Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/RWZR-Ix3WHcQMhggHfGwdOn9DPk.roa
File: RWZR-Ix3WHcQMhggHfGwdOn9DPk.roa (raw, json)
Hash identifier: sZ1plt5kzWM8l7MJikEJw6mjC+DnibEz5/kcnPXn/qQ=
Subject key identifier: 45:66:51:F8:8C:77:58:77:10:32:18:20:1D:F1:B0:74:E9:FD:0C:F9
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 01833780C8B0D7DFE0D03AFEDD7C7135C348
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/RWZR-Ix3WHcQMhggHfGwdOn9DPk.roa
Signing time: Tue 13 Sep 2022 15:38:50 +0000
ROA not before: Tue 13 Sep 2022 15:38:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 193.37.196.0/22 maxlen: 24
178.239.30.0/23 maxlen: 24
2.58.232.0/23 maxlen: 24
2.58.232.0/22 maxlen: 24
2.58.234.0/23 maxlen: 24
45.67.200.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:37:80:c8:b0:d7:df:e0:d0:3a:fe:dd:7c:71:35:c3:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Sep 13 15:38:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=456651f88c775877103218201df1b074e9fd0cf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:aa:c6:bf:57:58:81:8f:c2:a7:02:d0:bd:f5:
93:ab:bc:ee:de:c2:35:33:3f:31:6b:ef:26:1e:b1:
03:27:cc:6f:da:8d:93:e8:74:48:ae:34:fd:84:7b:
47:ce:ce:e3:50:8f:26:9c:0a:1a:b1:c6:59:cc:a2:
8f:af:6c:07:8c:68:6d:69:0d:42:68:35:6f:ab:c9:
4c:bf:66:77:63:53:a3:47:1f:b2:71:19:2c:b8:5a:
7e:c0:86:a1:ad:35:4c:eb:b2:be:45:d8:ee:ae:e3:
55:cd:7e:dd:8d:3a:67:9b:0d:4a:cc:b1:f6:29:ea:
e0:93:bb:55:ff:b7:c3:a8:76:68:4c:2b:be:46:c8:
ec:31:cf:d1:7a:4b:98:56:e8:7f:07:8f:eb:0f:56:
6c:91:6a:d7:c3:c9:ea:a2:55:89:e5:23:fe:00:20:
d3:00:0d:f8:49:74:ba:56:c0:cc:99:e5:a2:53:fc:
54:71:3c:dd:2a:8c:38:eb:e5:3d:dd:a4:46:8b:13:
c3:bf:d5:a5:0f:2f:62:fd:05:2a:24:f0:c9:3b:aa:
87:79:e9:d1:b0:08:47:f5:7d:cc:66:15:61:ad:97:
f2:5f:c5:41:f0:a3:4d:b4:35:0f:00:95:f2:a8:21:
6c:ce:85:3b:a0:7e:9c:6a:82:ed:eb:8f:c9:02:0a:
65:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:66:51:F8:8C:77:58:77:10:32:18:20:1D:F1:B0:74:E9:FD:0C:F9
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/RWZR-Ix3WHcQMhggHfGwdOn9DPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.232.0/22
45.67.200.0/22
178.239.30.0/23
193.37.196.0/22
Signature Algorithm: sha256WithRSAEncryption
29:c2:15:46:05:45:27:90:38:1d:79:6c:89:53:67:88:8f:44:
cb:9c:6e:d1:d6:91:d4:4b:a5:a0:f6:a8:71:4a:04:45:dc:30:
28:42:15:46:b2:65:1c:6f:51:04:e9:31:46:4b:e3:e2:73:ff:
b1:1e:1d:4e:0a:cb:95:b0:73:1f:5d:70:7a:85:e0:74:fc:f4:
11:d2:5b:e7:ed:e1:67:ef:be:8f:d8:52:5d:0a:30:d2:17:30:
da:cb:e0:99:fc:04:fd:f4:dc:99:16:fd:e2:a7:0e:66:69:e3:
ce:c3:87:ed:13:7d:e0:95:2f:b2:07:c3:ce:fd:11:7c:00:f1:
e0:57:fe:af:fb:e5:d7:42:72:81:80:9a:8b:06:08:ff:3a:2f:
ff:91:0f:ff:9a:70:b2:8e:a1:84:44:a6:66:92:4e:57:3c:5c:
de:ae:73:5b:f4:08:37:a3:3a:15:d4:0b:a5:13:ec:60:5d:80:
2d:e4:86:94:77:a5:2e:82:6f:c7:c5:f7:28:0a:26:7b:01:72:
3c:16:58:1e:59:b1:f9:17:a7:c2:04:b6:cb:e8:af:24:27:44:
07:bb:86:fe:a7:6b:61:0e:b0:b5:3d:be:c1:85:8c:df:2b:e4:
d9:be:b0:52:6b:9a:fd:d1:8d:db:e3:d4:dd:8f:6a:c0:0a:a7:
c1:5d:69:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:35 2024 by rpki-client on console-fra.rpki-client.org