Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/WVLmMAW0_hSo2rU9jUTcCk_-b9c.roa
File: WVLmMAW0_hSo2rU9jUTcCk_-b9c.roa (raw, json)
Hash identifier: sqUrzjanK6MOocGSx6dZJCNxl0OEN0ZDk6BswVTZy5Q=
Subject key identifier: 59:52:E6:30:05:B4:FE:14:A8:DA:B5:3D:8D:44:DC:0A:4F:FE:6F:D7
Certificate issuer: /CN=3ad65216812ed24fd1c719871a59a971dec30a26
Certificate serial: 0182583DD3F3F90AEE698F230ED141D72442
Authority key identifier: 3A:D6:52:16:81:2E:D2:4F:D1:C7:19:87:1A:59:A9:71:DE:C3:0A:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtZSFoEu0k_RxxmHGlmpcd7DCiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/WVLmMAW0_hSo2rU9jUTcCk_-b9c.roa
Signing time: Mon 01 Aug 2022 07:10:23 +0000
ROA not before: Mon 01 Aug 2022 07:10:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3330
IP address blocks: 92.63.213.0/24 maxlen: 24
78.142.66.0/23 maxlen: 23
78.142.86.0/23 maxlen: 24
78.142.88.0/23 maxlen: 24
195.16.244.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:58:3d:d3:f3:f9:0a:ee:69:8f:23:0e:d1:41:d7:24:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad65216812ed24fd1c719871a59a971dec30a26
Validity
Not Before: Aug 1 07:10:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5952e63005b4fe14a8dab53d8d44dc0a4ffe6fd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3d:23:90:77:17:4e:b4:ec:26:41:f6:db:b4:
10:ae:ad:91:e7:f0:51:c4:23:a9:37:66:ab:90:21:
31:8d:18:a3:5f:ba:1d:03:64:f0:b5:3a:48:55:d9:
eb:bb:76:94:a5:de:cd:f2:18:d7:39:7f:cc:94:06:
c9:50:67:28:9a:77:d2:41:5b:22:92:07:13:6c:2a:
98:0a:24:2f:60:6c:71:fc:a6:14:6a:b1:1d:05:56:
cb:30:90:c5:73:7c:18:7d:85:6b:11:44:35:5d:04:
31:af:66:87:84:f4:29:39:45:82:fb:4d:bf:1f:e8:
c1:bd:94:b1:0d:a7:0c:83:48:ab:28:5a:8d:63:60:
83:93:2d:e8:29:5b:98:bb:f4:f0:90:ca:01:6a:7c:
af:2e:eb:a7:03:61:2f:6e:92:7b:44:8b:f6:99:a3:
d6:78:b6:d0:96:80:b2:37:5d:d6:88:a5:be:b2:c6:
cb:1a:ab:be:0d:9d:f6:8a:f9:14:6e:8c:43:28:bd:
ab:aa:d0:b4:bb:c4:ec:66:af:06:ae:2e:45:69:92:
b3:e2:9f:06:d8:69:c4:41:fc:a9:7a:85:88:e3:53:
22:fc:2f:ac:f6:3a:62:f0:8c:a0:8d:6e:66:e1:c7:
48:5a:03:4c:04:e1:0f:a9:13:87:ce:90:53:d0:d8:
c1:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:52:E6:30:05:B4:FE:14:A8:DA:B5:3D:8D:44:DC:0A:4F:FE:6F:D7
X509v3 Authority Key Identifier:
keyid:3A:D6:52:16:81:2E:D2:4F:D1:C7:19:87:1A:59:A9:71:DE:C3:0A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtZSFoEu0k_RxxmHGlmpcd7DCiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/WVLmMAW0_hSo2rU9jUTcCk_-b9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/OtZSFoEu0k_RxxmHGlmpcd7DCiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.142.66.0/23
78.142.86.0-78.142.89.255
92.63.213.0/24
195.16.244.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:e4:16:48:37:c3:3d:e1:a0:1c:60:10:d9:42:71:60:54:d6:
28:9d:8b:91:c4:df:30:f0:15:49:a2:75:cf:3d:5b:22:af:56:
5a:dc:0b:82:6f:e6:8b:9c:83:f5:af:6b:28:a8:2f:b8:da:7e:
50:42:1e:12:a1:7a:b1:b2:71:57:2b:11:2c:83:af:49:06:03:
39:93:c9:0f:de:9c:0b:e2:4c:9f:bf:40:44:8a:65:80:f0:f3:
cf:bd:95:8c:a5:4c:0d:5c:5a:0f:23:6f:8c:b6:d4:70:67:f3:
d0:f6:0e:c9:26:48:09:a1:c6:6c:12:5f:7c:3a:f8:0e:a6:6d:
36:fc:e7:19:ff:90:16:f6:d8:a5:9e:1f:21:5d:f5:e0:c8:a5:
df:38:43:7a:4e:e6:48:b6:a3:60:11:1e:1f:a8:bf:aa:e6:1c:
11:86:b8:4a:8a:ac:8f:26:8b:a1:61:c2:b1:d0:f8:6b:a7:cd:
2d:9f:dd:e6:7d:9c:40:78:9b:3b:14:e7:8b:ac:92:2c:41:b3:
8a:54:f0:ca:c0:3b:35:94:75:7f:03:d8:1b:1f:ce:06:90:de:
ea:87:d5:b3:37:9d:8f:7c:8a:5f:86:d3:f9:3a:d8:cf:55:21:
2e:61:85:44:2b:09:98:11:22:77:4d:83:dc:91:15:49:86:05:
a2:02:32:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:37 2024 by rpki-client on console-fra.rpki-client.org