Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/WUIN0o_TkuD4_XM61t4WdydYF9U.roa
File: WUIN0o_TkuD4_XM61t4WdydYF9U.roa (raw, json)
Hash identifier: oFToPDHKN3Ofta1v5QvTblU9cf+xnAMovtlRb/IKHbw=
Subject key identifier: 59:42:0D:D2:8F:D3:92:E0:F8:FD:73:3A:D6:DE:16:77:27:58:17:D5
Certificate issuer: /CN=8c77013e488a09c709b632246d9405da458c5538
Certificate serial: 11F542AE
Authority key identifier: 8C:77:01:3E:48:8A:09:C7:09:B6:32:24:6D:94:05:DA:45:8C:55:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jHcBPkiKCccJtjIkbZQF2kWMVTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/WUIN0o_TkuD4_XM61t4WdydYF9U.roa
Signing time: Sat 01 Jan 2022 15:04:49 +0000
ROA not before: Sat 01 Jan 2022 15:04:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39564
IP address blocks: 194.11.27.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 301286062 (0x11f542ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c77013e488a09c709b632246d9405da458c5538
Validity
Not Before: Jan 1 15:04:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=59420dd28fd392e0f8fd733ad6de1677275817d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b5:a5:32:4e:30:ca:09:54:f3:9d:59:30:de:
91:25:e7:37:0a:bd:8c:df:9d:ca:3a:35:25:b5:d9:
89:f4:29:a9:ea:56:25:14:24:bb:2e:e5:28:35:c6:
5d:54:e6:5b:02:dd:37:df:9d:39:63:ed:ff:86:b6:
99:cd:b0:d5:05:14:86:e0:14:b4:ee:e0:4a:ba:90:
da:ca:ca:db:b8:b9:c5:23:d3:34:2e:84:1c:34:dd:
69:f1:01:09:69:3f:02:09:9f:41:a0:98:c5:45:8b:
28:8c:e9:c1:63:0f:7c:27:3a:6a:19:f6:13:e7:5c:
e9:ca:5b:b1:bb:24:cf:20:81:31:70:86:c5:cc:7b:
5c:00:ca:db:0f:c4:a5:06:ea:fd:b7:31:6e:f7:4d:
59:bc:e5:e0:9e:ef:71:7e:27:3b:19:da:5d:31:ea:
04:65:2a:de:d4:43:80:be:34:32:0c:ba:d6:4b:ea:
e5:f2:7a:bf:69:85:dd:21:e4:60:e4:e7:74:a7:d2:
91:45:51:bb:cc:e7:10:70:c8:af:1f:cc:9c:e2:db:
f4:c2:a3:b1:c1:f8:97:68:1c:d1:a3:cf:e8:27:a1:
1e:a8:23:50:34:ff:52:47:4f:2d:7d:69:1d:44:fa:
54:d6:cf:23:01:b5:20:0f:59:20:7b:7c:fa:33:ad:
be:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:42:0D:D2:8F:D3:92:E0:F8:FD:73:3A:D6:DE:16:77:27:58:17:D5
X509v3 Authority Key Identifier:
keyid:8C:77:01:3E:48:8A:09:C7:09:B6:32:24:6D:94:05:DA:45:8C:55:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jHcBPkiKCccJtjIkbZQF2kWMVTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/WUIN0o_TkuD4_XM61t4WdydYF9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/jHcBPkiKCccJtjIkbZQF2kWMVTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.11.27.0/24
Signature Algorithm: sha256WithRSAEncryption
