Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/WwMhZVYqrp34BDD_MghzrXQcUCg.roa
File: WwMhZVYqrp34BDD_MghzrXQcUCg.roa (raw, json)
Hash identifier: QGvjRKM0537aslJRT8grwitDnNuBHSXSZ3cSLtbHqO8=
Subject key identifier: 5B:03:21:65:56:2A:AE:9D:F8:04:30:FF:32:08:73:AD:74:1C:50:28
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 45C6E90F
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/WwMhZVYqrp34BDD_MghzrXQcUCg.roa
Signing time: Wed 20 Apr 2022 05:06:19 +0000
ROA not before: Wed 20 Apr 2022 05:06:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 36879
IP address blocks: 81.52.165.0/24 maxlen: 24
81.52.168.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1170663695 (0x45c6e90f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Apr 20 05:06:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5b032165562aae9df80430ff320873ad741c5028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:a0:2e:16:70:5b:e0:fc:d3:cd:74:86:b3:34:
ad:1a:7c:89:93:98:39:91:e1:c3:85:f5:8d:15:a8:
50:51:57:5c:57:f7:2d:6a:6f:a9:ff:1f:8a:8d:6b:
82:e1:89:c6:75:7c:93:8d:23:aa:53:fa:96:c5:82:
b1:b5:50:41:0e:ba:a3:7b:8b:a4:b5:40:0e:57:a3:
75:3f:5a:69:a8:40:b1:da:5f:7c:f9:f7:35:e7:f6:
d0:fd:32:17:16:e4:d6:32:24:a5:dd:18:ec:66:77:
bc:6e:37:27:0d:08:f6:8e:09:f4:c5:29:a2:d5:66:
e1:3a:01:cc:b9:26:8b:12:0f:3e:b2:f8:49:6e:98:
26:4e:d1:17:fe:1b:98:b5:7d:fe:c0:e0:22:a2:2f:
7c:e8:8a:04:b7:f2:39:9e:69:c2:46:d2:a9:aa:32:
56:c7:ef:22:00:87:2a:cc:5c:b6:e2:84:a6:b4:3d:
95:7f:61:1a:1c:30:9a:05:4a:a8:cf:89:8b:1c:db:
ba:f4:a6:c5:28:52:8d:d9:ea:3b:bd:27:fc:e9:98:
4f:ae:fd:48:2b:a2:9b:9f:13:2d:87:0d:05:db:61:
27:56:8f:93:e1:6f:7e:71:bb:b8:d2:98:14:63:67:
7e:bf:04:42:d6:f0:45:03:ad:97:a8:28:60:25:fd:
15:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:03:21:65:56:2A:AE:9D:F8:04:30:FF:32:08:73:AD:74:1C:50:28
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/WwMhZVYqrp34BDD_MghzrXQcUCg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.52.165.0/24
81.52.168.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:c2:0f:f9:fc:42:24:ac:f7:81:ab:08:29:51:04:f4:44:45:
40:6e:11:d3:36:bf:58:6a:29:2a:0d:aa:a7:c9:bf:11:76:da:
3e:7e:02:31:81:04:eb:46:ec:92:ce:89:ad:55:ff:f7:a5:f3:
4e:6c:92:a4:43:cc:18:56:18:98:e4:9f:a9:c9:54:8e:5b:68:
89:78:38:5b:d7:9d:d6:11:6a:62:b3:e6:84:75:6f:1f:f2:b4:
31:93:e0:34:be:b8:dc:b8:a6:6c:55:7a:a5:23:a8:c6:78:45:
0d:99:fb:95:c1:56:89:44:ab:f5:4a:7e:dc:33:77:45:8a:f3:
a7:fb:48:08:a1:da:03:31:27:f5:e6:fc:82:11:a2:67:41:71:
80:a7:8c:95:e6:ca:e3:e6:38:97:3f:73:4c:11:9e:db:4b:b5:
1e:80:65:c2:65:2f:9c:4b:da:de:2f:b3:67:53:e4:5b:68:8d:
51:84:29:02:78:68:3c:65:84:da:44:37:54:88:5d:55:ea:91:
ed:ce:6d:db:52:a8:ce:2d:97:93:c3:84:38:2b:9d:c6:e5:c4:
97:f2:fa:12:3a:da:9d:53:d3:fb:fb:0b:1e:e0:68:68:aa:37:
58:87:3d:33:5d:9e:e6:e8:6b:7d:f9:ed:fe:7e:2b:5e:72:18:
7e:cc:23:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:51 2024 by rpki-client on console-fra.rpki-client.org