Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/WGGqn-LiYibecZO7KEcNppQheIk.roa
File: WGGqn-LiYibecZO7KEcNppQheIk.roa (raw, json)
Hash identifier: 71KbCG9w9nLFEPo6s8EYvDTw7uxdPd0Ukh9EzCboByU=
Subject key identifier: 58:61:AA:9F:E2:E2:62:26:DE:71:93:BB:28:47:0D:A6:94:21:78:89
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01850F6C996839227CA41BBB051DCB938775
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/WGGqn-LiYibecZO7KEcNppQheIk.roa
Signing time: Wed 14 Dec 2022 06:57:33 +0000
ROA not before: Wed 14 Dec 2022 06:57:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 138687
IP address blocks: 194.58.155.0/24 maxlen: 24
194.58.154.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
194.87.180.0/24 maxlen: 24
195.58.61.0/24 maxlen: 24
194.58.61.0/24 maxlen: 24
194.87.191.0/24 maxlen: 24
193.124.94.0/24 maxlen: 24
212.193.5.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:0f:6c:99:68:39:22:7c:a4:1b:bb:05:1d:cb:93:87:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Dec 14 06:57:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5861aa9fe2e26226de7193bb28470da694217889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:cc:94:93:e8:d2:ed:b4:a5:c7:a2:e9:76:6e:
97:b1:b6:f4:2a:85:b1:7c:02:86:16:d4:ed:67:41:
96:e9:15:d6:fb:fe:64:cd:a4:a0:fb:a9:d8:25:76:
e5:70:5e:29:55:b1:f1:76:b1:ea:ca:77:ec:32:df:
32:0c:f2:af:33:78:db:ae:9e:76:19:d2:8f:b6:5c:
3c:9b:98:11:bd:c9:f6:b8:cc:12:1d:fc:63:7e:d4:
c7:d8:af:fe:0f:42:b2:bc:f7:3f:05:61:2c:71:ec:
86:97:54:65:0e:d7:d0:61:97:8a:db:e9:c0:cf:c6:
e2:bc:0b:5e:b4:5c:d7:8f:51:51:96:e7:cc:1f:71:
6a:20:1b:51:30:38:08:88:91:09:9e:0b:17:da:70:
65:3e:dd:ad:00:a8:8c:93:86:a1:0a:71:19:20:85:
72:a1:ab:2f:8e:7a:55:1a:9d:08:4e:2e:5d:20:c2:
4c:08:ca:3e:db:d6:c3:91:22:f5:47:ce:79:64:07:
27:c6:dd:dc:2e:42:72:20:13:3d:dc:94:62:0d:8d:
89:66:84:e3:12:15:9a:85:b0:50:53:29:2e:7f:52:
f1:ae:aa:a1:e8:d8:48:65:41:2f:b4:67:2d:a2:04:
de:94:8e:fe:86:07:df:4f:13:1f:97:a8:84:69:88:
dd:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:61:AA:9F:E2:E2:62:26:DE:71:93:BB:28:47:0D:A6:94:21:78:89
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/WGGqn-LiYibecZO7KEcNppQheIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.181.0/24
193.124.94.0/24
194.58.61.0/24
194.58.154.0/23
194.87.180.0/24
194.87.191.0/24
195.58.61.0/24
212.193.5.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:06:7f:f6:10:bb:8d:1a:11:ee:59:d0:da:60:f9:57:ef:3c:
6d:a0:4a:8d:89:13:81:68:1b:6e:fb:c2:89:cc:7a:6a:08:72:
23:40:e6:27:f7:c0:43:08:03:f1:ab:24:61:5a:d8:69:21:b5:
36:b9:ac:59:b9:e9:6e:ca:00:9d:e2:c1:01:19:06:48:b1:21:
8e:a5:67:eb:38:63:de:df:2e:76:1e:29:e6:d2:6b:9c:6e:cc:
58:82:3d:07:3d:0b:87:7e:78:75:48:05:a3:47:4f:fd:c4:a0:
76:74:de:10:7c:f7:26:a1:c2:59:37:76:e6:7f:0b:9c:93:05:
d4:50:0a:fd:9c:26:ae:2f:4b:4f:46:93:39:08:42:da:d2:66:
80:c2:0e:37:67:4d:a8:7b:ee:9d:25:d5:0b:1e:0c:64:78:6b:
bd:1a:8b:8b:1d:d9:81:15:05:81:38:b9:22:6d:56:0b:d2:71:
2c:bc:f9:f2:7f:1a:b6:de:95:82:b3:26:19:c6:0a:b3:a0:53:
af:cf:23:ba:71:7d:3a:56:dd:30:58:7d:a8:5d:c0:e7:1b:fe:
60:9e:18:be:92:6c:da:fc:31:79:50:32:2c:67:06:82:f5:28:
2c:cb:4a:55:64:04:be:78:b7:af:f1:a5:7f:33:82:b6:67:61:
df:32:b9:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:05 2023 by rpki-client on console-fra.rpki-client.org