Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/Wbp6brJueiR1xGq9ec3___99mUk.roa
File: Wbp6brJueiR1xGq9ec3___99mUk.roa (raw, json)
Hash identifier: eKqLNSDqcvCpmCafG31bAsr7SdZPStNIafjY7kmlMdk=
Subject key identifier: 59:BA:7A:6E:B2:6E:7A:24:75:C4:6A:BD:79:CD:FF:FF:FF:7D:99:49
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 0188F9CBB3C70F27F195688F9F75CE80BC6A
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/Wbp6brJueiR1xGq9ec3___99mUk.roa
Signing time: Mon 26 Jun 2023 22:20:56 +0000
ROA not before: Mon 26 Jun 2023 22:20:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 14.102.227.0/24 maxlen: 24
14.102.228.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:f9:cb:b3:c7:0f:27:f1:95:68:8f:9f:75:ce:80:bc:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jun 26 22:20:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=59ba7a6eb26e7a2475c46abd79cdffffff7d9949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:69:c4:21:50:b1:39:c7:e9:5a:ab:b8:b9:6d:
ec:22:26:a3:1c:ee:b6:30:1a:60:62:64:b1:98:3f:
b6:a5:ba:1d:e5:e9:74:cc:e7:04:36:36:4c:74:c2:
8f:36:79:3c:71:a5:2e:a6:aa:ac:3f:23:fd:bc:4f:
43:c1:ec:5d:a2:ef:69:2b:c6:47:bc:e9:3a:80:ba:
4c:d4:8d:18:33:69:26:fa:6e:9d:82:52:1f:a0:f4:
a2:f7:e0:3e:e8:ec:0c:77:f6:57:2b:22:96:c6:75:
d8:aa:85:96:15:97:86:a4:88:6e:9e:25:4f:c0:c6:
89:70:89:9d:80:b5:2b:66:44:8f:05:92:67:b0:98:
4f:16:59:bf:d4:49:46:51:f4:0b:ec:61:e5:b4:ba:
c1:a7:bb:03:03:c3:7d:1c:10:30:cb:a9:bc:91:c4:
89:3e:a1:51:3e:fc:86:3d:ca:8a:74:c4:88:75:88:
89:09:98:35:0b:64:2a:f9:57:45:07:f6:67:66:12:
d1:9f:2c:a6:d6:de:c5:21:07:67:21:5d:1a:06:12:
93:0e:04:47:b1:0a:40:0b:fd:18:d9:e2:0b:fb:73:
ea:4b:77:ee:0e:69:76:bd:99:93:04:6d:84:89:54:
b1:dc:cd:25:46:10:b2:1d:82:4e:97:81:0b:b7:82:
fa:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:BA:7A:6E:B2:6E:7A:24:75:C4:6A:BD:79:CD:FF:FF:FF:7D:99:49
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/Wbp6brJueiR1xGq9ec3___99mUk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.227.0-14.102.231.255
Signature Algorithm: sha256WithRSAEncryption
c3:1b:dc:71:02:28:1f:da:03:4e:e4:b9:71:5d:0d:ce:f6:b9:
e6:7b:b4:e3:5d:35:8d:4b:7e:41:53:57:df:a5:98:3d:ff:1b:
32:d7:7c:7e:1d:9b:55:ef:dc:ad:ec:21:78:9d:bc:6b:a8:42:
91:18:eb:c6:4c:74:dd:6c:f1:32:bf:ee:38:d8:a4:1a:b1:4f:
64:e5:d3:d3:13:45:e1:2b:11:b8:3b:15:58:84:ba:aa:39:25:
c4:0d:fa:52:87:3e:c3:5a:7f:a0:39:7c:31:6f:fb:5c:10:1d:
b3:ed:86:1b:bb:13:04:98:22:a6:ac:90:02:cf:68:5b:a2:93:
d6:cd:4f:53:1f:11:f0:fe:28:3e:6c:bc:e6:da:93:67:fc:48:
d1:c3:9e:d8:49:ea:01:8e:f6:0b:46:29:32:28:e6:4b:d3:a2:
f3:6a:46:67:85:38:39:be:b8:84:31:97:ff:2f:14:f2:e3:a4:
44:26:09:df:9d:6b:ac:c3:88:b7:83:98:22:dc:cc:a9:65:10:
be:56:fd:52:84:c6:39:74:aa:ef:ba:37:51:a1:25:65:10:1f:
d4:56:1c:d0:24:e8:2e:a5:ba:08:30:57:07:17:a8:b8:a5:6d:
7d:96:6f:ba:3b:23:0d:8e:cf:00:5b:7a:2a:94:e5:a8:f9:a3:
66:bd:41:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:10:55 2025 by rpki-client