Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/WQko-DaL6QHupV-rA4TczQPaZEs.roa
File: WQko-DaL6QHupV-rA4TczQPaZEs.roa (raw, json)
Hash identifier: R8JKLmhBCLVnRPVRmWIxCBpa8DGfZIIHVNOCauegyG0=
Subject key identifier: 59:09:28:F8:36:8B:E9:01:EE:A5:5F:AB:03:84:DC:CD:03:DA:64:4B
Certificate issuer: /CN=8f987fa86faeced8ca7a4462af7f005eab2779a8
Certificate serial: C1AF
Authority key identifier: 8F:98:7F:A8:6F:AE:CE:D8:CA:7A:44:62:AF:7F:00:5E:AB:27:79:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j5h_qG-uztjKekRir38AXqsneag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/WQko-DaL6QHupV-rA4TczQPaZEs.roa
Signing time: Thu 28 Apr 2022 12:40:00 +0000
ROA not before: Thu 28 Apr 2022 12:40:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3303
IP address blocks: 193.223.102.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49583 (0xc1af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f987fa86faeced8ca7a4462af7f005eab2779a8
Validity
Not Before: Apr 28 12:40:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=590928f8368be901eea55fab0384dccd03da644b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:09:2f:b8:d8:9a:e3:c9:b9:88:ea:15:ed:9c:
c0:7e:5c:e8:35:c5:cb:75:72:8b:12:6e:ae:1b:0a:
ed:db:1a:6d:2a:19:e4:15:82:44:34:58:bb:97:67:
d8:3b:14:20:4a:82:6e:8d:f6:c7:05:27:20:28:64:
91:fc:ea:95:9d:14:84:b4:29:d6:0a:d8:93:5c:64:
4c:28:36:90:4d:6a:d6:52:9c:e7:a5:8e:38:1e:45:
c7:a3:17:55:16:53:67:2b:50:94:2b:03:f9:a1:a2:
1f:09:84:e8:90:ad:d6:1d:22:7c:fa:15:7c:1b:6f:
01:5e:f5:8d:3a:c0:7f:20:6a:f4:ca:ca:c4:a2:6f:
47:96:70:35:10:6e:31:f1:51:35:df:51:19:5a:9c:
35:2b:d2:a7:c4:71:43:92:85:01:d5:e0:d8:d7:2e:
50:35:40:57:5e:1d:b0:6a:38:b1:98:cc:2c:bc:27:
9c:aa:59:8a:61:de:84:62:4a:d8:82:e2:d0:81:6b:
24:b1:c7:fa:b3:31:7b:06:01:27:69:69:a9:68:89:
98:95:1e:ac:37:6a:5b:d1:d1:78:91:a8:01:34:ee:
2f:b4:94:1f:9f:e0:75:14:1d:15:88:6c:88:d1:c0:
dc:e3:62:4f:6c:fb:f2:bb:e4:50:5c:cb:99:b7:2d:
df:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:09:28:F8:36:8B:E9:01:EE:A5:5F:AB:03:84:DC:CD:03:DA:64:4B
X509v3 Authority Key Identifier:
keyid:8F:98:7F:A8:6F:AE:CE:D8:CA:7A:44:62:AF:7F:00:5E:AB:27:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5h_qG-uztjKekRir38AXqsneag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/WQko-DaL6QHupV-rA4TczQPaZEs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.223.102.0/24
Signature Algorithm: sha256WithRSAEncryption
77:89:e4:48:b8:d4:39:ce:f4:4c:d0:29:85:81:01:2e:75:e7:
a6:d2:b5:95:83:cf:b7:76:e5:82:fd:76:96:f3:25:19:2f:c5:
c1:b3:4d:f0:1c:94:e4:f3:a8:19:1b:a9:d0:38:76:62:39:4f:
64:98:bc:56:93:60:e1:d1:59:1b:af:8c:04:ec:ee:93:f5:05:
24:57:2c:47:91:c5:1a:50:f2:19:dd:68:9d:8b:c8:15:ea:d0:
92:91:85:5b:d7:cd:88:56:4c:af:d7:a9:77:7c:2a:02:8e:45:
da:9b:92:97:8e:34:08:73:0b:07:63:c9:74:08:47:fc:d9:fd:
cc:6f:a5:9a:e2:18:36:2e:d1:c9:54:a5:4f:6b:b6:dc:1b:32:
92:90:42:73:e8:66:fb:f0:6c:7c:d7:63:56:81:eb:bb:b1:d4:
bf:c3:80:3c:ca:31:a7:3a:af:e4:06:00:69:c4:13:17:c1:1e:
3e:2f:0b:65:33:12:e8:b6:06:29:1b:a9:03:51:eb:0d:a4:e6:
17:4b:42:64:00:09:87:7a:bc:d6:d4:57:fb:a0:f6:b6:0f:8d:
ab:13:3f:a0:77:63:5a:4d:31:2b:8d:02:98:61:d2:22:b9:b6:
e4:83:94:ae:58:97:90:90:2f:d9:5d:88:d0:72:39:bd:24:cd:
7d:d9:86:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:37:07 2025 by rpki-client