Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/WumxHo-k1rNrc4S6vC_ZNeI34Fc.roa
File: WumxHo-k1rNrc4S6vC_ZNeI34Fc.roa (raw, json)
Hash identifier: 2aOEFrWkM0yXBCpNWUyCn/KhAhEY7Vo9pnWrnj/kFUU=
Subject key identifier: 5A:E9:B1:1E:8F:A4:D6:B3:6B:73:84:BA:BC:2F:D9:35:E2:37:E0:57
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 0907FC89
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/WumxHo-k1rNrc4S6vC_ZNeI34Fc.roa
Signing time: Tue 29 Mar 2022 18:36:43 +0000
ROA not before: Tue 29 Mar 2022 18:36:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3320
IP address blocks: 45.140.8.0/23 maxlen: 23
45.151.112.0/22 maxlen: 23
45.157.202.0/23 maxlen: 23
45.154.238.0/23 maxlen: 23
45.157.32.0/23 maxlen: 23
45.128.158.0/23 maxlen: 23
45.141.62.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151518345 (0x907fc89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Mar 29 18:36:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5ae9b11e8fa4d6b36b7384babc2fd935e237e057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b8:27:18:9d:7d:50:e7:a7:dc:70:88:c9:eb:
4f:94:7d:3a:04:b4:1e:e1:e8:d7:8e:cf:39:14:52:
4a:50:bf:df:8f:17:bb:22:9c:cd:bd:ef:00:30:80:
d8:29:e2:9e:96:14:0a:e4:42:7e:a3:9e:b5:17:57:
d6:36:38:c3:14:c8:6f:a7:95:42:14:9a:7a:62:ad:
d8:68:a2:2b:1a:0b:e7:2d:1a:bc:10:c6:00:40:41:
39:65:26:b1:e8:e5:46:a6:71:07:4c:5b:17:bc:87:
19:c9:0c:f8:be:b4:c0:c0:48:7b:23:4f:42:0e:f9:
20:90:ea:ce:5f:3f:4d:73:08:12:04:1c:07:f9:58:
fd:05:36:e1:52:f7:b2:9a:2e:57:f6:ad:6f:55:99:
f6:04:a5:f9:8d:61:53:12:56:db:fb:94:d0:7f:2a:
c1:73:ec:57:66:3f:67:22:12:d5:a5:9b:23:46:2f:
3d:2d:f6:92:db:d5:79:ea:9e:24:08:c1:86:29:00:
37:84:86:36:c7:67:7a:2b:e9:b7:11:f2:b0:9a:69:
e3:0b:bd:84:0d:03:e7:40:7e:14:11:59:bd:49:fe:
2c:fb:69:69:c4:61:5f:8f:fb:52:d4:7f:c4:21:e2:
1a:03:84:fe:d0:d7:8b:17:21:71:5b:4f:27:9d:98:
52:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E9:B1:1E:8F:A4:D6:B3:6B:73:84:BA:BC:2F:D9:35:E2:37:E0:57
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/WumxHo-k1rNrc4S6vC_ZNeI34Fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.158.0/23
45.140.8.0/23
45.141.62.0/23
45.151.112.0/22
45.154.238.0/23
45.157.32.0/23
45.157.202.0/23
Signature Algorithm: sha256WithRSAEncryption
ae:b0:7b:39:4a:f6:b1:7b:3d:c8:58:4c:fd:93:85:cb:bb:43:
47:65:69:6d:c5:02:7b:46:07:d4:a8:0c:2f:1d:1b:e8:a5:57:
12:a8:fd:f2:ce:9d:96:73:31:81:02:0a:27:52:9c:a7:5c:c4:
83:0f:ea:c9:12:4a:5a:1b:6b:ee:9b:65:7e:1b:7c:07:1d:02:
f0:fa:e6:ff:b6:07:b0:af:87:14:ea:af:1a:59:b4:59:90:de:
5a:de:da:9a:79:2f:87:9c:3c:38:0c:7b:cc:04:cf:25:52:c9:
40:6a:ef:03:6c:c3:43:ed:ef:c9:c1:6f:4b:f0:ec:cc:71:50:
d4:fe:8c:24:64:ee:39:55:d0:a2:5b:b3:28:cf:de:65:48:9c:
26:38:20:47:71:0a:b8:39:c1:7a:8f:29:d2:f1:82:2a:df:4c:
96:65:bd:7e:2e:90:7d:fc:14:48:c0:c9:92:37:f6:79:e7:74:
63:d2:9f:0b:a2:69:fe:d3:47:49:8f:25:68:76:9d:57:3a:7f:
c5:3f:c1:8d:77:cf:d2:ac:8e:a1:5f:de:c5:8f:46:32:c2:76:
36:06:5c:b1:53:17:0e:13:db:fd:d8:b6:a5:0f:09:7a:1c:fc:
95:9a:92:c3:04:f1:fa:48:de:c1:8a:c6:51:13:5c:bf:e4:37:
ef:97:68:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:25 2024 by rpki-client on console-fra.rpki-client.org