Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/wa_jQPYWEXfTGppCOKnb2LbJ-tU.roa
File: wa_jQPYWEXfTGppCOKnb2LbJ-tU.roa (raw, json)
Hash identifier: T3VNGvUsmln+xLoYoTW9r+2h+WS1J1PMergBUfCKKCY=
Subject key identifier: C1:AF:E3:40:F6:16:11:77:D3:1A:9A:42:38:A9:DB:D8:B6:C9:FA:D5
Certificate issuer: /CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Certificate serial: 05410E14
Authority key identifier: 46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/wa_jQPYWEXfTGppCOKnb2LbJ-tU.roa
Signing time: Sat 01 Jan 2022 11:58:46 +0000
ROA not before: Sat 01 Jan 2022 11:58:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24961
IP address blocks: 45.91.64.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88149524 (0x5410e14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Validity
Not Before: Jan 1 11:58:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c1afe340f6161177d31a9a4238a9dbd8b6c9fad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c4:a3:ca:e0:6e:8c:3f:e4:aa:34:d5:61:23:
b5:ec:3b:b6:36:a4:e3:ed:00:14:9c:0e:bc:3a:dd:
fb:e8:9c:fe:8b:43:e8:04:e8:25:0f:ea:94:47:43:
f6:ae:f8:ad:1d:ed:8c:d9:29:80:cf:5a:28:83:19:
9e:0d:c8:41:23:e1:67:af:88:90:5f:ce:38:58:65:
0b:8f:98:30:25:3a:bd:5b:dd:86:88:02:cd:a5:57:
44:f5:4a:1c:d2:bc:ff:95:8e:f7:cf:63:61:c1:58:
1e:dc:0b:e5:ff:70:b6:0f:22:38:f1:d1:64:46:70:
09:be:70:54:0a:77:16:3c:de:0a:8d:b8:f2:a8:ca:
dd:3f:10:59:cb:56:14:d4:dd:6a:e4:0e:72:72:4a:
be:9e:68:12:5a:1e:fd:8b:b5:26:1a:ee:ff:3b:e8:
4d:98:7b:50:bd:eb:24:0e:0b:8b:14:51:64:d0:7b:
0f:16:44:2b:15:13:8b:21:6f:08:9d:90:eb:93:98:
43:25:2f:16:81:6b:9e:57:43:eb:4b:c9:8a:ab:1d:
9f:dd:59:20:b7:93:c8:79:d5:dd:6e:77:1f:b6:02:
68:15:9a:3f:96:b1:0e:3a:da:42:ec:ab:2c:1e:a0:
90:cb:7a:a8:39:da:d0:13:db:e1:6a:61:75:c2:84:
d5:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:AF:E3:40:F6:16:11:77:D3:1A:9A:42:38:A9:DB:D8:B6:C9:FA:D5
X509v3 Authority Key Identifier:
keyid:46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/wa_jQPYWEXfTGppCOKnb2LbJ-tU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.64.0/24
Signature Algorithm: sha256WithRSAEncryption
58:3e:5f:b0:a0:b9:cf:ea:b4:c0:24:ba:27:6e:f8:a7:56:c9:
dc:85:24:1d:95:e9:bf:67:97:5d:7e:5e:36:c1:a2:bd:58:12:
6a:c5:8e:16:9c:8a:29:dc:13:be:b1:02:0d:25:2f:fd:80:c2:
ec:28:7d:22:c6:5f:76:c7:40:aa:50:ac:ba:9e:a3:ec:a1:c1:
9d:9b:7c:c9:8c:a6:e5:17:31:d9:fc:74:8d:53:d0:98:3f:d6:
99:0b:58:70:94:f5:6a:b5:7e:53:d5:1f:54:e7:58:18:a6:a7:
fb:ad:4a:e4:c9:18:81:94:8f:f2:45:5f:de:55:61:18:61:29:
a5:ef:a0:32:b6:5d:90:b3:e7:3c:1d:45:ef:87:cb:62:47:17:
a8:0d:53:ce:39:5c:58:2d:63:73:20:c4:cf:3d:2d:ec:d5:15:
09:82:02:a1:d5:09:94:a7:8a:11:c5:f6:f8:aa:bf:1b:08:da:
cf:24:0a:97:16:cb:e3:64:c6:1e:8c:39:b4:14:cf:7f:c9:86:
35:60:38:25:c3:77:30:b7:62:42:ef:e0:22:72:74:7e:75:99:
47:57:ed:73:c0:cb:10:a1:e6:4d:b2:ae:37:84:38:9b:e9:19:
8f:4f:5a:02:d3:22:dd:71:80:0b:dd:87:39:41:9b:7c:bf:b7:
27:5f:ed:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:19 2023 by rpki-client on console-ams.rpki-client.org