Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/WvgWLh9oXUSYKJ91Tggb-vEDasY.roa
File: WvgWLh9oXUSYKJ91Tggb-vEDasY.roa (raw, json)
Hash identifier: Hf5m6C2e/LKiliJJ4qho0/xXtxbUibq4jfsoidpY5Zc=
Subject key identifier: 5A:F8:16:2E:1F:68:5D:44:98:28:9F:75:4E:08:1B:FA:F1:03:6A:C6
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 429640EA
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/WvgWLh9oXUSYKJ91Tggb-vEDasY.roa
Signing time: Sat 01 Jan 2022 06:04:54 +0000
ROA not before: Sat 01 Jan 2022 06:04:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12668
IP address blocks: 188.18.112.0/24 maxlen: 24
188.18.116.0/24 maxlen: 24
188.18.113.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1117143274 (0x429640ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jan 1 06:04:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5af8162e1f685d4498289f754e081bfaf1036ac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:87:bb:02:7f:4e:17:6a:c2:db:20:ef:ff:a3:
b2:5f:ac:65:88:d5:30:d0:8b:77:b9:b3:ce:8c:33:
fc:ab:45:ee:04:b1:16:6a:67:c6:81:f4:c7:74:33:
6a:e2:bf:b0:08:e6:01:51:34:c1:0c:b4:da:9a:57:
ac:4f:19:4d:69:d8:33:ec:e4:80:f5:3f:06:7e:12:
56:b4:08:c6:2e:5e:14:31:57:d2:a7:fa:d3:6f:a4:
e1:b5:a4:a2:7a:1b:3a:71:52:8a:eb:81:09:c5:40:
7c:e4:a3:ab:fb:2c:ce:2e:13:ed:57:e4:69:74:04:
d3:07:1d:f7:0e:6b:d1:54:cf:d6:24:28:92:c5:8c:
2c:29:3b:23:f7:04:36:2e:26:c0:76:a4:4f:df:2d:
0c:f2:4f:9f:36:56:52:b7:a2:3d:61:fa:06:28:a0:
33:d2:9b:ee:28:d2:22:38:02:01:65:57:29:bd:6d:
19:b0:5e:04:1c:0b:57:01:5a:a3:70:67:28:84:c0:
e6:90:a1:65:71:da:da:a5:b2:37:e2:2f:5e:f3:28:
26:5f:7c:2b:3c:f6:7a:2c:19:ad:60:95:99:9d:7b:
cf:61:e1:40:30:cb:24:4d:f7:df:cb:30:1e:fb:25:
9b:3e:b2:c1:f3:4e:df:ef:6e:c4:d4:40:90:a3:bb:
b8:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:F8:16:2E:1F:68:5D:44:98:28:9F:75:4E:08:1B:FA:F1:03:6A:C6
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/WvgWLh9oXUSYKJ91Tggb-vEDasY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.18.112.0/23
188.18.116.0/24
Signature Algorithm: sha256WithRSAEncryption
50:cd:9c:aa:ff:ce:a2:34:66:a3:16:00:35:77:0a:a9:e3:a7:
be:b3:46:a0:01:bb:cf:f5:ca:c2:a5:82:57:4f:aa:81:e3:70:
ef:6e:8e:d7:14:cd:fd:b4:4d:a4:5d:21:36:d0:fb:40:1a:0a:
a2:48:ec:24:58:fe:12:f6:bf:76:ce:bd:7d:4b:89:e2:14:33:
7f:f7:43:7e:24:ed:b3:b4:15:80:41:65:da:8c:df:4c:67:40:
a8:33:dc:bb:33:e6:13:c7:13:73:7b:45:a7:d2:17:02:e5:17:
00:77:7e:fa:f1:5a:80:2e:4d:1a:f1:a7:07:8b:10:5d:13:80:
c0:a3:6d:11:77:56:df:d0:c9:44:be:c7:f9:48:b6:95:88:df:
37:78:9c:d1:dc:18:ee:f1:87:36:01:1f:34:70:c1:95:05:c3:
55:c0:3d:41:5c:c3:b3:d5:85:28:8d:f3:00:82:b8:38:2e:08:
45:09:7f:1c:f7:6c:56:12:4d:71:87:1b:49:dc:3a:9b:7d:13:
c9:00:58:90:8d:a1:a9:10:45:ba:0a:c6:ea:e8:4e:a2:be:fb:
da:4d:2b:e3:7c:67:33:0b:61:3f:77:99:32:b5:05:58:0e:12:
cd:5b:6d:77:bf:1e:88:8f:46:09:ed:50:47:be:5b:81:bd:d2:
2c:87:61:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 10:29:59 2025 by rpki-client