Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/WlTZ4Lisn_SPulikoin4j6bf6TU.roa
File: WlTZ4Lisn_SPulikoin4j6bf6TU.roa (raw, json)
Hash identifier: UB8sAjIKuHeumozf1NifW/OWqjHvqO2kZ0+2Brla9vk=
Subject key identifier: 5A:54:D9:E0:B8:AC:9F:F4:8F:BA:58:A4:A2:29:F8:8F:A6:DF:E9:35
Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial: 0502F53B
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/WlTZ4Lisn_SPulikoin4j6bf6TU.roa
Signing time: Tue 19 Apr 2022 14:38:30 +0000
ROA not before: Tue 19 Apr 2022 14:38:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8308
IP address blocks: 195.164.0.0/16 maxlen: 16
194.181.92.0/24 maxlen: 24
217.9.160.0/20 maxlen: 20
217.9.160.0/24 maxlen: 24
217.9.165.0/24 maxlen: 24
194.181.0.0/16 maxlen: 16
195.187.101.0/24 maxlen: 24
195.187.0.0/18 maxlen: 18
193.59.0.0/16 maxlen: 16
194.181.255.0/24 maxlen: 24
195.187.128.0/17 maxlen: 17
2001:a10::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84079931 (0x502f53b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Validity
Not Before: Apr 19 14:38:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5a54d9e0b8ac9ff48fba58a4a229f88fa6dfe935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d1:02:17:54:3c:ed:e7:67:c5:5c:a5:82:bb:
d9:e3:27:53:ef:dc:43:9f:14:af:21:71:cf:61:0f:
2d:dd:9d:33:8f:9b:68:d2:2e:24:12:e2:58:c5:42:
48:a4:e9:9a:40:09:ec:d7:26:69:0e:3b:f1:5d:20:
ea:9a:7b:7d:3c:74:1c:a8:8e:38:64:74:6d:09:3f:
c1:32:34:63:36:5d:00:6e:1b:de:54:20:63:83:40:
6e:ae:02:56:fa:26:c6:91:bc:f5:97:8e:15:dd:8c:
d1:91:10:df:7b:dc:d5:b7:59:f5:f4:c1:6b:5e:c9:
8c:23:8b:2f:df:da:08:8d:6e:ab:13:38:c1:6b:c2:
9b:da:65:03:bc:86:3a:b7:e4:07:91:3e:d4:f7:48:
52:28:4a:ba:d3:f5:2e:8a:21:03:c0:12:5a:69:ba:
64:80:6c:d6:7f:35:7c:cf:7a:a6:08:08:b7:39:c8:
fb:b1:49:f9:95:70:39:3a:17:14:72:42:3f:f7:9f:
d8:64:f3:2d:c1:51:1a:18:7f:32:fc:9c:12:ed:ef:
ed:70:21:26:07:5d:7c:0d:b5:e2:ce:4f:91:ed:60:
28:63:8e:3f:41:a9:bf:e8:bf:28:06:c5:1b:d8:65:
fb:ee:70:d9:fa:1d:f7:77:c1:bd:40:17:12:b2:ff:
99:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:54:D9:E0:B8:AC:9F:F4:8F:BA:58:A4:A2:29:F8:8F:A6:DF:E9:35
X509v3 Authority Key Identifier:
keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/WlTZ4Lisn_SPulikoin4j6bf6TU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.59.0.0/16
194.181.0.0/16
195.164.0.0/16
195.187.0.0/18
195.187.101.0/24
195.187.128.0/17
217.9.160.0/20
IPv6:
2001:a10::/32
Signature Algorithm: sha256WithRSAEncryption
1a:13:2e:c7:b5:8e:e7:7d:e5:08:00:91:18:3f:9e:6f:96:72:
eb:b0:ca:cb:b1:22:9c:f2:64:64:88:c6:7f:3f:36:37:c2:a4:
4c:90:1f:8d:87:66:73:ce:57:6b:63:d3:ac:fa:58:96:fc:14:
6f:3e:0e:d4:e7:3c:a1:d5:76:b5:99:09:5c:51:0c:62:a0:9d:
d1:a0:d6:ae:88:ba:be:84:a4:ed:ff:15:16:f7:09:b9:0a:96:
7a:83:63:25:3e:36:e5:95:d4:e0:d7:45:82:cd:bb:88:2e:36:
29:71:9f:4e:43:65:ee:d3:47:04:3b:1e:07:b0:1c:bd:70:73:
2d:2a:28:f7:46:39:f9:a9:7f:a5:6c:09:ca:9b:fe:c8:18:63:
a6:32:f4:e0:06:4c:28:93:86:3d:58:a8:cf:62:88:58:2f:12:
fa:a4:c6:93:f5:a5:0e:11:f1:79:d5:a0:ff:c2:1e:d9:c6:dc:
43:81:f5:28:90:e0:ac:79:7d:1d:ae:cc:d8:6e:2a:ed:33:a4:
79:a6:d7:b6:75:91:2d:65:40:7c:11:75:82:16:7b:53:ab:21:
93:80:12:56:cc:5b:71:69:6f:a9:74:a3:d3:0d:cd:dd:1c:df:
dc:8d:fc:f0:f8:30:36:c3:68:1c:2a:f9:01:30:f1:13:f9:68:
08:9a:f4:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:40 2024 by rpki-client on console-fra.rpki-client.org