Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/WHt_5mWAL-XzxmQarwZsAXFsXOg.roa
File: WHt_5mWAL-XzxmQarwZsAXFsXOg.roa (raw, json)
Hash identifier: aKsRKtK1leQ2kT3Og3QmA91Yk1szw1lW5m0fXSblfv0=
Subject key identifier: 58:7B:7F:E6:65:80:2F:E5:F3:C6:64:1A:AF:06:6C:01:71:6C:5C:E8
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 0182010C29A2694A1EABBAE7AF39968516D0
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/WHt_5mWAL-XzxmQarwZsAXFsXOg.roa
Signing time: Fri 15 Jul 2022 08:49:10 +0000
ROA not before: Fri 15 Jul 2022 08:49:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34383
IP address blocks: 89.170.0.0/16 maxlen: 16
85.192.192.0/18 maxlen: 18
85.117.128.0/19 maxlen: 19
95.136.128.0/17 maxlen: 17
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:01:0c:29:a2:69:4a:1e:ab:ba:e7:af:39:96:85:16:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Jul 15 08:49:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=587b7fe665802fe5f3c6641aaf066c01716c5ce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a4:5f:d5:9a:fc:72:30:9c:8c:19:24:ca:e2:
63:2f:6a:4e:31:db:b0:d8:d8:5f:e8:fd:96:92:17:
e7:1d:52:35:db:90:68:03:6a:a9:d2:68:d1:95:b3:
05:a2:32:3e:bd:20:b3:d4:29:c2:b5:a6:4a:11:cd:
bd:27:61:f0:47:c8:9e:58:f2:82:51:59:d9:aa:23:
38:4c:58:c2:bb:d5:79:ca:f3:cc:64:d6:14:56:e0:
6b:e2:81:35:f4:1e:f2:a6:f3:d6:5d:ef:82:e8:75:
45:73:37:f3:69:43:59:1b:80:ff:13:01:e9:55:c9:
7f:89:45:59:d0:10:66:aa:dc:14:e5:67:1a:09:9b:
36:ad:11:3c:79:a4:ec:58:48:38:19:41:6f:aa:f1:
24:86:51:8a:bc:12:32:75:86:b5:d8:fd:2a:ac:c4:
b2:5b:1c:a1:05:ff:85:d8:8e:93:32:c1:63:11:6a:
ae:61:8c:92:c8:d8:a5:ba:04:b9:26:af:7d:50:99:
f1:0e:14:67:6a:a9:df:38:f7:d7:01:22:b9:59:c6:
ce:d5:78:82:ea:a4:e4:d0:e4:11:d1:74:68:a3:e1:
02:60:3d:6c:32:c4:6b:6a:1d:af:c8:ca:49:58:5c:
56:90:fe:ef:f7:67:e5:b4:93:2e:d8:75:70:6d:05:
46:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:7B:7F:E6:65:80:2F:E5:F3:C6:64:1A:AF:06:6C:01:71:6C:5C:E8
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/WHt_5mWAL-XzxmQarwZsAXFsXOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.117.128.0/19
85.192.192.0/18
89.170.0.0/16
95.136.128.0/17
Signature Algorithm: sha256WithRSAEncryption
7a:6c:34:e0:4f:61:28:d7:a7:bb:d2:ab:21:23:39:82:18:19:
13:70:8e:de:8a:f3:b1:78:f8:59:f2:fb:40:19:e2:5c:4f:04:
3c:21:f7:2b:20:b0:05:75:de:da:ce:90:27:80:93:ba:c1:d6:
71:26:37:53:74:9a:a5:e0:53:af:0e:05:ab:3d:52:80:40:f2:
e5:a4:14:19:6b:d0:5a:36:8d:05:b4:8b:5d:b8:4a:f4:f0:7f:
e5:01:60:f3:8a:ed:38:6c:c0:b5:38:c0:37:4a:5a:f6:50:86:
14:93:83:f9:ac:00:89:de:0a:60:30:5d:a4:b2:bc:d9:25:51:
4d:09:9e:68:e7:e2:c7:52:3a:54:db:de:85:f1:7d:06:ee:72:
f3:c4:5c:43:40:98:69:ac:6b:05:c0:2b:ea:9f:98:7b:70:0e:
ef:fb:2d:a6:5b:2c:d9:f3:a6:cb:fb:94:be:82:d6:23:5a:a9:
1a:7d:20:fc:6c:a3:df:cf:24:62:29:f9:a0:c6:90:98:03:d3:
5b:d8:0c:73:27:53:4a:93:79:54:4d:d0:ad:93:b5:c9:cc:a8:
9d:ff:c9:11:36:a7:65:9e:65:0a:d0:98:d4:04:7a:a0:02:72:
66:ee:6c:3c:ff:a8:b2:9f:90:58:9b:ff:13:cd:45:5e:cc:89:
6c:28:e7:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:55 2024 by rpki-client on console-fra.rpki-client.org