Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/WUuWolQvmOEHTw16V-yYD0agiAA.roa
File: WUuWolQvmOEHTw16V-yYD0agiAA.roa (raw, json)
Hash identifier: K/0QlkYWGdGCHP6TG7XhFT7HP3zpF9oZNET5wcu9qpg=
Subject key identifier: 59:4B:96:A2:54:2F:98:E1:07:4F:0D:7A:57:EC:98:0F:46:A0:88:00
Certificate issuer: /CN=7d5695786f8450d1041dc88ad892cbb570d5972b
Certificate serial: 01831EB4682AAC4799A7CFDDDA8C629265A0
Authority key identifier: 7D:56:95:78:6F:84:50:D1:04:1D:C8:8A:D8:92:CB:B5:70:D5:97:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVaVeG-EUNEEHciK2JLLtXDVlys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/WUuWolQvmOEHTw16V-yYD0agiAA.roa
Signing time: Thu 08 Sep 2022 20:04:43 +0000
ROA not before: Thu 08 Sep 2022 20:04:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 45.11.173.0/24 maxlen: 24
45.11.174.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:1e:b4:68:2a:ac:47:99:a7:cf:dd:da:8c:62:92:65:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d5695786f8450d1041dc88ad892cbb570d5972b
Validity
Not Before: Sep 8 20:04:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=594b96a2542f98e1074f0d7a57ec980f46a08800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:59:f9:21:74:45:88:3b:c4:03:fa:c6:04:56:
70:ba:5a:3a:79:50:c7:45:26:66:73:8d:7c:83:53:
09:90:fc:1e:5e:d1:f2:51:87:4f:fe:4f:e2:2c:7d:
54:3d:e1:1c:c9:72:43:5c:7c:84:7c:26:eb:f9:dc:
16:c1:3b:4b:f9:14:cb:90:26:44:38:0e:45:e5:4a:
49:8a:6e:77:d3:c6:fc:fd:30:10:66:96:4d:c1:43:
dc:3f:0d:a6:6b:f3:39:7c:9c:fb:4f:be:bd:1a:bc:
63:bf:2b:ac:03:b1:31:29:ca:67:71:b0:03:7c:26:
02:26:8f:83:c0:72:a6:fb:c7:99:18:2c:dc:2f:0c:
2d:b5:72:d3:f2:03:44:47:7e:32:76:59:6f:15:97:
7b:8b:b9:27:4a:e9:8a:f2:f2:d4:2e:f4:af:7a:ef:
5a:53:76:dd:8f:5c:e7:ae:bf:0d:c9:00:6e:2b:5d:
9d:75:28:e1:06:14:ad:76:1e:89:32:92:a3:69:ff:
eb:59:ae:50:19:e7:a5:76:2a:8e:c9:10:9b:e2:72:
f5:81:e8:11:29:a6:af:33:d7:ef:b4:92:01:c4:c8:
2b:49:cc:31:08:3d:49:34:c7:ef:eb:8b:4e:0c:c3:
7a:99:3c:bf:40:85:9b:ba:8d:5f:6e:15:8d:66:62:
e3:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:4B:96:A2:54:2F:98:E1:07:4F:0D:7A:57:EC:98:0F:46:A0:88:00
X509v3 Authority Key Identifier:
keyid:7D:56:95:78:6F:84:50:D1:04:1D:C8:8A:D8:92:CB:B5:70:D5:97:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVaVeG-EUNEEHciK2JLLtXDVlys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/WUuWolQvmOEHTw16V-yYD0agiAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.173.0-45.11.174.255
Signature Algorithm: sha256WithRSAEncryption
b1:55:a5:cc:c0:f8:20:a5:b3:ea:4f:55:55:85:f3:80:22:c3:
94:0f:d2:55:75:a7:5c:8a:ba:84:70:28:fe:91:32:24:42:6a:
14:3c:9e:93:26:cd:fd:c0:97:8a:46:ad:f9:07:e2:a6:0a:1b:
be:7d:5c:3f:45:3c:3c:5c:ce:fe:9a:1e:28:c2:0d:1e:0e:cb:
36:a8:b3:ec:f1:e8:e7:a1:47:57:ef:35:cb:6d:6f:0b:1e:40:
90:47:10:97:44:de:3e:82:8a:d7:3e:3a:7d:ca:ad:ff:d3:60:
02:47:b9:f9:31:3d:59:9f:a9:0e:b7:c2:ea:53:a9:4d:be:23:
0b:05:6a:67:99:ef:29:fd:b5:a5:f4:7c:60:80:f0:a6:5c:f0:
7a:2c:11:9e:fa:8c:f4:10:b4:b9:b8:f2:c1:5a:52:32:17:8f:
4e:03:f3:29:98:d0:f4:01:2c:7a:4a:0f:f9:ce:cc:e2:64:2b:
3d:6e:52:10:2c:65:6f:98:d6:d6:63:a8:78:a5:25:3d:93:f7:
58:ef:2e:bb:46:97:dd:63:7b:40:bd:40:e0:d0:ec:5d:eb:40:
72:5d:6c:6a:0a:30:b2:3b:15:51:7c:e7:f1:7a:5d:48:7c:18:
35:30:27:f8:90:8c:3b:8c:42:28:5a:7f:da:51:cd:5d:df:93:
78:55:20:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:12 2024 by rpki-client on console-fra.rpki-client.org