Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/e3fd0b-9f4a-4452-92af-be151839f366/1/wW099F9PaxDeb5wAdpThzgCP8mc.roa
File: wW099F9PaxDeb5wAdpThzgCP8mc.roa (raw, json)
Hash identifier: 5S2y6sm0djzQrqGlNZ62jcyJ956mSuPupCw6mIhHFDA=
Subject key identifier: C1:6D:3D:F4:5F:4F:6B:10:DE:6F:9C:00:76:94:E1:CE:00:8F:F2:67
Certificate issuer: /CN=077946f04742c66279acd322009be15e3d588a5a
Certificate serial: 0185710C0CE216E165FD4DEF69B692ED7DED
Authority key identifier: 07:79:46:F0:47:42:C6:62:79:AC:D3:22:00:9B:E1:5E:3D:58:8A:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/e3fd0b-9f4a-4452-92af-be151839f366/1/wW099F9PaxDeb5wAdpThzgCP8mc.roa
Signing time: Mon 02 Jan 2023 05:54:53 +0000
ROA not before: Mon 02 Jan 2023 05:54:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24806
IP address blocks: 85.255.0.0/20 maxlen: 32
185.186.20.0/22 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:0c:0c:e2:16:e1:65:fd:4d:ef:69:b6:92:ed:7d:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=077946f04742c66279acd322009be15e3d588a5a
Validity
Not Before: Jan 2 05:54:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c16d3df45f4f6b10de6f9c007694e1ce008ff267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fc:f5:30:c6:e9:0f:8d:74:43:83:1b:2a:1a:
5d:4a:60:1f:6b:c2:0e:75:c8:d8:98:42:f1:f7:e3:
39:8b:2c:63:2b:3b:47:8d:05:11:e9:cd:84:fe:15:
e6:2e:e4:96:37:60:ef:a0:86:08:4d:1a:fe:5a:d6:
fb:1c:b3:6c:3b:bc:9e:51:58:a9:24:f9:b5:c9:22:
3e:af:6d:ea:3e:ac:4c:e0:e6:c0:10:16:38:60:a2:
b8:17:c4:d2:d0:a2:a3:62:b8:4e:1a:67:aa:b1:bc:
38:82:49:a9:e7:da:24:fb:b7:11:49:a9:f6:3d:58:
89:f0:97:64:78:c7:e1:6e:44:cd:89:47:68:4d:0f:
66:97:f5:e6:6c:90:53:ee:89:16:56:59:30:38:63:
50:68:37:45:90:d7:2a:7a:74:5d:33:09:ac:90:ff:
f3:de:e6:71:45:c9:7d:b4:d3:b1:10:8b:26:d4:2c:
e1:fc:0f:26:73:a4:3e:26:52:7d:0b:36:39:da:a8:
b2:cc:b9:90:2e:28:d3:70:30:12:4a:89:6a:93:03:
f5:99:79:24:43:aa:75:a8:62:34:70:3f:a7:2a:69:
0a:3d:9b:fd:47:38:21:67:1e:97:29:72:5f:c9:bd:
1b:5c:37:c7:ef:e6:43:38:71:54:da:12:0d:ee:77:
f8:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:6D:3D:F4:5F:4F:6B:10:DE:6F:9C:00:76:94:E1:CE:00:8F:F2:67
X509v3 Authority Key Identifier:
keyid:07:79:46:F0:47:42:C6:62:79:AC:D3:22:00:9B:E1:5E:3D:58:8A:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/e3fd0b-9f4a-4452-92af-be151839f366/1/wW099F9PaxDeb5wAdpThzgCP8mc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/e3fd0b-9f4a-4452-92af-be151839f366/1/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.255.0.0/20
185.186.20.0/22
Signature Algorithm: sha256WithRSAEncryption
9c:f3:26:6a:c2:11:bd:50:16:be:2a:1f:4a:68:7d:d0:95:aa:
23:0e:8c:3c:40:17:0f:3d:49:33:a4:f8:d4:06:fa:03:c7:60:
4a:b1:a2:97:86:01:3d:13:84:ac:d3:73:c8:46:fa:f4:f0:36:
a6:d9:9c:99:42:a3:97:9c:6d:95:e1:b2:3b:26:c5:06:6a:4b:
79:c1:fd:1e:74:2b:fe:82:87:77:24:59:8a:fe:ee:fd:9a:2a:
34:4c:03:c8:21:c2:57:0f:ec:3f:ac:96:a9:67:bc:a5:c7:4d:
1f:4b:58:70:fe:5e:ec:b0:14:60:a5:be:ca:f1:ae:4f:4b:40:
90:17:6b:83:d0:3f:72:c4:3f:8d:be:95:e3:2e:27:c1:12:58:
2b:5b:6a:88:70:7b:e3:62:e4:db:56:64:82:02:fe:0b:7c:68:
18:45:f6:ee:b0:55:34:09:e0:2f:ea:d8:8c:4f:ce:85:02:4c:
00:c7:e1:4c:80:5e:e8:92:91:87:e4:9d:b1:ec:bf:9e:e2:7d:
84:70:93:ba:f0:ce:f9:26:4a:44:ae:c0:27:9c:ac:e8:e8:e3:
4d:13:b0:0b:1f:b2:e8:aa:59:92:01:44:ad:cd:b4:d2:83:00:
78:3e:f3:3d:53:34:55:f6:f4:a4:24:97:cf:a8:c6:ca:51:7e:
6c:44:e0:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 00:19:11 2025 by rpki-client