Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/wGQdXxKbcgWEVh0yWvo-othWAnA.roa
File: wGQdXxKbcgWEVh0yWvo-othWAnA.roa (raw, json)
Hash identifier: NTWY6yigzf6iFeWkGw4sgCpyCB9vdd7lubwF8yBVIPs=
Subject key identifier: C0:64:1D:5F:12:9B:72:05:84:56:1D:32:5A:FA:3E:A2:D8:56:02:70
Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Certificate serial: 0628B279
Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/wGQdXxKbcgWEVh0yWvo-othWAnA.roa
Signing time: Wed 02 Feb 2022 08:52:38 +0000
ROA not before: Wed 02 Feb 2022 08:52:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12679
IP address blocks: 94.137.78.0/23 maxlen: 23
94.137.72.0/24 maxlen: 24
94.137.74.0/24 maxlen: 24
94.137.75.0/24 maxlen: 24
94.137.91.0/24 maxlen: 24
94.137.90.0/24 maxlen: 24
94.137.89.0/24 maxlen: 24
94.137.92.0/24 maxlen: 24
94.137.93.0/24 maxlen: 24
94.137.94.0/24 maxlen: 24
45.151.98.0/24 maxlen: 24
45.151.97.0/24 maxlen: 24
45.151.99.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103330425 (0x628b279)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Validity
Not Before: Feb 2 08:52:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c0641d5f129b720584561d325afa3ea2d8560270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:cf:a1:81:18:da:3b:93:27:56:97:40:d5:f1:
e2:59:40:c4:cf:b6:21:bb:b3:ab:86:89:bb:d4:94:
91:1e:11:ef:46:65:1c:ee:0b:21:0a:e1:09:d4:9c:
92:55:aa:f1:43:28:d4:32:c0:74:38:42:d2:e3:7a:
41:32:51:6f:f5:d2:4a:f3:35:42:a2:e6:7c:e0:1a:
5e:65:e8:16:5b:b0:77:a0:6e:4e:57:52:9c:8b:4c:
96:aa:d3:ef:17:34:e8:6f:0e:10:18:70:5f:51:a5:
2d:1e:1c:f4:07:5f:7c:a3:a5:bc:57:73:49:ec:26:
94:dc:d8:71:43:19:8a:0b:38:ce:03:ab:6e:74:ff:
df:0a:e1:1d:07:e4:60:83:ca:e0:13:e4:cf:9d:5a:
10:a5:58:89:11:c1:29:43:b8:be:f4:22:13:3c:fa:
4e:83:82:0c:bc:b5:25:c4:01:9d:d6:b3:a6:96:57:
e8:d5:92:90:8c:65:1d:66:80:57:d1:90:02:cc:49:
56:c9:d7:6c:ec:df:5c:cf:32:9b:e3:cc:2a:9c:c5:
5a:a4:34:9e:1f:4c:d9:b9:0a:d0:28:b7:eb:69:49:
15:0c:64:87:52:38:be:10:66:0c:22:68:a4:5e:82:
0b:10:fe:31:e3:26:5d:e9:cd:77:ce:6e:31:20:9c:
5a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:64:1D:5F:12:9B:72:05:84:56:1D:32:5A:FA:3E:A2:D8:56:02:70
X509v3 Authority Key Identifier:
keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/wGQdXxKbcgWEVh0yWvo-othWAnA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.97.0-45.151.99.255
94.137.72.0/24
94.137.74.0/23
94.137.78.0/23
94.137.89.0-94.137.94.255
Signature Algorithm: sha256WithRSAEncryption
92:5a:c0:6c:88:73:a4:3e:c5:0f:3a:d8:ac:6b:9a:4f:4c:4d:
ba:55:2e:79:11:67:56:90:71:ce:15:a5:a7:14:d7:63:78:dc:
68:3d:7b:59:05:81:32:9b:27:87:57:ec:d4:0c:c0:63:8b:19:
0b:06:4a:3b:34:f1:fd:9c:22:88:54:28:d2:e7:65:b5:b0:dd:
5d:12:1d:44:28:c0:50:c6:47:fe:aa:fb:7d:49:44:3c:fc:27:
f5:4a:25:e0:70:83:eb:f3:bb:0e:a7:bd:da:be:31:02:a3:e9:
77:43:49:5d:8c:35:9d:b8:71:34:bd:c2:69:56:ab:f4:17:3e:
9d:30:b9:f7:48:04:cd:24:3d:9b:1c:98:75:8b:cc:ed:c5:77:
6f:52:7a:4c:38:04:6c:7e:7e:0b:2e:99:bb:1e:fe:aa:b4:e5:
45:86:be:86:86:d2:59:23:51:2e:88:21:b8:7d:08:7d:7f:1c:
de:ed:ac:e8:16:6c:8c:df:b1:a4:11:e8:c1:df:c7:b8:35:6b:
28:0c:b9:07:91:42:b7:d0:08:45:47:fb:09:4c:7c:70:63:2f:
2d:9b:e5:61:2f:b0:ac:1a:c2:b5:cf:f6:55:91:6d:b3:65:4f:
98:25:87:5d:98:d4:79:e1:81:8b:e7:90:d3:dd:77:7d:04:d5:
51:df:a0:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:12 2023 by rpki-client on console-fra.rpki-client.org