Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/wwiuCfd-1Tug8dtkSlGs5ojuswE.roa
File: wwiuCfd-1Tug8dtkSlGs5ojuswE.roa (raw, json)
Hash identifier: Od8yvow0ryxQZKTMzpraOSZGqfFXd1wEGIqvupN61Io=
Subject key identifier: C3:08:AE:09:F7:7E:D5:3B:A0:F1:DB:64:4A:51:AC:E6:88:EE:B3:01
Certificate issuer: /CN=a9e0b6d13cd11f36114fa984033804941c82f143
Certificate serial: 02CCDBED
Authority key identifier: A9:E0:B6:D1:3C:D1:1F:36:11:4F:A9:84:03:38:04:94:1C:82:F1:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qeC20TzRHzYRT6mEAzgElByC8UM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/wwiuCfd-1Tug8dtkSlGs5ojuswE.roa
Signing time: Sat 01 Jan 2022 05:06:11 +0000
ROA not before: Sat 01 Jan 2022 05:06:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208922
IP address blocks: 45.15.172.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46980077 (0x2ccdbed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9e0b6d13cd11f36114fa984033804941c82f143
Validity
Not Before: Jan 1 05:06:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c308ae09f77ed53ba0f1db644a51ace688eeb301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:24:c1:2c:7f:64:16:8c:9c:22:db:5b:2a:5f:
c0:f8:7d:a5:c8:d1:3b:9a:2a:a1:8f:c2:ce:84:92:
f5:43:ba:b9:ed:70:02:5a:d9:db:2a:70:6f:e4:7d:
c4:70:c3:65:a9:63:e0:0c:3b:fc:de:88:e8:2a:69:
a7:f7:78:43:a0:a4:10:27:ed:23:67:45:e7:f1:74:
33:06:a1:70:bf:cd:0d:59:7f:c7:b0:f2:9e:b8:99:
3e:3a:89:03:07:72:79:c3:74:53:88:17:32:97:16:
f5:e3:e2:50:a7:83:0f:53:72:57:28:c4:ad:b6:9e:
a4:03:0c:a8:63:2b:c5:88:54:4e:26:37:e2:7c:0e:
be:a8:6a:01:d2:f6:a2:80:ee:59:9a:47:23:e3:a1:
8b:a3:81:b4:6d:61:73:b3:64:97:14:28:f1:fa:15:
79:26:17:05:9a:83:b3:1a:d0:30:e9:b7:d0:71:ce:
74:ee:56:b7:c7:48:7b:c9:5d:dd:c7:c0:8f:8a:cd:
ce:e4:b4:43:59:c2:dd:78:6e:a5:ea:5a:80:42:34:
c5:20:a5:9b:a2:48:dd:c2:1c:17:22:8f:e4:b3:9f:
eb:a0:9a:e2:f2:d4:ab:6d:1c:d3:8a:cf:19:17:13:
50:9f:ac:fb:9a:2c:77:71:db:36:98:94:7a:da:7c:
64:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:08:AE:09:F7:7E:D5:3B:A0:F1:DB:64:4A:51:AC:E6:88:EE:B3:01
X509v3 Authority Key Identifier:
keyid:A9:E0:B6:D1:3C:D1:1F:36:11:4F:A9:84:03:38:04:94:1C:82:F1:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qeC20TzRHzYRT6mEAzgElByC8UM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/wwiuCfd-1Tug8dtkSlGs5ojuswE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.172.0/22
Signature Algorithm: sha256WithRSAEncryption
74:ce:ba:0c:e7:d1:8a:ae:b9:0c:3f:e1:55:6e:fd:1c:7a:19:
32:74:46:4d:c6:c3:f6:c2:d6:5c:9f:a7:4a:ac:3d:da:5b:e9:
fa:5e:4f:23:df:4a:f3:b7:f9:ec:3f:8c:15:fc:7d:1b:6e:10:
59:28:b9:be:24:fb:ea:a4:64:66:e1:52:b7:17:d8:25:71:e2:
72:f3:a9:a9:94:5b:27:bf:7e:bf:ba:d1:0e:c0:87:8e:71:05:
c2:83:c4:a4:a0:2b:81:6d:5e:06:77:fa:d7:35:0f:a3:ac:7c:
19:4e:2d:17:df:75:62:f6:53:70:44:25:33:46:6e:e8:7b:e9:
05:eb:8b:9e:ce:42:d6:a4:55:e5:52:8d:46:a7:e2:af:b4:6f:
26:ea:d7:b6:1d:9d:86:d1:dd:9a:46:91:1c:ab:02:65:88:b1:
65:05:4c:86:43:27:09:b2:bf:21:56:63:bb:f1:20:a3:41:1a:
71:cb:9c:e7:0c:9b:24:72:d3:f0:cd:9f:3a:94:78:f1:b8:6a:
b7:0a:33:9d:00:b7:08:d5:c8:76:e0:76:4d:a4:3c:c1:10:34:
47:43:32:b4:74:50:2e:37:a4:58:e0:5b:ce:4b:53:27:97:9d:
9e:aa:6d:47:44:87:04:37:45:c3:7a:37:e4:3c:c7:e4:a2:a8:
bc:1d:44:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:40 2024 by rpki-client on console-fra.rpki-client.org