Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/wlXe3bTYU7gevvOG2WaBjwr6sEY.roa
File: wlXe3bTYU7gevvOG2WaBjwr6sEY.roa (raw, json)
Hash identifier: dPrXT/2RNN1EFBlEQFLupvfTjXkCTvac0+YPp2nK0Xg=
Subject key identifier: C2:55:DE:DD:B4:D8:53:B8:1E:BE:F3:86:D9:66:81:8F:0A:FA:B0:46
Certificate issuer: /CN=089bbb09a5fbef6135c2d920bf27bb61f5c2e09d
Certificate serial: 0D50A3CA
Authority key identifier: 08:9B:BB:09:A5:FB:EF:61:35:C2:D9:20:BF:27:BB:61:F5:C2:E0:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJu7CaX772E1wtkgvye7YfXC4J0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/wlXe3bTYU7gevvOG2WaBjwr6sEY.roa
Signing time: Sat 01 Jan 2022 10:55:41 +0000
ROA not before: Sat 01 Jan 2022 10:55:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49820
IP address blocks: 5.35.176.0/21 maxlen: 21
2a10:87c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 223388618 (0xd50a3ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=089bbb09a5fbef6135c2d920bf27bb61f5c2e09d
Validity
Not Before: Jan 1 10:55:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c255deddb4d853b81ebef386d966818f0afab046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:4d:3b:b6:ca:76:59:69:5f:be:01:c5:0a:07:
98:04:84:0c:27:2f:c6:66:e0:9d:51:70:6e:ee:73:
0c:43:57:04:ce:8b:27:c1:dc:c2:e5:7c:ff:8b:ba:
10:42:fa:8f:a7:7f:2f:d0:90:35:05:f9:7b:19:94:
65:8d:53:3f:90:4c:54:c9:b9:95:aa:d5:ad:0f:1d:
a1:ee:be:a7:d1:cf:3d:37:a4:13:cf:fa:b9:29:3f:
19:5b:89:82:ea:b6:40:a2:44:ce:ad:8d:e4:b1:08:
b3:af:67:a7:9d:35:86:c9:e6:81:20:dc:14:93:45:
c1:a9:1e:9c:a8:38:ff:79:1d:7f:6a:be:83:af:9b:
f8:4f:94:3f:32:2b:aa:cd:9a:ef:7a:c6:91:4d:94:
d5:d3:e2:d4:ed:a6:9e:11:7a:50:5a:8f:3d:5d:ce:
0c:06:e8:b4:55:86:f0:ee:6c:19:c6:83:ea:81:4c:
4e:9e:9e:30:22:0b:2b:08:f2:c4:8e:6f:ac:8a:ab:
38:83:18:7b:76:01:0c:21:36:33:27:bd:ed:a3:73:
a7:2d:07:c6:47:43:8f:af:21:44:5e:71:6f:36:5b:
55:a8:86:1a:06:fe:f5:77:72:79:3f:a8:1d:72:f9:
00:4d:1c:83:12:71:c8:e2:05:5c:81:b1:9a:1f:c5:
27:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:55:DE:DD:B4:D8:53:B8:1E:BE:F3:86:D9:66:81:8F:0A:FA:B0:46
X509v3 Authority Key Identifier:
keyid:08:9B:BB:09:A5:FB:EF:61:35:C2:D9:20:BF:27:BB:61:F5:C2:E0:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJu7CaX772E1wtkgvye7YfXC4J0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/wlXe3bTYU7gevvOG2WaBjwr6sEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.176.0/21
IPv6:
2a10:87c0::/29
Signature Algorithm: sha256WithRSAEncryption
91:da:53:b3:5c:a6:dc:8e:0d:d0:dc:7a:88:7b:48:19:2d:37:
2b:16:65:de:e4:48:c0:16:fa:b3:48:d7:e6:d3:18:dd:00:4f:
0e:2a:8b:99:5c:40:3c:a8:f8:27:b6:00:a9:1d:86:b9:73:41:
59:0c:ec:17:21:b8:5c:2f:0a:0e:93:5d:5f:9f:a5:b8:a7:60:
3e:b3:1d:78:7c:7b:9e:01:47:c3:6a:82:2c:78:71:ff:20:16:
88:ce:77:2b:3d:6e:a4:bc:6e:ae:23:66:0a:83:fa:be:af:1f:
a1:19:25:3a:18:f6:85:cf:51:35:e9:37:aa:90:9e:3b:6a:f4:
da:ff:55:81:0a:14:ed:10:da:74:92:0f:b4:13:8c:ff:8b:1e:
a0:bb:81:21:d0:ff:62:4d:97:36:ac:96:b6:4d:4e:56:76:9b:
73:fe:34:83:19:00:86:50:62:29:44:84:bb:bf:cd:74:ae:4c:
6f:8a:d0:5c:d1:90:42:10:e2:d4:aa:24:2a:bd:07:4c:64:90:
e2:bb:7d:6b:e0:ce:0f:88:02:83:77:2c:90:95:d0:1e:b0:5e:
70:54:07:e8:eb:8f:2a:15:db:aa:e1:6f:77:5d:e4:06:f3:1b:
3d:e7:e9:81:9f:7a:7d:5f:d3:ce:a2:c4:c8:0d:9d:07:c6:42:
03:2b:7d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:13 2024 by rpki-client on console-ams.rpki-client.org