Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/WSRCtf3JuwR9WSPTmnj6-DbP_70.roa
File: WSRCtf3JuwR9WSPTmnj6-DbP_70.roa (raw, json)
Hash identifier: 95uCmDKlCmD5cAwN2QbiWBq4MXMi596Og+0JROknP8w=
Subject key identifier: 59:24:42:B5:FD:C9:BB:04:7D:59:23:D3:9A:78:FA:F8:36:CF:FF:BD
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 0183AC345836C457F432FF05847B54B73E65
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/WSRCtf3JuwR9WSPTmnj6-DbP_70.roa
Signing time: Thu 06 Oct 2022 07:30:55 +0000
ROA not before: Thu 06 Oct 2022 07:30:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34450
IP address blocks: 89.43.43.0/24 maxlen: 24
89.43.44.0/24 maxlen: 24
89.43.40.0/24 maxlen: 24
89.43.45.0/24 maxlen: 24
89.43.46.0/24 maxlen: 24
89.43.73.0/24 maxlen: 24
89.39.252.0/24 maxlen: 24
188.213.18.0/24 maxlen: 24
188.240.14.0/24 maxlen: 24
93.113.202.0/24 maxlen: 24
93.114.99.0/24 maxlen: 24
89.33.163.0/24 maxlen: 24
93.114.55.0/24 maxlen: 24
188.215.72.0/23 maxlen: 24
188.215.73.0/24 maxlen: 24
86.106.80.0/24 maxlen: 24
86.106.104.0/24 maxlen: 24
89.34.8.0/21 maxlen: 21
93.114.171.0/24 maxlen: 24
85.204.125.0/24 maxlen: 24
85.204.127.0/24 maxlen: 24
93.113.158.0/24 maxlen: 24
89.37.136.0/24 maxlen: 24
85.204.78.0/24 maxlen: 24
2a05:b680:1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ac:34:58:36:c4:57:f4:32:ff:05:84:7b:54:b7:3e:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Oct 6 07:30:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=592442b5fdc9bb047d5923d39a78faf836cfffbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:9a:dc:15:f8:65:6c:6e:7f:e4:a4:86:31:a3:
fa:01:9e:4d:33:9d:56:09:dd:35:77:58:6d:f8:b4:
41:e3:cd:10:56:d2:50:c3:bb:9c:c5:2e:1a:cf:6b:
40:68:dd:29:61:d8:5d:96:5e:c0:6b:f3:5f:e0:7d:
76:48:3f:da:c5:8d:3d:5e:f2:d3:58:27:1c:36:56:
ee:08:01:ea:b8:8d:92:cd:82:49:ea:fc:dd:28:1b:
d3:55:b9:ff:68:c8:16:ab:09:68:fc:1e:5f:a1:bd:
1f:c7:1d:c5:11:01:7b:7d:9f:af:bc:f8:5b:de:a6:
98:e4:33:f0:9d:c0:c4:f4:9a:29:22:04:f5:34:0c:
87:9e:30:52:90:78:32:8c:81:45:1c:dc:0d:05:c6:
d6:e3:fc:58:26:c4:27:33:13:5a:61:ff:8c:40:57:
27:30:cf:72:66:ae:ce:d4:f5:05:21:1e:67:c7:e3:
ce:42:46:4d:05:e6:95:51:19:41:bc:ab:46:d4:9e:
d7:a6:92:21:00:5e:79:e4:51:23:05:60:61:dd:b9:
60:cf:9e:eb:78:81:a2:b1:72:0f:9f:22:a7:4e:a3:
f8:a6:01:e9:2f:f9:80:c1:f7:45:ef:84:9f:15:58:
ca:b2:d1:6c:55:d1:58:6e:8a:00:2d:21:01:2c:71:
16:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:24:42:B5:FD:C9:BB:04:7D:59:23:D3:9A:78:FA:F8:36:CF:FF:BD
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/WSRCtf3JuwR9WSPTmnj6-DbP_70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.78.0/24
85.204.125.0/24
85.204.127.0/24
86.106.80.0/24
86.106.104.0/24
89.33.163.0/24
89.34.8.0/21
89.37.136.0/24
89.39.252.0/24
89.43.40.0/24
89.43.43.0-89.43.46.255
89.43.73.0/24
93.113.158.0/24
93.113.202.0/24
93.114.55.0/24
93.114.99.0/24
93.114.171.0/24
188.213.18.0/24
188.215.72.0/23
188.240.14.0/24
IPv6:
2a05:b680:1::/48
Signature Algorithm: sha256WithRSAEncryption
b5:7a:f7:6b:1b:4a:0f:49:af:6e:7b:04:9c:51:1a:43:e2:5b:
73:89:70:23:b4:37:c8:cb:00:4a:fc:66:92:d7:9a:ee:98:45:
ee:05:8e:0a:68:0a:33:c7:af:4f:a3:b5:67:4e:ad:72:84:86:
61:5f:c1:2c:e9:87:5c:7a:73:2e:2b:f7:e4:bf:ed:c2:65:16:
11:2c:da:23:4a:99:78:37:e9:13:65:c2:42:56:bc:07:2b:54:
48:9f:62:f4:95:0a:8a:56:f4:49:ad:10:56:e1:22:b3:d7:b1:
d9:8b:c6:98:8d:12:4b:df:0d:2e:5b:b9:74:17:8f:97:fb:d4:
df:7b:d0:ec:df:37:d7:01:e6:a5:a0:47:67:64:49:eb:c0:ab:
ec:82:3d:f3:82:a0:fe:06:3d:0a:59:42:dd:2d:1b:b8:0a:0c:
17:e1:00:93:87:6f:24:f2:7f:55:16:50:3e:30:a8:31:30:01:
3a:2d:6c:6e:9a:cc:35:34:dc:12:b9:92:3b:95:c8:5a:aa:b1:
15:72:d1:5c:c7:30:fb:8c:f6:d6:dd:8a:6d:7f:6f:1b:63:75:
47:56:27:13:c8:7a:8a:9d:3a:f1:8a:5a:2f:aa:da:fc:18:b5:
af:82:f5:a3:27:e8:66:cf:e2:c3:77:58:32:65:d9:23:c7:a6:
d6:b4:56:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:29 2024 by rpki-client on console-fra.rpki-client.org