Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/wnoJm-NKonTco-AxR0BORrKprY8.roa
File: wnoJm-NKonTco-AxR0BORrKprY8.roa (raw, json)
Hash identifier: e06G2RwSY1ZMNS419qfDV2HWGgS9TwAPVMDaI13yv6c=
Subject key identifier: C2:7A:09:9B:E3:4A:A2:74:DC:A3:E0:31:47:40:4E:46:B2:A9:AD:8F
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 0183EEE9A0EDA327E2CF3DD2B6CFDC6D75B1
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/wnoJm-NKonTco-AxR0BORrKprY8.roa
Signing time: Wed 19 Oct 2022 06:23:51 +0000
ROA not before: Wed 19 Oct 2022 06:23:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 142578
IP address blocks: 62.60.224.0/19 maxlen: 19
213.176.76.0/22 maxlen: 24
213.176.80.0/21 maxlen: 24
213.176.96.0/20 maxlen: 24
213.176.8.0/21 maxlen: 24
213.176.16.0/22 maxlen: 24
213.176.32.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ee:e9:a0:ed:a3:27:e2:cf:3d:d2:b6:cf:dc:6d:75:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Oct 19 06:23:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c27a099be34aa274dca3e03147404e46b2a9ad8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:c0:bb:3d:9e:eb:69:33:96:25:30:69:76:74:
45:fe:98:67:b4:57:8d:00:2c:39:e4:bc:dc:05:9f:
73:4e:bf:ee:a5:ce:05:c9:5c:ba:df:33:35:e8:4a:
72:4f:b7:ea:71:65:39:72:b2:9d:af:0b:b9:79:08:
06:47:df:80:83:60:bf:bf:f3:3d:e0:9b:98:65:0a:
34:0d:cb:55:9a:93:2e:06:28:57:89:ad:5a:19:fa:
1d:5c:8f:6c:ef:ab:dd:df:9d:5e:07:21:ea:cd:40:
b4:fc:bd:c0:5f:74:3f:4f:cd:52:54:d1:76:9f:c6:
7e:05:63:9f:37:7e:be:57:ea:00:c2:da:f4:15:af:
af:6e:26:0c:bd:02:b1:0c:be:dc:52:6a:d3:f6:a2:
79:04:bc:11:6d:b1:66:bc:60:fe:db:58:65:60:b9:
ad:16:cd:26:6c:2a:34:ea:b9:82:e3:bc:20:cc:3b:
6f:e0:22:d4:cf:15:7d:2a:2d:54:b5:67:c4:40:69:
18:75:d8:3c:a5:09:4a:93:a4:66:f8:7c:44:df:64:
f5:87:bf:ab:87:56:47:88:ff:40:7d:74:a2:57:6d:
9b:88:33:1b:0c:99:fd:c7:1b:41:67:57:ed:fe:78:
ab:be:68:5b:b2:bb:d7:70:b2:df:f9:13:1b:95:31:
67:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:7A:09:9B:E3:4A:A2:74:DC:A3:E0:31:47:40:4E:46:B2:A9:AD:8F
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/wnoJm-NKonTco-AxR0BORrKprY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.224.0/19
213.176.8.0-213.176.19.255
213.176.32.0/19
213.176.76.0-213.176.87.255
213.176.96.0/20
Signature Algorithm: sha256WithRSAEncryption
a6:9c:af:90:f8:54:4e:21:2b:3b:61:c5:ef:eb:b0:2f:fb:c6:
6a:85:80:29:13:3c:09:b1:54:12:5b:c9:af:e0:c6:32:76:14:
5c:f3:6a:87:3b:43:2b:87:db:e1:8d:f8:4d:4b:3e:19:4f:24:
cd:12:e0:a1:f6:f2:e4:54:a6:81:bc:e6:ed:24:a6:f6:98:98:
0c:0a:85:21:bb:6b:9e:82:8c:3a:03:a4:8a:fd:b2:a5:d0:38:
52:c8:f9:b0:dc:30:fd:6e:c8:29:cc:8c:18:90:7a:af:60:c5:
1b:80:44:c6:26:f0:17:3f:25:3b:96:60:8a:17:44:9a:a6:98:
ed:16:8f:8a:52:d9:4c:ef:c1:1c:67:44:39:4e:1e:64:db:23:
82:fc:71:36:b0:ba:70:65:52:ab:67:c3:60:2b:f1:5f:9c:b2:
e1:38:eb:0e:7d:ef:3b:5c:16:41:d2:e0:ca:3e:05:36:f8:50:
f0:e1:84:a9:8c:3a:a4:d3:48:36:34:11:6a:8f:69:dd:cc:09:
4f:09:db:99:51:a1:12:0e:0c:86:1b:75:e7:ce:0b:cf:a9:7a:
7e:ed:ba:72:aa:49:f6:58:82:fc:39:49:6d:1e:64:38:29:28:
dc:0c:e5:72:52:db:cc:6e:1f:4b:d4:a1:42:e7:f7:fb:e6:05:
1b:ab:18:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:30 2024 by rpki-client on console-ams.rpki-client.org