Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/WUIg3WYDbOl6PW_03eicVfWRF2s.roa
File: WUIg3WYDbOl6PW_03eicVfWRF2s.roa (raw, json)
Hash identifier: UhNS0yXMN1bdSpdeV/Bvw/Htrcdxs8kj+vEWsyqOooQ=
Subject key identifier: 59:42:20:DD:66:03:6C:E9:7A:3D:6F:F4:DD:E8:9C:55:F5:91:17:6B
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 0A639433
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/WUIg3WYDbOl6PW_03eicVfWRF2s.roa
Signing time: Wed 13 Apr 2022 08:33:51 +0000
ROA not before: Wed 13 Apr 2022 08:33:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 26636
IP address blocks: 212.87.212.0/22 maxlen: 22
2.58.196.0/22 maxlen: 22
2.58.200.0/22 maxlen: 22
37.221.92.0/22 maxlen: 22
2.56.246.0/23 maxlen: 23
147.78.124.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 174298163 (0xa639433)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Apr 13 08:33:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=594220dd66036ce97a3d6ff4dde89c55f591176b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:61:42:26:6d:bb:59:35:b1:1e:ee:22:c0:a7:
ff:bd:a8:2b:8a:06:a9:8c:13:84:32:f4:da:45:87:
01:53:39:d9:db:ab:23:f3:4e:8a:7d:ea:62:fb:a8:
83:86:1d:a7:91:9c:85:f1:b5:a1:87:a5:6e:09:c9:
e2:bc:59:4c:ad:92:27:5b:01:0f:d6:c1:9a:ab:53:
2c:97:83:8e:ed:11:94:67:3a:fe:ff:20:98:90:4d:
08:61:69:f4:22:3e:0d:81:6d:71:26:86:78:41:2f:
ae:6f:9c:59:4b:9b:cf:38:68:95:87:fe:0c:ba:74:
e4:99:9b:da:e9:77:64:5e:5a:3f:35:e7:0b:69:08:
cf:a7:fa:58:8e:92:ec:3b:d4:1d:46:c2:f7:d8:e8:
7a:f5:eb:27:6c:67:17:c2:97:11:9e:0c:b5:b9:4c:
3c:b8:8e:92:76:2d:49:f3:f0:5d:59:f3:c1:86:af:
ae:68:2c:19:04:b2:3e:ff:ee:74:4d:f1:1a:9f:a9:
a6:a9:f4:b9:ed:42:a7:93:d8:8a:75:78:b5:f7:ab:
fb:07:62:14:47:4a:de:0d:61:f1:11:81:0f:06:6f:
da:0a:c3:33:4a:21:5d:36:82:89:26:7a:b8:ff:0c:
4e:70:3b:59:0a:d7:59:3e:af:9f:cd:93:c1:2e:0f:
f9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:42:20:DD:66:03:6C:E9:7A:3D:6F:F4:DD:E8:9C:55:F5:91:17:6B
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/WUIg3WYDbOl6PW_03eicVfWRF2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.246.0/23
2.58.196.0-2.58.203.255
37.221.92.0/22
147.78.124.0/22
212.87.212.0/22
Signature Algorithm: sha256WithRSAEncryption
65:f7:b0:7b:ef:8a:9a:4e:35:7a:7a:62:bf:74:30:ba:e8:41:
35:bb:7e:c0:94:e7:d5:eb:4a:d4:ef:3b:f0:f0:1b:86:1c:55:
bc:ee:bc:c0:5f:2d:f7:0f:6e:e1:fc:b4:9d:d0:1c:b6:ef:d1:
87:da:a4:85:22:56:3f:d0:4a:1a:d6:79:40:c7:05:d7:8c:e0:
8f:81:83:41:54:c9:58:3b:cb:41:b8:39:18:4e:1a:4e:0d:99:
a6:34:69:e2:35:ab:eb:4c:63:48:92:74:66:83:29:ff:4c:36:
be:fd:81:3f:f6:89:94:8b:66:2b:b5:b3:2f:ba:24:92:14:79:
54:9d:eb:36:30:55:b0:82:28:ce:e8:a5:5c:39:69:70:79:60:
3e:76:53:b6:e0:eb:b7:28:f1:43:68:b7:3b:ac:a6:55:af:91:
95:f9:d5:60:aa:83:e6:57:66:c8:86:3b:46:c0:30:0d:2f:b0:
fe:52:75:aa:4c:74:80:7a:e7:57:ef:67:ef:89:06:ea:ac:a5:
6f:04:c9:63:1a:c4:8c:4c:ee:50:ed:3c:97:36:1c:8b:67:6a:
4e:86:da:d5:33:21:08:76:ef:82:3b:d7:29:96:7a:00:37:10:
c4:b4:fb:55:59:ee:40:f7:b2:98:22:c6:4b:44:db:e3:1c:c8:
7f:b6:fc:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:28 2024 by rpki-client on console-fra.rpki-client.org