Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/WUT9fw_x006S58_abfbpU1fIhPU.roa
File: WUT9fw_x006S58_abfbpU1fIhPU.roa (raw, json)
Hash identifier: ir+l4IXlBlKq0F2JN/azvoCtTDWtXcpzMsHX1kUeBEM=
Subject key identifier: 59:44:FD:7F:0F:F1:D3:4E:92:E7:CF:DA:6D:F6:E9:53:57:C8:84:F5
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 0D251CC2
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/WUT9fw_x006S58_abfbpU1fIhPU.roa
Signing time: Wed 04 May 2022 07:04:02 +0000
ROA not before: Wed 04 May 2022 07:04:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61138
IP address blocks: 195.180.158.0/24 maxlen: 24
195.252.173.0/24 maxlen: 24
195.180.178.0/24 maxlen: 24
195.180.191.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 220536002 (0xd251cc2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: May 4 07:04:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5944fd7f0ff1d34e92e7cfda6df6e95357c884f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e3:25:8a:15:53:61:6b:1c:1d:6e:42:dc:23:
3d:22:2a:a6:c3:2e:f9:7d:10:f3:96:df:e7:c4:ca:
0a:55:69:0e:c3:94:fe:82:83:2f:13:e0:44:09:fe:
b2:d0:a9:71:82:e3:10:02:6a:06:fb:c5:91:81:7e:
71:2c:27:62:78:e7:c0:0f:8d:ff:56:7b:d9:d3:9a:
be:18:3e:69:32:03:3b:ea:15:87:61:0f:91:b4:80:
a9:0a:09:12:68:39:73:f9:ae:5e:58:dd:0a:72:e7:
da:46:d5:5c:59:f5:f1:de:20:54:24:d5:79:99:29:
f6:43:8c:fd:fa:04:7a:92:06:73:3a:a3:ca:b5:e3:
88:20:4a:44:68:e9:3e:17:b7:53:77:92:ba:36:d4:
ee:99:e4:38:b1:0a:69:40:25:3b:c0:2e:74:66:7d:
45:ea:e0:2a:1d:93:5f:d8:e3:bf:a8:f0:2d:22:67:
9d:be:89:4d:0f:07:28:66:f1:bf:65:0f:e2:a2:3a:
7f:a0:d5:f7:13:92:43:ee:30:96:21:27:6c:df:cf:
ca:a9:e2:ac:2a:46:c4:f5:b4:e5:08:40:32:ea:ea:
5a:22:b9:7a:13:d7:a9:df:f5:26:6b:78:83:f8:7d:
73:d2:9e:f9:c2:02:74:82:41:1c:65:18:f1:a6:9b:
e6:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:44:FD:7F:0F:F1:D3:4E:92:E7:CF:DA:6D:F6:E9:53:57:C8:84:F5
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/WUT9fw_x006S58_abfbpU1fIhPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.180.158.0/24
195.180.178.0/24
195.180.191.0/24
195.252.173.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:17:42:17:79:82:5a:56:b7:f6:73:90:89:d5:38:9e:f7:cb:
84:e6:eb:96:40:51:7b:27:c7:18:32:2e:76:f8:aa:fa:50:73:
95:80:6e:3e:b2:9c:da:c5:29:09:ca:84:ca:c7:5e:a8:d4:7d:
2f:66:39:f1:23:0a:f5:5a:13:71:5c:a2:ab:6f:66:37:4b:a1:
85:67:ec:5f:66:25:a0:3f:da:dc:15:b3:0c:84:7e:4c:63:31:
5f:77:ba:56:ae:9f:30:80:35:bf:58:ea:ec:b9:d0:b8:8c:59:
27:50:28:38:84:28:4e:af:fe:92:56:a5:60:e9:5d:4b:fc:68:
b2:fb:19:20:1f:f9:a4:82:50:0f:d7:bd:25:6c:35:75:83:9e:
22:43:ad:c5:9e:1b:a1:92:e1:c3:7a:c5:31:7b:34:fe:92:19:
e4:0c:cb:96:37:76:81:d5:c0:13:32:c2:16:87:9b:2f:d7:ce:
ca:15:04:92:de:99:7e:87:d0:71:86:a5:9c:04:35:02:b5:78:
44:e8:65:21:1e:14:ff:19:97:02:90:9a:40:20:7c:5f:d5:99:
d9:aa:40:74:a7:12:16:a7:77:ff:45:8c:c6:50:12:1f:77:23:
b0:0f:b8:28:a1:6c:01:fa:02:11:84:59:6a:2a:c1:0b:2e:5e:
e2:1d:5f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:42 2023 by rpki-client on console-fra.rpki-client.org