Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/WHo6TSiRPRpW8gyg2GIyOYOERj8.roa
File: WHo6TSiRPRpW8gyg2GIyOYOERj8.roa (raw, json)
Hash identifier: 7fIuwMHakfJUBPYSQ403rKyHLqXhpbF/MQg97PG45KQ=
Subject key identifier: 58:7A:3A:4D:28:91:3D:1A:56:F2:0C:A0:D8:62:32:39:83:84:46:3F
Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Certificate serial: 068B2931
Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/WHo6TSiRPRpW8gyg2GIyOYOERj8.roa
Signing time: Thu 10 Mar 2022 14:39:10 +0000
ROA not before: Thu 10 Mar 2022 14:39:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12679
IP address blocks: 45.151.98.0/24 maxlen: 24
45.151.99.0/24 maxlen: 24
94.137.75.0/24 maxlen: 24
94.137.79.0/24 maxlen: 24
94.137.91.0/24 maxlen: 24
94.137.90.0/24 maxlen: 24
94.137.89.0/24 maxlen: 24
94.137.93.0/24 maxlen: 24
94.137.94.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109783345 (0x68b2931)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Validity
Not Before: Mar 10 14:39:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=587a3a4d28913d1a56f20ca0d86232398384463f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:69:b6:82:cd:f9:ce:9c:b6:58:3d:64:69:65:
df:89:77:ee:d1:af:d8:4d:f4:f8:4a:76:d1:a4:3e:
cc:62:f8:ac:e8:66:e4:c0:af:dd:23:4a:18:02:98:
90:eb:3e:d2:88:31:3b:73:e6:45:6a:0e:91:20:0c:
b1:9f:ee:bb:d0:18:e8:a7:2e:c7:6a:ca:35:9f:22:
d2:98:1f:70:ea:ad:ee:2a:5e:ba:1a:87:fa:13:cc:
f7:54:4c:c4:47:89:07:e3:19:30:44:de:e4:d2:ab:
a7:5f:77:1a:31:89:d1:08:43:f5:0d:ca:45:78:80:
40:7e:18:0d:c1:d0:b2:0b:d7:81:ba:f4:a1:f9:fd:
e6:d0:74:d9:a1:79:f6:9d:d2:f2:c4:e8:d1:4b:4b:
79:07:1a:16:a4:2f:12:39:1a:b3:e0:aa:99:4d:66:
06:93:fd:ea:49:c0:89:a7:25:29:b4:46:e3:68:41:
75:1f:c2:7f:34:56:3f:d8:e6:cb:7d:bb:54:fc:2f:
53:e8:11:86:e5:9b:6d:b0:dc:e3:f3:a6:3a:2d:93:
d2:59:d6:29:4b:69:da:bd:a6:de:62:a4:42:fc:98:
07:5b:93:53:7a:28:0c:61:a6:20:41:67:c2:50:15:
f9:8b:c4:54:74:d8:44:15:f9:72:ab:05:07:b6:36:
4b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:7A:3A:4D:28:91:3D:1A:56:F2:0C:A0:D8:62:32:39:83:84:46:3F
X509v3 Authority Key Identifier:
keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/WHo6TSiRPRpW8gyg2GIyOYOERj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.98.0/23
94.137.75.0/24
94.137.79.0/24
94.137.89.0-94.137.91.255
94.137.93.0-94.137.94.255
Signature Algorithm: sha256WithRSAEncryption
3e:3f:64:38:cb:3b:64:72:92:1e:67:c1:bd:af:d4:da:f5:82:
ff:67:13:50:dc:94:61:f7:18:29:2b:ee:a0:0f:b7:57:0c:fd:
d9:8c:54:cc:bb:09:5f:b6:f0:90:60:09:8a:02:3f:d0:10:d7:
e0:ca:57:b4:95:c8:55:bf:cf:ae:20:14:6f:c9:d0:27:7f:e6:
2a:77:35:ef:1b:d5:88:6b:f4:a6:de:65:87:d6:5b:52:80:25:
d1:b9:46:a9:ce:23:2c:8f:32:c4:6d:24:77:ac:c3:64:6a:7a:
4c:c6:4a:2f:6a:23:5a:95:bb:04:87:f4:3e:4a:62:dd:6e:40:
f4:1f:fc:49:55:de:61:97:e4:13:a0:af:9d:36:97:a0:f8:5c:
ae:34:68:6f:56:41:5f:04:7a:c3:85:62:e1:65:78:9e:a9:39:
3e:1c:49:c3:3a:59:80:31:35:97:0d:45:16:b6:36:c2:8b:9a:
f7:ad:0a:d3:52:ca:21:98:4e:63:c8:5f:36:0d:b6:5a:19:43:
66:dc:0d:8f:8d:49:00:6d:af:0f:8c:13:5b:b9:58:58:1a:bb:
b0:d2:ac:5a:f9:88:05:fe:f7:03:af:3b:bf:e6:53:52:3f:03:
52:8e:c6:19:a1:f6:03:bc:fb:fc:91:72:96:e2:47:96:41:3e:
2b:a7:11:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:11 2023 by rpki-client on console-fra.rpki-client.org