51:4f:cd:9b:ca:0e:04:bf:0f:33:f5:a0:61:1c:df:77:fc:cf:
c6:39:9b:58:7c:81:9d:8b:d7:5b:ce:f0:52:51:68:59:06:06:
90:ea:25:9b:2e:77:fa:61:c5:da:d3:ed:c6:61:ee:fb:6c:d6:
23:24:36:0e:4d:67:e3:37:6a:4c:aa:37:78:f0:33:f8:d2:1e:
a2:cb:f2:07:76:6a:76:80:cf:0a:7e:33:cf:8d:d5:39:4e:1c:
8d:89:d8:0f:b1:34:3a:6d:05:d3:84:ea:6b:b6:05:3d:0e:a2:
22:66:0b:cc:df:53:8d:06:11:21:9e:7f:55:76:94:ea:23:06:
80:c5:ff:c4:65:5f:53:4d:07:b4:4d:37:6e:df:c8:bb:fb:24:
99:18:d7:e5:c8:03:53:c6:58:89:06:1b:fd:1f:49:6d:99:c1:
70:9a:8b:06:da:03:b1:39:0f:f1:2a:60:f2:4e:37:14:33:a7:
f9:f5:b3:07:c4:e4:a5:14:9e:af:c2:e3:32:8a:34:d3:1d:ee:
a5:07:01:bb:f8:b6:3b:12:11:2b:40:25:76:fe:d5:3a:04:fd:
f4:c0:d9:bb:a2:3b:92:ea:de:5a:76:5f:e0:82:49:a3:fa:c2:
00:91:0c:db:37:ed:4d:16:c2:be:be:ce:5d:94:a9:2f:6b:91:
a2:58:4f:79
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEEfVCrjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
Yzc3MDEzZTQ4OGEwOWM3MDliNjMyMjQ2ZDk0MDVkYTQ1OGM1NTM4MB4XDTIyMDEw
MTE1MDQ0OVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTk0MjBkZDI4ZmQz
OTJlMGY4ZmQ3MzNhZDZkZTE2NzcyNzU4MTdkNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJi1pTJOMMoJVPOdWTDekSXnNwq9jN+dyjo1JbXZifQpqepW
JRQkuy7lKDXGXVTmWwLdN9+dOWPt/4a2mc2w1QUUhuAUtO7gSrqQ2srK27i5xSPT
NC6EHDTdafEBCWk/AgmfQaCYxUWLKIzpwWMPfCc6ahn2E+dc6cpbsbskzyCBMXCG
xcx7XADK2w/EpQbq/bcxbvdNWbzl4J7vcX4nOxnaXTHqBGUq3tRDgL40Mgy61kvq
5fJ6v2mF3SHkYOTndKfSkUVRu8znEHDIrx/MnOLb9MKjscH4l2gc0aPP6CehHqgj
UDT/UkdPLX1pHUT6VNbPIwG1IA9ZIHt8+jOtvk8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRZQg3Sj9OS4Pj9czrW3hZ3J1gX1TAfBgNVHSMEGDAWgBSMdwE+SIoJxwm2
MiRtlAXaRYxVODAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2pIY0JQa2lLQ2NjSnRqSWtiWlFGMmtXTVZUZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTEvMTY4NTA5LTJjZjMtNDgzZC1iY2Q4LTAyMTI5NTMzYTMzZC8x
L1dVSU4wb19Ua3VENF9YTTYxdDRXZHlkWUY5VS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTEv
MTY4NTA5LTJjZjMtNDgzZC1iY2Q4LTAyMTI5NTMzYTMzZC8xL2pIY0JQa2lLQ2Nj
SnRqSWtiWlFGMmtXTVZUZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMILGzANBgkqhkiG9w0BAQsFAAOC
AQEAUU/Nm8oOBL8PM/WgYRzfd/zPxjmbWHyBnYvXW87wUlFoWQYGkOolmy53+mHF
2tPtxmHu+2zWIyQ2Dk1n4zdqTKo3ePAz+NIeosvyB3ZqdoDPCn4zz43VOU4cjYnY
D7E0Om0F04Tqa7YFPQ6iImYLzN9TjQYRIZ5/VXaU6iMGgMX/xGVfU00HtE03bt/I
u/skmRjX5cgDU8ZYiQYb/R9JbZnBcJqLBtoDsTkP8Spg8k43FDOn+fWzB8TkpRSe
r8LjMoo00x3upQcBu/i2OxIRK0Aldv7VOgT99MDZu6I7kureWnZf4IJJo/rCAJEM
2zftTRbCvr7OXZSpL2uRolhPeQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:00 2023 by rpki-client on console-ams.rpki-client.org