Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/75a6cb-5866-44a2-8bb0-a31ab64cfccb/1/WI33YY5s77ORsaLjDTrh-wiuyAk.roa
File: WI33YY5s77ORsaLjDTrh-wiuyAk.roa (raw, json)
Hash identifier: mZHYUH19n0KjzRhYZHyPqE8ExscUT7cr9hXzVi7BcNU=
Subject key identifier: 58:8D:F7:61:8E:6C:EF:B3:91:B1:A2:E3:0D:3A:E1:FB:08:AE:C8:09
Certificate issuer: /CN=1597b9d73480ca22cbf31faaf0bccbed30b2095e
Certificate serial: 018BAE0495B8AEA1B9BF817DF3A4BFB5AE64
Authority key identifier: 15:97:B9:D7:34:80:CA:22:CB:F3:1F:AA:F0:BC:CB:ED:30:B2:09:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZe51zSAyiLL8x-q8LzL7TCyCV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/75a6cb-5866-44a2-8bb0-a31ab64cfccb/1/WI33YY5s77ORsaLjDTrh-wiuyAk.roa
Signing time: Wed 08 Nov 2023 08:20:17 +0000
ROA not before: Wed 08 Nov 2023 08:20:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35625
IP address blocks: 31.172.172.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ae:04:95:b8:ae:a1:b9:bf:81:7d:f3:a4:bf:b5:ae:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1597b9d73480ca22cbf31faaf0bccbed30b2095e
Validity
Not Before: Nov 8 08:20:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=588df7618e6cefb391b1a2e30d3ae1fb08aec809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7c:be:2f:96:40:5c:a1:23:5c:d7:9e:58:76:
a2:22:cd:c2:bb:e7:34:6b:d9:c3:f8:9e:98:ab:38:
0f:37:b5:bd:75:99:b1:ab:c2:dd:cb:e5:89:cb:f2:
be:0d:78:80:bf:b4:85:b8:db:b6:14:df:72:e6:ee:
4e:e0:c7:b4:cd:47:55:67:41:fe:bc:a5:cd:ca:cc:
6c:76:04:15:b2:e9:ff:aa:6b:01:1a:0e:c7:af:6a:
82:92:b7:71:a8:fa:47:e5:7d:eb:7e:ea:e1:0c:2f:
e1:d7:5d:5e:3a:f5:da:e2:ad:1f:a4:16:d2:a2:cd:
ae:39:d6:57:81:c4:a5:67:4c:97:1d:e9:2a:f8:51:
f3:a6:ad:99:45:3b:10:3c:4e:59:b0:96:6f:58:4b:
4a:81:d0:15:50:a7:12:8f:79:b8:95:b4:b4:da:f2:
8d:74:0a:10:8a:50:f2:56:36:f7:50:e3:17:53:26:
72:4a:5a:9d:e7:54:3e:0c:ef:22:65:bb:0a:a2:b3:
2e:c4:72:04:bc:2b:f1:f2:36:d2:d5:11:ad:8c:e9:
6e:06:5c:13:ac:ac:57:e1:11:fd:67:e1:43:47:d1:
60:39:67:c0:4e:4e:fa:a7:0a:0f:17:23:eb:d6:fe:
7d:56:62:7c:5f:02:33:74:a0:08:f7:a2:0b:ac:b3:
55:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:8D:F7:61:8E:6C:EF:B3:91:B1:A2:E3:0D:3A:E1:FB:08:AE:C8:09
X509v3 Authority Key Identifier:
keyid:15:97:B9:D7:34:80:CA:22:CB:F3:1F:AA:F0:BC:CB:ED:30:B2:09:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZe51zSAyiLL8x-q8LzL7TCyCV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/75a6cb-5866-44a2-8bb0-a31ab64cfccb/1/WI33YY5s77ORsaLjDTrh-wiuyAk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/75a6cb-5866-44a2-8bb0-a31ab64cfccb/1/FZe51zSAyiLL8x-q8LzL7TCyCV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.172.172.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:a9:ae:68:3a:86:f7:b0:2b:f4:fb:e2:11:e9:3c:e6:cf:c4:
