Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/WLRItAYe6OWPyv4LYP0KFtF6ZTA.roa
File: WLRItAYe6OWPyv4LYP0KFtF6ZTA.roa (raw, json)
Hash identifier: +vFtv4HQMAPQcxxv3Qm3hciaMiluVWMRi5lIaX24/FI=
Subject key identifier: 58:B4:48:B4:06:1E:E8:E5:8F:CA:FE:0B:60:FD:0A:16:D1:7A:65:30
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 0BDF714A
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/WLRItAYe6OWPyv4LYP0KFtF6ZTA.roa
Signing time: Fri 11 Feb 2022 20:25:48 +0000
ROA not before: Fri 11 Feb 2022 20:25:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34450
IP address blocks: 89.43.42.0/24 maxlen: 24
89.43.43.0/24 maxlen: 24
89.43.40.0/24 maxlen: 24
89.43.41.0/24 maxlen: 24
93.114.187.0/24 maxlen: 24
89.43.46.0/24 maxlen: 24
86.106.97.0/24 maxlen: 24
86.106.104.0/24 maxlen: 24
89.34.8.0/21 maxlen: 21
89.39.252.0/24 maxlen: 24
188.213.18.0/24 maxlen: 24
93.113.202.0/24 maxlen: 24
93.113.203.0/24 maxlen: 24
89.44.209.0/24 maxlen: 24
85.204.125.0/24 maxlen: 24
85.204.127.0/24 maxlen: 24
93.114.99.0/24 maxlen: 24
93.113.158.0/24 maxlen: 24
89.33.163.0/24 maxlen: 24
89.37.136.0/24 maxlen: 24
93.114.55.0/24 maxlen: 24
188.215.72.0/23 maxlen: 24
2a05:b680:1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 199192906 (0xbdf714a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Feb 11 20:25:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=58b448b4061ee8e58fcafe0b60fd0a16d17a6530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d1:a2:07:99:ca:77:17:65:91:5b:12:ca:bb:
eb:0a:52:d6:ad:e7:c4:79:e2:02:6e:fc:77:b4:b1:
36:59:85:43:a4:4a:cd:a3:40:98:df:d9:4d:f8:4d:
a2:0e:fa:2d:9e:d9:51:e4:52:da:fc:ad:d1:30:b5:
ce:af:a1:0d:21:48:26:1c:5d:d5:c9:ed:da:9d:be:
bc:8c:10:72:4a:1f:e4:95:5b:ca:df:7c:ef:c5:c4:
ec:7d:02:20:3b:7b:d1:a6:ac:85:69:e8:20:57:99:
5e:2c:21:ed:d7:f9:77:59:ea:f7:2f:6c:de:ab:86:
40:d6:a0:4a:06:bd:70:24:84:62:1a:0d:15:8d:8f:
f9:a3:40:4f:2c:5c:ac:8c:49:f6:df:88:8c:0b:db:
e2:51:76:20:db:65:b1:51:55:c2:54:42:57:a3:94:
81:27:cd:a9:a1:5a:9a:8b:fa:dc:78:3d:cc:4a:0c:
75:6c:59:6b:54:2c:b3:31:0a:7c:53:07:e4:e4:48:
e4:4b:45:72:cf:cd:d6:85:77:ba:af:33:cc:00:65:
ba:5c:b4:49:ed:f8:73:93:7e:64:b3:67:99:5e:10:
11:0a:13:c3:48:37:41:d9:2b:70:9d:b8:22:94:20:
ee:dd:cc:9f:cf:67:ec:41:82:8f:fa:02:77:3a:f4:
85:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:B4:48:B4:06:1E:E8:E5:8F:CA:FE:0B:60:FD:0A:16:D1:7A:65:30
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/WLRItAYe6OWPyv4LYP0KFtF6ZTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.125.0/24
85.204.127.0/24
86.106.97.0/24
86.106.104.0/24
89.33.163.0/24
89.34.8.0/21
89.37.136.0/24
89.39.252.0/24
89.43.40.0/22
89.43.46.0/24
89.44.209.0/24
93.113.158.0/24
93.113.202.0/23
93.114.55.0/24
93.114.99.0/24
93.114.187.0/24
188.213.18.0/24
188.215.72.0/23
IPv6:
2a05:b680:1::/48
Signature Algorithm: sha256WithRSAEncryption
3f:d6:da:5d:53:6a:60:d8:69:32:af:2d:dd:70:19:2e:8c:ba:
62:a5:7e:c2:de:8e:fa:e3:dc:6a:2d:b6:94:d5:9a:44:f0:b0:
8a:6b:a6:0d:0f:95:f1:fd:92:98:d8:c4:6f:bf:2a:6a:c4:37:
0e:36:a3:db:01:40:b1:36:61:be:a0:a5:c9:25:55:ab:2c:ef:
f6:29:9d:b7:53:67:9a:94:ba:54:e4:37:91:58:88:49:d8:db:
71:5d:3a:fe:49:09:97:f1:e8:72:64:79:b7:64:87:89:40:f0:
b5:b6:b2:41:c4:b8:e8:e7:09:d9:40:9e:3f:a5:42:fa:8a:fd:
6d:57:3b:cf:0f:17:98:1d:62:eb:55:c3:11:62:d7:89:2f:3c:
05:dc:b1:d4:a1:d8:c8:f8:72:d2:ec:61:9b:c4:2b:a2:8e:80:
42:05:ec:dd:17:a8:2d:76:70:3d:61:9e:62:33:66:b7:53:0d:
79:59:80:64:48:50:64:49:a2:06:1a:65:7e:93:d4:fd:a6:eb:
92:ca:8f:e8:e7:68:f7:0e:f5:6e:20:f9:ac:80:c4:75:16:ec:
93:f8:ff:9c:31:79:ee:5c:2e:51:df:99:e0:a0:53:ad:73:c8:
40:e4:88:18:c9:32:3c:05:58:63:a3:ab:b6:19:eb:5c:7b:47:
d9:04:23:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:54 2023 by rpki-client on console-ams.rpki-client.org