Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/W-YAroJiQaf79cReRGkZMdthHAk.roa
File: W-YAroJiQaf79cReRGkZMdthHAk.roa (raw, json)
Hash identifier: m5ozL5eEZIW81kYTVWfvdVz1gpuDHzGCEuZa3NOk7n4=
Subject key identifier: 5B:E6:00:AE:82:62:41:A7:FB:F5:C4:5E:44:69:19:31:DB:61:1C:09
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 01840983B4157D301FCF87D39A7565734CD0
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/W-YAroJiQaf79cReRGkZMdthHAk.roa
Signing time: Mon 24 Oct 2022 10:22:16 +0000
ROA not before: Mon 24 Oct 2022 10:22:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57844
IP address blocks: 77.83.38.0/23 maxlen: 24
45.144.214.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:09:83:b4:15:7d:30:1f:cf:87:d3:9a:75:65:73:4c:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Oct 24 10:22:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5be600ae826241a7fbf5c45e44691931db611c09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7d:0b:29:37:1b:84:d9:f6:36:34:81:d3:9e:
e7:98:21:c0:4a:2b:6f:ff:fc:61:6a:5a:65:52:03:
6b:3b:a1:3b:2e:66:ff:75:f2:53:c9:c9:1e:6a:43:
39:75:c5:91:b6:43:77:27:78:13:30:3c:1f:7a:51:
03:3a:e0:dc:50:03:e5:ca:7d:95:5a:67:aa:88:45:
9c:bb:4a:ad:a3:e0:f3:c5:06:24:84:16:51:18:a7:
56:5f:04:1b:6b:4b:c4:be:b3:c6:46:d4:aa:6b:f9:
9f:9e:e0:e0:2c:24:32:eb:ad:e5:44:88:ca:7c:b3:
d5:ed:d0:12:12:c1:40:1d:33:c5:2c:4f:a5:cc:24:
a2:4e:4e:af:47:bb:a7:da:c3:b6:a0:bf:4f:d1:6e:
96:22:5c:b3:ab:3b:27:a2:ec:40:bf:bb:84:cb:ed:
94:0c:3a:60:35:16:de:69:11:8e:d1:fd:84:e4:ee:
90:50:62:25:1e:dc:c0:0f:35:5a:f6:93:c3:58:e3:
5d:9c:b7:46:d9:35:b7:a1:45:60:34:33:5c:4e:55:
c6:92:d4:2a:15:66:e6:48:68:72:73:f2:45:33:e3:
f7:f8:9c:b0:7e:74:c6:0c:07:7a:34:76:a4:5b:21:
5f:a4:ef:32:a4:a0:74:d7:8d:4b:1a:c9:c3:b7:ae:
ec:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:E6:00:AE:82:62:41:A7:FB:F5:C4:5E:44:69:19:31:DB:61:1C:09
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/W-YAroJiQaf79cReRGkZMdthHAk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.214.0/23
77.83.38.0/23
Signature Algorithm: sha256WithRSAEncryption
94:c7:ea:da:ff:e8:12:bf:de:99:b4:3f:d6:4c:ab:d2:f9:64:
ab:de:14:c6:8b:02:94:83:05:5d:39:20:2a:36:cd:ff:54:11:
8f:66:6d:e6:d3:a5:f5:a2:fe:40:4a:74:54:ca:2d:16:da:24:
f5:c1:30:59:6e:51:13:33:50:ca:0a:9e:7e:07:c7:62:ff:f1:
c8:8f:87:3d:37:ef:10:32:26:5a:bb:d6:56:1e:89:53:c7:fc:
fa:15:d3:10:b6:8d:43:23:06:f4:df:6d:d2:48:99:3a:3c:c0:
e2:ec:d0:a6:05:23:cf:74:35:04:98:da:b2:21:28:1a:69:f0:
5a:07:f5:ba:f1:d3:fa:77:98:2f:67:4e:49:af:87:c1:e3:a5:
93:1f:d4:1a:ee:e7:bb:b5:68:6c:92:a5:0b:f4:63:0a:65:fe:
ad:aa:2f:59:ea:60:28:e4:dc:ec:bc:29:a0:cc:b5:61:42:fe:
49:e3:2e:a1:6b:ff:bd:c7:54:52:b0:20:8b:39:ca:d9:21:cb:
66:f2:72:36:64:e7:51:02:30:6f:10:4a:56:73:a1:e8:3e:c0:
09:fc:8b:9c:c4:e0:e2:6d:b2:fb:8e:d6:ea:5e:7b:c2:3d:b2:
f4:78:a5:0f:df:a1:9a:e9:ed:1a:48:10:57:a2:71:66:80:fd:
f0:6a:d4:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:20 2023 by rpki-client on console-ams.rpki-client.org