Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/wnIsJBLzeXCvEB0XYzxS_O-b8zY.roa
File: wnIsJBLzeXCvEB0XYzxS_O-b8zY.roa (raw, json)
Hash identifier: 5kF9FeP1QtyzmctZdznJuHk0YlDXqhMk32jjYddwDqU=
Subject key identifier: C2:72:2C:24:12:F3:79:70:AF:10:1D:17:63:3C:52:FC:EF:9B:F3:36
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 0185DF8F702B53FC9DE37979E36A5ABA6C70
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/wnIsJBLzeXCvEB0XYzxS_O-b8zY.roa
Signing time: Mon 23 Jan 2023 16:56:37 +0000
ROA not before: Mon 23 Jan 2023 16:56:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398343
IP address blocks: 164.215.103.0/24 maxlen: 24
5.10.240.0/22 maxlen: 22
5.10.252.0/22 maxlen: 22
88.151.192.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:df:8f:70:2b:53:fc:9d:e3:79:79:e3:6a:5a:ba:6c:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Jan 23 16:56:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c2722c2412f37970af101d17633c52fcef9bf336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:05:3a:f5:2f:ec:7b:b0:3d:49:c6:58:be:97:
9f:49:a7:d0:ba:3b:01:46:c4:c7:61:0d:bf:e8:98:
81:dd:9d:bf:d1:1a:09:86:33:18:f9:22:1a:9f:d7:
47:d2:d9:0b:8d:c4:62:53:b1:5d:37:ef:9f:35:cd:
da:66:99:2c:22:e0:b5:3b:c8:f1:fe:2c:51:11:20:
5d:81:18:05:c5:01:f6:6a:d6:29:23:24:ff:78:41:
1f:e5:aa:1a:4e:e1:08:0f:5b:f5:43:fd:d4:90:24:
e1:b3:04:ec:e2:c4:9c:a7:63:94:69:bf:bf:0e:d3:
6a:19:17:33:be:43:e5:2a:06:f3:c1:29:4b:fd:31:
57:fa:da:fd:05:86:9d:2a:85:b8:e7:7d:53:b0:ab:
44:ed:ce:ae:3d:46:48:8a:90:a9:f8:f4:16:f5:a9:
c3:a9:de:11:03:0d:f5:36:5f:5b:03:56:63:69:71:
21:82:17:14:33:1f:48:83:7f:74:b5:27:7b:85:b8:
ef:6f:64:b6:f1:6c:7d:a6:04:0e:3b:56:4f:0e:da:
d0:d1:16:46:71:b1:e3:88:41:8e:65:08:01:63:54:
04:d1:88:2a:a5:8a:25:fb:2e:ad:2c:b5:04:93:65:
92:2c:5a:ec:ee:22:5d:33:b0:9a:d3:6a:14:3d:25:
49:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:72:2C:24:12:F3:79:70:AF:10:1D:17:63:3C:52:FC:EF:9B:F3:36
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/wnIsJBLzeXCvEB0XYzxS_O-b8zY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.240.0/22
5.10.252.0/22
88.151.192.0/24
164.215.103.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:b9:b9:63:34:95:bd:c0:ff:62:5c:38:5b:7d:5c:d0:18:b6:
04:0d:23:da:36:cb:a0:47:79:06:59:a7:40:d3:d2:35:df:e2:
3a:dd:df:3b:87:13:30:19:47:55:3d:0c:4e:3d:23:94:76:b4:
80:97:f1:50:d8:19:aa:66:df:82:17:4b:64:16:68:51:5a:26:
f1:c9:d3:00:15:e6:f0:46:1c:c8:9b:b1:89:20:11:1c:48:4c:
5a:b5:41:cf:c0:66:6e:14:2e:ef:f7:98:35:c4:83:a5:64:0f:
8a:e5:c5:47:d4:a5:62:f8:c0:5b:2f:9c:7a:24:ea:e6:0e:99:
7a:55:b3:1f:b7:1e:d0:97:bc:3d:a8:87:9d:57:0d:aa:18:d7:
52:09:07:15:21:c4:e6:a4:81:4a:76:de:ad:7d:41:08:e8:c5:
23:18:cf:4d:91:5b:c8:c2:5b:6c:98:5b:af:b3:02:74:17:15:
bd:0f:25:08:47:6e:4f:1d:f2:0a:9e:f1:32:61:48:b4:50:1d:
b9:ac:7f:d0:47:9f:c4:81:4d:35:1f:5f:a2:0b:17:41:c1:fa:
0d:07:64:54:b0:a5:1e:75:ad:30:e2:86:0a:c1:fd:a9:18:98:
c4:7a:a8:3c:d9:cc:30:ed:04:1c:a5:46:33:92:d7:8c:07:86:
ab:9b:83:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:45:03 2025 by rpki-client