Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/WGpjQkK9X2lsQTTbInf2ASajFaA.roa
File: WGpjQkK9X2lsQTTbInf2ASajFaA.roa (raw, json)
Hash identifier: O4wpsaABwxy7RxSYzXxJjJ7ML9FSB2SqVbOTI0jyxFg=
Subject key identifier: 58:6A:63:42:42:BD:5F:69:6C:41:34:DB:22:77:F6:01:26:A3:15:A0
Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial: 0186EF4CB8EBCDF27011C0BC7DB7B02F00BE
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/WGpjQkK9X2lsQTTbInf2ASajFaA.roa
Signing time: Fri 17 Mar 2023 11:20:27 +0000
ROA not before: Fri 17 Mar 2023 11:20:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 2a09:ff00:8800::/37 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ef:4c:b8:eb:cd:f2:70:11:c0:bc:7d:b7:b0:2f:00:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Validity
Not Before: Mar 17 11:20:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=586a634242bd5f696c4134db2277f60126a315a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:e0:97:30:9a:92:ec:de:84:bd:85:3f:15:27:
fc:cf:16:13:de:c0:39:10:fe:7d:7c:f6:64:f5:5c:
cf:78:23:5e:f5:47:71:5e:30:27:79:d2:20:2f:3e:
36:18:36:16:45:1c:aa:0a:4a:37:ad:cb:72:a8:be:
ac:1d:93:1c:b1:2f:19:93:dc:d2:37:83:e9:d6:4c:
1d:7a:d1:9b:91:52:76:29:b2:43:f6:8c:df:6c:62:
23:c8:16:02:90:b4:af:dd:31:c1:c4:ea:dd:f9:96:
a7:c1:ca:4a:6d:97:4d:dd:a6:43:47:7f:9f:0a:64:
2c:1f:98:41:35:60:a4:a7:7b:a4:93:3b:f9:0d:ab:
84:02:73:35:84:28:31:aa:76:86:f3:fb:46:69:49:
34:c6:93:83:4e:a0:26:93:83:c6:de:ba:01:b4:0b:
6c:ee:bc:03:1f:1e:96:99:1a:a6:17:25:cc:ae:5c:
70:57:dd:eb:c3:6a:c6:49:07:48:f7:8d:cb:fa:dc:
47:e2:2a:c4:f5:7f:aa:4d:8f:85:67:de:41:cd:b5:
c6:c0:04:52:af:91:28:72:8f:3a:50:34:ce:5f:f3:
e8:4e:4c:98:4f:aa:9f:c8:d9:0b:8a:68:0f:65:06:
fc:51:9b:d9:3f:74:53:71:ba:0d:cd:f7:18:73:2a:
2a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:6A:63:42:42:BD:5F:69:6C:41:34:DB:22:77:F6:01:26:A3:15:A0
X509v3 Authority Key Identifier:
keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/WGpjQkK9X2lsQTTbInf2ASajFaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:ff00:8800::/37
Signature Algorithm: sha256WithRSAEncryption
7e:1d:9e:f3:ea:09:b7:5b:7c:ba:15:9d:c5:cf:92:21:0f:cb:
95:89:b3:b2:2f:63:8f:29:00:c2:87:05:51:21:c7:03:0d:4e:
20:27:30:c1:ba:21:06:e9:00:bd:cb:77:0f:38:22:a5:8c:22:
0b:e1:75:9b:dd:ea:f5:17:81:ef:76:73:1e:67:f1:af:34:7c:
fb:b4:a7:9c:fe:31:9d:96:a2:62:40:aa:1e:f3:04:1f:b8:e3:
7e:c6:37:6e:e3:1b:86:0f:a2:76:9e:52:d8:8a:63:68:d1:73:
99:5f:76:f2:97:09:0c:d8:b1:d1:45:25:b7:6e:33:1d:4a:50:
29:01:4a:e5:77:17:7d:7c:02:f9:4e:1d:93:ae:38:c3:2f:3a:
ad:9e:21:20:ea:37:64:ca:e3:c1:f7:2f:83:00:ec:64:69:92:
b5:90:56:df:39:f6:e7:67:4e:79:54:fb:86:0d:49:c3:74:c5:
e7:2e:82:df:af:15:39:3f:54:47:bf:90:07:dc:77:db:ae:31:
91:44:d8:33:83:cd:2b:ac:54:91:9c:af:10:c0:b9:a9:1e:80:
04:93:fb:d2:cd:2a:f3:96:e1:53:69:83:46:b4:d3:d0:b1:9b:
c7:78:d6:40:48:b0:cd:1e:60:9b:94:c8:b4:06:98:ab:fa:53:
4e:4a:10:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:40:18 2025 by rpki-client