Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/wgnqOfcgobXoF41G5MzZTYUSmbg.roa
File: wgnqOfcgobXoF41G5MzZTYUSmbg.roa (raw, json)
Hash identifier: XleonqzQlMf0JF0kZYmHtxQwht1neWcSGVocqfEawaE=
Subject key identifier: C2:09:EA:39:F7:20:A1:B5:E8:17:8D:46:E4:CC:D9:4D:85:12:99:B8
Certificate issuer: /CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba
Certificate serial: 382133FC
Authority key identifier: A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/wgnqOfcgobXoF41G5MzZTYUSmbg.roa
Signing time: Fri 25 Feb 2022 22:23:54 +0000
ROA not before: Fri 25 Feb 2022 22:23:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 28776
IP address blocks: 217.9.4.0/24 maxlen: 24
217.9.6.0/24 maxlen: 24
217.9.5.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 941700092 (0x382133fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba
Validity
Not Before: Feb 25 22:23:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c209ea39f720a1b5e8178d46e4ccd94d851299b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:94:7e:9e:b9:f4:53:a0:6e:e1:69:5c:fd:58:
74:17:fa:ad:e6:b1:88:70:d7:29:d4:0f:f6:69:65:
1b:56:f3:42:bb:85:d1:31:91:5c:07:a1:0c:5e:e7:
8b:db:7e:81:40:78:b9:2f:bd:78:3c:19:af:0a:c0:
86:e5:d0:06:53:1b:03:d8:fb:e2:3a:83:e4:b4:26:
b4:b3:60:3a:4b:b1:0a:a6:ef:8a:0d:cd:fc:e1:12:
35:46:ad:57:4c:35:cb:e4:3e:11:88:b3:69:07:c3:
c2:dc:8b:d0:44:39:2b:8a:c0:5d:d6:6a:9c:52:6c:
0c:3c:2b:55:97:1d:24:ba:d3:42:d1:e5:75:21:2e:
fd:4c:89:6a:2d:b4:f6:b0:05:f9:cb:ce:ec:a5:ab:
f5:3b:f5:59:3f:9b:12:25:93:16:e1:6b:41:59:60:
e4:10:4d:91:da:6b:44:3c:d1:a1:cd:79:70:a8:5f:
fc:7a:20:ba:f7:fd:b3:3b:02:7a:65:b8:14:2e:0e:
eb:b5:58:39:74:44:b5:af:d2:fb:79:24:c3:a1:48:
43:6c:18:16:94:70:71:38:7c:71:0e:7b:70:a5:15:
0c:97:4d:58:2d:bf:1f:7f:77:69:c8:c5:80:af:bb:
d3:5c:59:4a:99:73:74:70:20:fc:19:7f:22:d0:40:
a6:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:09:EA:39:F7:20:A1:B5:E8:17:8D:46:E4:CC:D9:4D:85:12:99:B8
X509v3 Authority Key Identifier:
keyid:A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/wgnqOfcgobXoF41G5MzZTYUSmbg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.9.4.0-217.9.6.255
Signature Algorithm: sha256WithRSAEncryption
70:35:f1:9d:71:dc:67:8e:f7:ac:11:87:f7:80:28:c4:71:9c:
97:a7:38:12:ab:dd:80:68:5c:54:3b:93:77:07:97:a8:6d:a4:
2b:07:3d:d4:cc:27:ac:e9:bf:0d:95:5e:1a:06:79:95:f3:c0:
12:f2:0e:1d:41:dc:c9:9b:5f:c9:d0:a0:53:e2:7d:c7:69:15:
13:3f:81:2e:7a:a4:02:37:1f:47:44:f4:2c:5f:b9:48:b4:bb:
66:69:76:99:66:27:f2:e4:02:99:77:a4:20:5c:25:d5:33:67:
2e:1e:f4:06:88:d8:da:34:93:a0:42:68:a7:45:04:d2:e8:5a:
fc:31:7b:14:2d:08:ed:ad:e1:ba:52:65:4e:86:85:60:0a:7e:
68:f8:e6:b1:70:2a:0d:0b:41:9a:62:06:e0:b5:d8:c5:a7:97:
8a:04:3d:79:3c:18:5d:8c:d6:c6:12:92:60:79:9c:99:3b:5b:
7b:b2:3d:32:4a:7f:06:6f:c1:1f:f1:ae:9f:b7:ae:48:b5:43:
5f:7e:1f:9c:9d:a9:c0:cd:70:19:5c:ea:db:c8:84:07:53:86:
60:ec:67:b2:97:7a:f3:ef:a9:1f:3c:23:bb:68:80:f4:2f:a3:
5d:b4:02:6e:f9:36:f1:d3:9f:f9:b9:4a:1b:0b:37:25:3a:bf:
e8:e7:8c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:27:16 2025 by rpki-client