Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/wTJLzYC7fbFk0_6UABxEBRj95T0.roa
File: wTJLzYC7fbFk0_6UABxEBRj95T0.roa (raw, json)
Hash identifier: 7azYOPUqRqn626eMfJ/M0kLH37n954wqelJeeDzvaVI=
Subject key identifier: C1:32:4B:CD:80:BB:7D:B1:64:D3:FE:94:00:1C:44:05:18:FD:E5:3D
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0E22B5D7
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/wTJLzYC7fbFk0_6UABxEBRj95T0.roa
Signing time: Sat 01 Jan 2022 01:58:22 +0000
ROA not before: Sat 01 Jan 2022 01:58:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210654
IP address blocks: 194.87.132.0/22 maxlen: 24
192.124.209.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 237155799 (0xe22b5d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 1 01:58:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c1324bcd80bb7db164d3fe94001c440518fde53d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7c:ad:8a:e5:fa:0b:18:ba:7d:d1:05:73:d0:
a2:7b:55:3c:30:a7:11:9e:03:16:68:fd:d3:41:31:
ce:d5:37:4f:be:3e:3d:6c:4c:68:c4:27:c8:9e:4e:
c2:a7:36:0b:99:08:f2:d8:9b:35:3d:76:6d:58:d8:
c8:7a:0e:0e:4b:7e:c6:56:4d:88:6a:5e:83:74:9b:
cc:08:59:21:f3:77:b8:e5:17:1c:c9:aa:31:c6:2d:
cd:a1:84:04:51:48:90:67:8b:b1:e8:43:ff:96:5c:
0c:f1:26:bb:cc:3c:63:96:6e:ad:99:ad:94:b0:5c:
2b:06:c5:d1:5a:ea:96:f5:6b:43:b6:12:15:04:8a:
1d:95:26:0c:c8:b0:26:f3:f6:4a:6d:58:0c:cf:74:
a9:19:1b:38:7d:22:00:91:3b:12:e0:4c:62:c7:92:
b5:1d:57:cb:05:cf:85:f7:29:c5:48:85:b0:c5:82:
3f:7f:6f:11:7c:30:ef:76:78:79:0c:9e:5f:e4:40:
e1:77:d6:fc:a8:5f:da:3a:ed:b2:4e:5d:a2:55:aa:
b1:e2:0a:45:e1:88:08:2a:89:49:f3:15:7d:f6:25:
f3:37:3a:bc:02:c2:8d:8b:4b:43:e9:92:fc:6e:29:
cd:10:1d:1e:32:fc:08:f2:f4:8c:2d:b2:4b:15:46:
47:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:32:4B:CD:80:BB:7D:B1:64:D3:FE:94:00:1C:44:05:18:FD:E5:3D
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/wTJLzYC7fbFk0_6UABxEBRj95T0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.209.0/24
194.87.132.0/22
Signature Algorithm: sha256WithRSAEncryption
33:7a:d7:c0:12:c1:8b:af:eb:a5:42:61:5d:6b:8e:f6:78:e8:
16:fa:e7:37:35:c0:1a:f7:b0:15:67:22:c8:c4:81:04:e1:94:
8d:92:b6:b8:33:85:8e:fd:6c:71:df:0d:6a:6b:39:d5:a1:2e:
b4:5e:d5:d6:ad:a1:4e:ed:52:a6:26:fa:7d:3a:2f:8b:58:50:
b7:92:78:77:3e:2a:54:87:9f:c0:5d:d2:fc:da:71:1b:85:59:
14:d7:0b:74:57:f9:2d:d2:4d:1a:0a:70:4f:50:5e:9b:bd:28:
e3:5e:e5:53:05:e3:76:24:00:8d:bc:80:1f:7a:ad:1f:af:74:
12:23:39:58:b5:bb:b5:b1:fb:98:6f:68:83:f3:29:f4:36:c4:
1c:f9:bc:9c:cd:9a:2c:5a:ac:e7:73:ae:74:99:8d:a0:48:2c:
13:bb:4f:b6:13:e5:a3:0d:6d:58:47:e6:60:78:d0:b6:92:63:
39:67:ba:ea:db:60:22:65:c4:04:fa:f9:ec:2b:19:29:ab:1a:
80:b9:1f:7b:73:b1:e2:58:f3:82:e0:0c:8c:1d:ee:b0:02:1f:
9a:e9:bd:6b:9d:f0:ad:f6:e8:90:db:69:41:8e:4f:84:14:3b:
35:12:85:30:83:7b:46:a1:98:f4:90:59:27:82:0c:d0:2b:53:
8f:20:d7:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:30 2024 by rpki-client on console-fra.rpki-client.org