Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/WRsURcULOQh44rsYwtxEi04ayUU.roa
File: WRsURcULOQh44rsYwtxEi04ayUU.roa (raw, json)
Hash identifier: Phcgg/7lWnGwh/wQkCrJx54U4GicurClk+QRQiJyrD0=
Subject key identifier: 59:1B:14:45:C5:0B:39:08:78:E2:BB:18:C2:DC:44:8B:4E:1A:C9:45
Certificate issuer: /CN=7dc8911682bc5ca71cece1efe3ac135bfdb59dd6
Certificate serial: 021BAA3B
Authority key identifier: 7D:C8:91:16:82:BC:5C:A7:1C:EC:E1:EF:E3:AC:13:5B:FD:B5:9D:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fciRFoK8XKcc7OHv46wTW_21ndY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/WRsURcULOQh44rsYwtxEi04ayUU.roa
Signing time: Sat 01 Jan 2022 13:05:26 +0000
ROA not before: Sat 01 Jan 2022 13:05:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8549
IP address blocks: 87.237.88.0/21 maxlen: 22
80.77.208.0/20 maxlen: 24
193.24.32.0/22 maxlen: 22
185.199.192.0/22 maxlen: 22
2a03:f00::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35367483 (0x21baa3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dc8911682bc5ca71cece1efe3ac135bfdb59dd6
Validity
Not Before: Jan 1 13:05:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=591b1445c50b390878e2bb18c2dc448b4e1ac945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:67:b8:e0:69:d0:3a:f7:d0:4a:be:71:bd:04:
55:54:33:c7:f5:4b:91:59:bf:00:cd:31:3b:fb:1f:
81:07:bc:f7:ff:11:f0:e0:a4:1a:93:37:2b:7c:ed:
e6:b2:38:55:c5:12:5d:70:2e:0d:b3:e9:5a:6b:17:
f6:6f:b0:e9:3b:7e:c4:5f:e8:5f:89:e8:59:f3:8a:
ed:d4:be:44:68:9f:ba:22:2c:5b:0d:23:e7:89:60:
2d:c9:41:be:b9:36:be:77:ed:48:64:b6:55:1b:85:
37:ef:ce:59:9a:d0:14:76:cc:7d:57:3d:d8:87:aa:
67:06:25:33:4d:5e:fd:c5:2d:1e:24:6f:1e:57:9f:
6b:98:cd:20:aa:9b:71:2c:c5:c6:f4:1c:40:4b:06:
53:4e:22:18:06:28:7b:c9:5d:dc:a6:12:40:18:b8:
72:ef:f1:a4:09:ab:3c:89:b4:10:68:28:a8:a8:cb:
bb:a3:a4:e6:99:60:54:99:d1:b5:05:52:6b:01:34:
f8:35:c8:c5:a9:67:80:eb:4d:4f:50:01:dd:a3:65:
b7:47:32:77:29:93:27:31:60:da:1f:19:08:0d:9c:
33:63:9e:07:96:b7:36:ac:e6:de:81:3c:eb:ee:78:
9f:bd:a5:6b:db:20:2c:6e:85:2f:46:b8:e2:5a:6a:
13:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:1B:14:45:C5:0B:39:08:78:E2:BB:18:C2:DC:44:8B:4E:1A:C9:45
X509v3 Authority Key Identifier:
keyid:7D:C8:91:16:82:BC:5C:A7:1C:EC:E1:EF:E3:AC:13:5B:FD:B5:9D:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fciRFoK8XKcc7OHv46wTW_21ndY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/WRsURcULOQh44rsYwtxEi04ayUU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.77.208.0/20
87.237.88.0/21
185.199.192.0/22
193.24.32.0/22
IPv6:
2a03:f00::/29
Signature Algorithm: sha256WithRSAEncryption
8a:65:76:cc:c1:a4:dd:7d:09:79:48:5c:0e:de:5d:93:18:30:
bb:1a:aa:af:2b:fe:84:70:01:84:3f:4e:8a:1f:3d:73:3b:54:
da:2e:1f:47:11:de:52:a5:58:2c:0f:af:43:4b:10:b0:7f:a8:
42:85:f4:b9:25:96:85:9a:10:26:e9:28:db:8b:8e:5c:5a:7a:
17:a5:4a:e9:ba:53:91:16:5d:80:8d:39:22:5a:3e:fe:3f:5d:
d5:6c:42:d6:ec:5f:b0:e3:29:92:a6:a4:1e:e0:dd:3b:ad:f5:
c8:3e:0f:c3:69:f2:ef:09:f7:f7:87:25:ab:ea:09:79:cd:b0:
1a:55:b2:20:87:92:ad:dd:9d:2e:cf:7e:85:d2:15:1d:be:1f:
64:d4:7f:a4:40:9d:d7:75:c9:61:58:12:0d:91:60:fa:d9:4c:
3a:54:5f:50:33:d3:95:ce:58:2b:2d:5c:62:dd:dd:e7:3b:9d:
5f:6b:f6:41:db:87:4c:d9:6c:ca:fa:36:52:48:c2:7a:34:8b:
dd:a3:e2:36:df:db:2f:04:8a:fe:d4:e6:37:28:87:c7:41:e3:
e8:b8:3f:5a:76:67:cf:39:de:f5:af:31:10:09:ed:6a:22:a7:
4c:38:43:e2:6e:da:68:05:77:5e:ef:39:0b:80:20:24:3d:5d:
51:80:11:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:10 2024 by rpki-client on console-ams.rpki-client.org