Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/we2jlpwZ4WRIZ789TfpkGgPIINs.roa
File: we2jlpwZ4WRIZ789TfpkGgPIINs.roa (raw, json)
Hash identifier: uVhEfOSp3OhefS1s/qDUkXF1kFqspQbRQTPRkBx/vMI=
Subject key identifier: C1:ED:A3:96:9C:19:E1:64:48:67:BF:3D:4D:FA:64:1A:03:C8:20:DB
Certificate issuer: /CN=ba0f864ba0fa204de93ac5aa84f728b6220c6f7c
Certificate serial: 7890
Authority key identifier: BA:0F:86:4B:A0:FA:20:4D:E9:3A:C5:AA:84:F7:28:B6:22:0C:6F:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ug-GS6D6IE3pOsWqhPcotiIMb3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/we2jlpwZ4WRIZ789TfpkGgPIINs.roa
Signing time: Mon 23 May 2022 08:27:11 +0000
ROA not before: Mon 23 May 2022 08:27:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201962
IP address blocks: 91.205.12.0/22 maxlen: 22
185.58.28.0/22 maxlen: 22
45.153.176.0/22 maxlen: 22
2a04:df80::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30864 (0x7890)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba0f864ba0fa204de93ac5aa84f728b6220c6f7c
Validity
Not Before: May 23 08:27:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c1eda3969c19e1644867bf3d4dfa641a03c820db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:51:e3:3f:7c:da:9c:df:41:6f:3c:c6:34:2a:
7c:4a:47:42:a0:9d:eb:72:dd:ff:74:46:b4:fc:84:
2b:b0:52:68:72:29:83:94:3f:06:8a:91:d5:5a:32:
c5:67:03:a3:cd:c9:47:5e:68:1a:e9:49:ec:42:0c:
14:de:82:72:48:ec:a9:4f:f6:02:f3:60:0b:d8:32:
ba:32:48:bb:93:cf:07:8e:99:1f:05:83:c9:3d:aa:
90:32:c4:1d:3f:53:cf:a2:0d:22:d1:70:b6:ec:a3:
32:27:3e:ad:d3:bd:dd:19:18:b5:64:81:61:83:6d:
e8:b7:6e:5d:3a:98:0b:59:a1:11:d6:ac:64:22:79:
be:98:e5:10:5e:c9:71:a5:45:e4:c0:32:a1:29:c4:
14:b4:8e:be:40:8a:ff:97:7c:ea:94:f2:57:c0:3a:
35:3a:f8:cf:bc:be:8a:9b:6b:f0:08:47:25:6c:82:
51:43:46:92:c0:d7:89:d2:dc:5a:5a:16:86:6a:7d:
a4:40:be:db:56:ca:bd:40:25:80:f1:70:60:cb:22:
b4:eb:48:ba:56:00:a0:c2:a3:7b:b7:b1:87:dd:68:
d6:49:00:57:c5:72:40:0d:b9:d0:38:6f:25:10:0a:
37:09:3f:f6:1c:17:07:d1:68:98:c5:a0:07:30:0a:
09:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:ED:A3:96:9C:19:E1:64:48:67:BF:3D:4D:FA:64:1A:03:C8:20:DB
X509v3 Authority Key Identifier:
keyid:BA:0F:86:4B:A0:FA:20:4D:E9:3A:C5:AA:84:F7:28:B6:22:0C:6F:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ug-GS6D6IE3pOsWqhPcotiIMb3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/we2jlpwZ4WRIZ789TfpkGgPIINs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/ug-GS6D6IE3pOsWqhPcotiIMb3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.176.0/22
91.205.12.0/22
185.58.28.0/22
IPv6:
2a04:df80::/29
Signature Algorithm: sha256WithRSAEncryption
83:e8:13:ae:fc:1b:d1:2d:32:8f:93:4a:ee:d5:11:91:05:e1:
f9:0f:f2:e8:25:8e:e5:c9:1e:ba:3e:7a:05:e4:99:18:1d:ee:
e7:f6:16:05:33:a9:ab:7f:93:52:ef:ee:50:32:74:e3:ba:70:
16:ef:c5:67:b2:9c:0d:9a:e2:8a:a3:2c:ef:1d:7b:2a:0c:a7:
40:c0:5e:31:10:c2:a3:e3:0b:da:69:69:22:09:f2:33:27:e0:
52:ee:fc:9a:69:26:b9:38:6e:48:19:88:8c:a2:4c:79:75:fd:
91:d4:d7:c2:b6:5e:54:51:23:54:8b:cf:e8:49:ab:d3:2b:95:
15:78:c7:93:33:4d:1a:9f:08:ec:0b:2c:10:d8:87:b1:cd:a7:
a0:88:28:33:0f:56:1e:6b:a4:59:f3:29:ad:ff:0a:35:bf:c5:
d0:65:fa:0c:95:17:aa:5e:11:b0:a3:dc:7e:21:a1:78:db:89:
5e:cf:11:fb:92:eb:e0:9d:bf:86:22:2a:58:75:d0:a3:24:fd:
96:6c:2d:17:02:32:1f:40:f5:3e:d3:22:ba:7c:6d:8a:62:74:
c2:f0:4f:0d:08:84:56:72:ba:fc:1a:b2:98:0f:af:51:00:9b:
d3:ff:ae:ce:e5:c4:07:da:9c:0e:14:f8:4d:f6:f9:4b:f7:0b:
93:9e:ff:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:20 2024 by rpki-client on console-fra.rpki-client.org