2:
ea:32:bb:70:d7:f9:ee:9d:c4:cf:28:26:c9:d8:6a:
93:3e:6e:2c:24:2c:0d:73:7a:7d:7d:73:dd:6d:be:
66:49:f0:26:f0:4d:8c:c5:5f:c9:62:b1:b4:f4:ce:
89:41:19:d3:59:b9:26:f1:42:27:15:aa:3e:48:f1:
df:ef:c8:75:57:c0:9f:e8:79:16:40:1a:2a:52:62:
78:d2:a1:9b:44:28:5a:ca:b6:e4:fe:b6:a1:a3:e1:
d2:54:1e:f0:29:2e:6d:f2:f1:cc:65:f2:33:d5:82:
45:1c:d6:fb:76:13:8c:60:84:21:1b:9d:ee:a0:31:
62:ad:0a:8e:12:6c:d7:07:4f:99:8c:f9:a6:ea:23:
5d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:FE:DA:FC:E9:D0:69:1F:C5:20:2D:42:34:67:B6:6A:47:D7:35:93
X509v3 Authority Key Identifier:
keyid:5E:1B:F6:A3:19:DA:24:89:81:6A:ED:BA:1B:4F:D0:CC:7D:DF:3E:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xhv2oxnaJImBau26G0_QzH3fPh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/WP7a_OnQaR_FIC1CNGe2akfXNZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.224.192.0/24
84.235.0.0/17
178.86.50.0/24
193.19.244.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:ee:98:39:86:04:8f:57:f4:57:38:f8:d2:4d:89:ce:ce:4a:
d9:bc:82:5e:13:ab:f6:8b:67:8a:8d:73:30:75:7a:a5:8b:60:
2c:9e:53:ec:ee:78:54:5d:8e:db:bc:3b:b1:72:4e:21:6c:61:
9d:4c:51:91:03:6c:a6:47:03:ef:65:ff:35:33:82:f9:1c:0b:
76:10:37:e8:3d:25:9c:bd:f1:57:cf:30:46:88:a3:76:18:73:
06:1e:0d:18:75:f7:5d:79:51:2c:55:c0:6b:f2:a3:97:53:85:
3a:02:1b:4c:0c:b9:d0:0a:49:09:9a:79:63:2c:cc:10:82:43:
99:de:78:5d:ca:d1:75:44:b8:08:6d:9f:d0:26:3a:d7:b0:8f:
20:4e:28:de:7c:12:cf:65:6e:99:2f:db:64:81:ea:48:32:88:
b1:f7:a8:ce:13:ee:7b:4b:1b:a7:6b:f0:6d:55:4f:37:9e:a9:
06:50:d5:45:7b:c2:a6:f5:24:70:78:8e:42:24:26:ce:91:f8:
cb:95:f2:d7:47:ba:11:10:6e:ab:b0:4f:0a:a9:85:75:31:2d:
c0:b0:e4:f1:ac:b5:79:b1:d3:eb:07:f4:68:af:b0:16:c5:c3:
b9:40:83:6f:d2:cd:8d:45:bb:65:fb:30:e8:16:f0:2e:0d:46:
38:ec:2e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:25:43 2025 by rpki-client