64:12:1d:31:7b:1c:c6:16:8a:6b:d4:e5:fc:ee:18:cc:e1:92:
4b:17:97:64:8c:04:4a:5f:5a:9f:78:b0:41:99:21:c9:1d:69:
ea:81:f4:8f:fd:d4:73:30:90:e8:b9:a2:f3:d9:7e:a1:28:77:
d8:b7:37:9b:db:8b:35:14:6e:e5:df:52:c3:22:e5:dd:4b:03:
39:3f:be:f2:10:77:bc:7e:c1:7a:5e:6f:8c:88:78:67:c2:59:
f3:a3:20:0f:06:49:3a:5e:88:04:c1:ca:6e:70:6d:47:63:94:
cb:61:0f:7f:19:99:03:53:11:ce:28:a6:c1:33:59:be:40:c4:
f9:0f:30:bb:a7:62:1e:6e:7b:68:67:41:2e:48:66:e8:7a:db:
bf:01:72:7e:24:73:53:50:18:20:96:c0:e8:0e:9e:22:9f:d1:
83:8e:6c:a2:7e:98:1f:4d:8e:ae:01:ee:60:ad:29:52:a3:b7:
1f:50:1e:19:78:02:ef:45:7c:7e:df:4d:5d:93:f7:02:74:1c:
35:af:3e:2b:40:6d:5d:87:ab:23:bd:b2:11:b1:a1:e8:91:c0:
c2:06:46:7e:2b:24:d8:fb:36:db:aa:66:2b:44:3e:ab:e2:1c:
f2:cf:b3:41
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYuuBJW4rqG5v4F986S/ta5kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1OTdiOWQ3MzQ4MGNhMjJjYmYzMWZhYWYwYmNjYmVkMzBi
MjA5NWUwHhcNMjMxMTA4MDgyMDE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ODhkZjc2MThlNmNlZmIzOTFiMWEyZTMwZDNhZTFmYjA4YWVjODA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAony+L5ZAXKEjXNeeWHaiIs3Cu+c0
a9nD+J6YqzgPN7W9dZmxq8Ldy+WJy/K+DXiAv7SFuNu2FN9y5u5O4Me0zUdVZ0H+
vKXNysxsdgQVsun/qmsBGg7Hr2qCkrdxqPpH5X3rfurhDC/h111eOvXa4q0fpBbS
os2uOdZXgcSlZ0yXHekq+FHzpq2ZRTsQPE5ZsJZvWEtKgdAVUKcSj3m4lbS02vKN
dAoQilDyVjb3UOMXUyZySlqd51Q+DO8iZbsKorMuxHIEvCvx8jbS1RGtjOluBlwT
rKxX4RH9Z+FDR9FgOWfATk76pwoPFyPr1v59VmJ8XwIzdKAI96ILrLNVRwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFiN92GObO+zkbGi4w064fsIrsgJMB8GA1UdIwQY
MBaAFBWXudc0gMoiy/MfqvC8y+0wsgleMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlplNTF6U0F5aUxMOHgtcThMekw3VEN5Q1Y0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi83NWE2Y2ItNTg2Ni00NGEyLThiYjAt
YTMxYWI2NGNmY2NiLzEvV0kzM1lZNXM3N09Sc2FMakRUcmgtd2l1eUFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi83NWE2Y2ItNTg2Ni00NGEyLThiYjAtYTMxYWI2NGNmY2Ni
LzEvRlplNTF6U0F5aUxMOHgtcThMekw3VEN5Q1Y0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCH6ysMA0G
CSqGSIb3DQEBCwUAA4IBAQAdqa5oOob3sCv0++IR6Tzmz8RkEh0xexzGFopr1OX8
7hjM4ZJLF5dkjARKX1qfeLBBmSHJHWnqgfSP/dRzMJDouaLz2X6hKHfYtzeb24s1
FG7l31LDIuXdSwM5P77yEHe8fsF6Xm+MiHhnwlnzoyAPBkk6XogEwcpucG1HY5TL
YQ9/GZkDUxHOKKbBM1m+QMT5DzC7p2IebntoZ0EuSGboetu/AXJ+JHNTUBgglsDo
Dp4in9GDjmyifpgfTY6uAe5grSlSo7cfUB4ZeALvRXx+301dk/cCdBw1rz4rQG1d
h6sjvbIRsaHokcDCBkZ+KyTY+zbbqmYrRD6r4hzyz7NB
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:30:39 2025 by rpki-client