Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/wEx2tuOjhVePNm05hmA5hN2OwJw.roa
File: wEx2tuOjhVePNm05hmA5hN2OwJw.roa (raw, json)
Hash identifier: veMZb9qSM1MrepjzNy98VtNK6+PlsFc0XAATMCa6XpQ=
Subject key identifier: C0:4C:76:B6:E3:A3:85:57:8F:36:6D:39:86:60:39:84:DD:8E:C0:9C
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 153D7CB9
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/wEx2tuOjhVePNm05hmA5hN2OwJw.roa
Signing time: Sat 01 Jan 2022 07:52:48 +0000
ROA not before: Sat 01 Jan 2022 07:52:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6810
IP address blocks: 81.218.102.0/24 maxlen: 24
62.219.92.0/24 maxlen: 24
31.168.36.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 356351161 (0x153d7cb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Jan 1 07:52:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c04c76b6e3a385578f366d3986603984dd8ec09c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ad:62:12:1f:49:2d:dc:40:1c:c5:6f:9e:c9:
db:f6:57:fd:8e:5e:31:4b:4f:70:15:dd:e7:25:df:
74:ba:be:dc:3b:83:b8:35:11:4c:d5:1c:40:e3:aa:
1b:bd:a8:b5:9c:40:34:e7:b4:f1:ad:6b:cb:cf:ec:
91:65:f1:d0:27:ba:f2:d5:41:24:c2:9f:a0:c4:f6:
37:8f:a4:d5:a0:d1:ae:b8:14:cb:5f:89:84:c2:b8:
9b:8f:69:f6:f4:7a:a3:7c:1b:db:07:67:af:82:84:
ed:19:1e:7f:73:af:60:f4:93:4a:db:7e:7a:cb:57:
2c:26:38:3b:ca:1f:b2:4b:47:5a:7a:75:2c:8a:ba:
54:07:08:ee:fc:c5:33:fb:23:cb:f0:b2:c5:3c:35:
fa:9a:4f:9e:4f:6f:63:25:a4:b2:b5:a1:8b:57:c4:
06:82:f3:da:c2:83:81:c7:97:32:45:34:46:20:3f:
64:2f:38:ae:4d:6f:c8:d2:e7:7b:88:6c:75:be:31:
b1:a6:9b:4d:c1:c4:62:64:6e:05:0b:28:74:c8:b0:
f7:27:cb:32:f9:88:f9:9d:29:c7:04:a2:e5:d7:3f:
f8:5d:d8:e6:1d:d7:49:1b:21:ac:1c:30:e9:ba:d6:
03:83:93:05:6e:de:ac:2f:cc:e2:98:78:41:c5:37:
db:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:4C:76:B6:E3:A3:85:57:8F:36:6D:39:86:60:39:84:DD:8E:C0:9C
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/wEx2tuOjhVePNm05hmA5hN2OwJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.168.36.0/23
62.219.92.0/24
81.218.102.0/24
Signature Algorithm: sha256WithRSAEncryption
38:95:12:9e:c6:7f:a9:54:c0:17:64:6c:44:e2:2a:89:b2:23:
60:12:d3:8c:3b:73:d8:26:d5:35:57:18:63:7d:d2:91:d4:68:
4e:8f:a3:11:aa:9e:0c:f4:af:2f:7e:47:0c:a7:ac:88:39:85:
35:ec:6e:f7:9b:c2:22:32:22:e3:db:29:98:1f:97:5a:6d:87:
03:ec:b2:f8:05:1c:43:8f:10:e9:17:c6:a5:06:2d:c5:78:93:
71:5a:26:98:eb:7d:65:11:dd:8c:46:ac:23:1d:10:4e:44:46:
a3:03:20:e8:2e:9c:56:73:f8:19:77:dd:2d:2a:8c:c5:10:c8:
50:91:03:12:1b:ab:ae:15:17:c4:5e:5a:26:68:a0:94:38:25:
2e:a7:3d:d2:bf:a8:46:24:40:60:2d:e1:d1:7c:f1:99:66:dd:
20:c4:47:23:ef:00:f8:e0:d4:18:b7:bf:c5:5d:60:46:fd:c7:
57:4d:45:7f:a5:f7:7c:58:ea:a6:83:90:f9:57:a0:3a:f6:b5:
26:d1:e2:be:2b:32:0e:17:1f:a9:83:72:f7:aa:b6:68:0c:07:
3c:0d:76:06:09:cf:3c:e9:0e:d8:cd:b6:ce:54:27:62:09:3f:
8a:e3:59:3f:21:10:56:52:91:db:e1:c1:a1:70:bb:60:d2:87:
1f:be:71:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:57 2024 by rpki-client on console-fra.rpki-client.org