Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/WvCo6ENALCfVoo6tkRFnODkd5mI.roa
File: WvCo6ENALCfVoo6tkRFnODkd5mI.roa (raw, json)
Hash identifier: He/6s6QEu9n27cKCqEfil/TIuFrWeutF2TxTVkkeRRQ=
Subject key identifier: 5A:F0:A8:E8:43:40:2C:27:D5:A2:8E:AD:91:11:67:38:39:1D:E6:62
Certificate issuer: /CN=ff8208b129c53e87c3f0d0ed1bca85730140f390
Certificate serial: 018C5949ECF5D91469522949F8C7337D74C1
Authority key identifier: FF:82:08:B1:29:C5:3E:87:C3:F0:D0:ED:1B:CA:85:73:01:40:F3:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IIsSnFPofD8NDtG8qFcwFA85A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/WvCo6ENALCfVoo6tkRFnODkd5mI.roa
Signing time: Mon 11 Dec 2023 14:31:06 +0000
ROA not before: Mon 11 Dec 2023 14:31:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211309
IP address blocks: 46.227.152.0/21 maxlen: 21
185.190.36.0/24 maxlen: 24
185.176.245.0/24 maxlen: 24
2a0a:2780::/31 maxlen: 31
2a0a:2781::/32 maxlen: 32
2a0a:2780::/32 maxlen: 32
2a10:d640::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:59:49:ec:f5:d9:14:69:52:29:49:f8:c7:33:7d:74:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff8208b129c53e87c3f0d0ed1bca85730140f390
Validity
Not Before: Dec 11 14:31:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5af0a8e843402c27d5a28ead91116738391de662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d2:e8:c2:ad:84:cf:4f:bb:33:1f:64:4b:4c:
b9:56:15:2d:d2:e1:8d:98:5b:64:fe:82:96:39:c5:
ab:52:98:85:a7:b2:09:34:29:31:aa:e1:52:db:a8:
53:83:3b:b3:7d:b2:66:dd:1d:b5:9f:ad:05:f6:83:
51:b7:d1:b8:29:cd:05:69:cc:8f:9c:69:e9:21:d5:
4d:cb:82:e2:e1:83:6c:b9:8a:52:ae:84:b4:71:98:
7d:3b:f6:69:9b:3a:e7:af:31:5f:09:60:3a:55:9a:
5e:b2:e1:aa:fe:8a:7a:69:93:52:1c:2b:f2:13:05:
38:ca:1b:f9:19:c8:24:b6:29:ab:3e:86:8c:26:6f:
bc:e9:e8:e9:0b:85:26:ed:aa:29:ac:01:58:5d:6e:
66:5f:8c:ce:f0:cf:90:9f:da:29:6d:9f:2f:20:71:
c5:39:80:0c:b0:ea:76:37:8c:b1:7d:77:3c:e9:32:
e2:ad:f8:4c:53:36:db:1a:5b:71:d2:ac:99:18:bc:
00:7d:f5:4c:91:51:84:fc:a0:b2:b3:c0:be:76:c4:
f9:a2:e2:6b:b0:f4:cf:5b:7e:93:eb:d6:2d:ac:62:
7e:80:10:c7:d4:95:1a:bb:0e:95:22:1a:1e:38:03:
5a:ca:7f:01:d9:0b:8c:ed:ed:c3:6f:26:8a:3b:45:
dd:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:F0:A8:E8:43:40:2C:27:D5:A2:8E:AD:91:11:67:38:39:1D:E6:62
X509v3 Authority Key Identifier:
keyid:FF:82:08:B1:29:C5:3E:87:C3:F0:D0:ED:1B:CA:85:73:01:40:F3:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IIsSnFPofD8NDtG8qFcwFA85A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/WvCo6ENALCfVoo6tkRFnODkd5mI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.227.152.0/21
185.176.245.0/24
185.190.36.0/24
IPv6:
2a0a:2780::/31
2a10:d640::/29
Signature Algorithm: sha256WithRSAEncryption
5f:b4:9b:a4:40:1b:97:19:e5:6a:63:3f:ac:67:b3:49:e3:c8:
f5:36:bd:78:7f:72:38:cc:a9:e0:41:7f:10:b5:3b:29:af:4c:
11:ea:57:30:12:3f:d5:4b:b1:81:0e:43:74:d6:b0:22:4e:34:
0c:9d:3f:00:c9:55:74:a8:f5:6a:07:18:a0:f3:44:92:e4:3f:
88:dd:fc:e6:bb:a7:94:0b:c2:04:6f:c1:5a:c2:c6:e5:0b:47:
ae:f7:38:94:83:42:66:e2:0c:2d:73:fa:86:d0:65:f0:1a:6c:
d2:dc:58:26:a6:86:30:f5:81:98:f1:a6:e0:dc:ae:7c:16:f0:
25:37:7d:40:a8:21:06:16:80:51:69:fe:40:d0:98:0c:8b:a7:
7b:74:30:ee:a8:69:f3:a1:78:0b:ac:90:ea:38:1c:e6:98:2b:
10:c6:60:f3:bc:09:25:5b:4c:fb:0b:12:af:ba:df:a6:09:25:
8c:62:70:0f:78:d7:75:98:89:d2:bf:f4:d1:ff:3f:94:ad:06:
33:60:de:43:11:27:af:e1:4c:74:72:b0:08:55:6a:52:d8:2f:
50:af:cb:b4:e3:bc:38:1a:88:44:e0:3b:85:01:ad:83:f6:92:
45:77:24:73:46:a1:75:24:7a:c7:9e:9c:a5:b3:97:31:05:63:
7b:1c:b8:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:17:01 2025 by rpki-client