Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/wV_BOIY1a2kJ1Q7-0MAT1jTpicc.roa
File: wV_BOIY1a2kJ1Q7-0MAT1jTpicc.roa (raw, json)
Hash identifier: KzArxO/fP+r0+ZenwghSnfzJLHpRug88HilkfAqDdnk=
Subject key identifier: C1:5F:C1:38:86:35:6B:69:09:D5:0E:FE:D0:C0:13:D6:34:E9:89:C7
Certificate issuer: /CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47
Certificate serial: 044A0ECB
Authority key identifier: 23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/wV_BOIY1a2kJ1Q7-0MAT1jTpicc.roa
Signing time: Tue 15 Feb 2022 10:46:55 +0000
ROA not before: Tue 15 Feb 2022 10:46:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39143
IP address blocks: 89.188.162.0/24 maxlen: 24
185.211.240.0/22 maxlen: 23
185.211.241.0/24 maxlen: 24
2a03:8641::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71962315 (0x44a0ecb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47
Validity
Not Before: Feb 15 10:46:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c15fc13886356b6909d50efed0c013d634e989c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:9c:da:9e:d8:19:0e:ad:7e:eb:f9:46:ee:b7:
b5:8c:68:f5:7e:82:1b:09:b8:19:e7:2e:9d:14:3b:
9d:5e:db:b1:30:67:f4:78:82:2e:ff:ff:c2:28:0e:
66:96:b5:64:fc:6c:28:0a:5a:02:2c:d4:bf:92:9d:
21:33:ac:bf:fd:4d:8c:e2:2c:d5:33:85:a6:22:0c:
70:e9:f6:1a:e2:22:8f:37:6a:cb:50:b7:15:9a:cf:
0d:f4:91:28:30:0f:a5:eb:3c:f2:fa:e6:00:db:2d:
0c:d3:fe:73:fa:2a:b7:15:94:54:66:2d:58:c4:7f:
69:a7:d5:f5:c0:b6:9f:b0:78:c9:3c:84:c0:7e:a5:
ef:33:55:05:25:c7:8d:c3:13:ed:9a:0f:62:cf:05:
91:1c:26:26:53:84:19:f6:c5:09:b4:62:a0:90:3b:
be:1d:f2:a2:fe:4b:8b:f5:26:9f:de:16:a5:a7:08:
6b:1b:b2:07:86:ba:73:92:9c:59:10:d8:50:5a:04:
24:ef:43:4e:4d:ee:65:db:5b:91:ce:8d:20:92:50:
bb:23:bd:90:11:fa:e5:0b:f5:ef:d9:b4:f4:c6:b6:
39:15:48:f1:42:58:7c:d7:ee:b1:83:2f:f6:f2:af:
5d:95:94:e5:f8:05:0e:06:ca:c1:94:18:74:7d:75:
dd:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:5F:C1:38:86:35:6B:69:09:D5:0E:FE:D0:C0:13:D6:34:E9:89:C7
X509v3 Authority Key Identifier:
keyid:23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/wV_BOIY1a2kJ1Q7-0MAT1jTpicc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.188.162.0/24
185.211.240.0/22
IPv6:
2a03:8641::/32
Signature Algorithm: sha256WithRSAEncryption
40:4b:c1:aa:7d:4d:0f:c9:a2:1e:f2:e9:4c:2d:44:7a:87:e7:
f6:78:bd:1f:9a:1b:1d:ea:00:b6:50:f9:01:1f:91:9a:03:d7:
39:07:cf:00:59:59:a9:72:10:c8:d8:54:8d:ca:76:71:fb:e3:
6d:80:d6:2f:4d:9b:28:47:3f:41:37:ed:b4:3b:34:df:ae:57:
96:40:3f:94:d3:00:6d:17:7c:36:8d:1c:31:2c:c4:f2:13:2d:
3f:7b:83:d0:b0:24:65:07:6c:6b:e2:02:d7:7b:8c:df:ae:b6:
32:2b:ee:e4:26:1a:ab:b6:a6:93:8b:75:74:90:3c:b3:00:55:
08:2e:ea:0d:a2:82:e3:a3:95:10:bf:d3:6a:15:12:d3:87:74:
52:02:8d:14:1a:de:8d:41:9e:75:16:9b:5a:a6:99:b4:00:57:
7e:3e:e7:d6:13:84:1b:86:71:2b:35:af:0a:b0:0f:82:8d:df:
0d:7f:e5:f2:b4:aa:40:31:06:11:23:91:61:f3:74:d0:b4:88:
b3:0a:6c:21:42:05:84:d5:72:b8:38:27:11:d2:a6:2a:96:73:
a1:96:cf:82:64:19:0a:69:5c:9a:90:87:f2:2a:a3:52:2c:4c:
bf:0e:d2:fc:45:3c:6f:fd:6d:ae:de:d6:d9:e9:81:87:85:9d:
d7:6f:19:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:09 2023 by rpki-client on console-fra.rpki-client.org