Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/W1A0L6Y-VT_JU6zkwpHqErB2o8w.roa
File: W1A0L6Y-VT_JU6zkwpHqErB2o8w.roa (raw, json)
Hash identifier: Av5E+Z795G2zAcAAgGFBRAqBBrZyA0yW9Xfu5ufbYlY=
Subject key identifier: 5B:50:34:2F:A6:3E:55:3F:C9:53:AC:E4:C2:91:EA:12:B0:76:A3:CC
Certificate issuer: /CN=aeb66ec5e8f2405f6f8d486e73fb82b8de0dee0f
Certificate serial: 32BD5948
Authority key identifier: AE:B6:6E:C5:E8:F2:40:5F:6F:8D:48:6E:73:FB:82:B8:DE:0D:EE:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrZuxejyQF9vjUhuc_uCuN4N7g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/W1A0L6Y-VT_JU6zkwpHqErB2o8w.roa
Signing time: Sat 01 Jan 2022 16:07:30 +0000
ROA not before: Sat 01 Jan 2022 16:07:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58431
IP address blocks: 5.226.176.0/21 maxlen: 24
178.237.166.0/23 maxlen: 24
2a03:a860:a00::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 851269960 (0x32bd5948)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeb66ec5e8f2405f6f8d486e73fb82b8de0dee0f
Validity
Not Before: Jan 1 16:07:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5b50342fa63e553fc953ace4c291ea12b076a3cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fc:ea:86:73:58:19:c9:e4:08:a1:37:02:29:
9b:2f:81:c3:00:f5:db:96:22:4b:c7:98:dd:81:c1:
c9:a1:40:e7:37:dd:40:df:87:9f:eb:04:07:38:75:
83:18:24:70:59:2b:33:2f:f6:9b:20:0c:22:86:b5:
53:ac:d6:b2:ba:dd:9b:fb:71:a8:2b:19:21:ed:48:
d6:c9:d2:32:c7:29:7c:9b:2c:db:8f:06:90:53:cb:
ef:5b:eb:d4:5f:ca:8a:a3:41:94:ba:3d:8d:4a:06:
6b:3d:99:b6:7b:18:8a:55:09:6b:4d:3a:92:bf:67:
57:70:ec:3c:d2:18:d6:ae:4e:7a:a4:ba:c3:3c:9b:
c5:ff:32:35:6b:71:7b:da:1e:32:af:8d:29:e7:f0:
5a:3e:a2:6f:9f:c6:1e:ee:a4:16:dc:c0:0d:48:fc:
8e:a8:db:fb:bb:e6:ad:1d:dc:04:78:38:67:ae:57:
83:fd:5b:69:6b:97:96:b1:89:a8:8a:a5:75:d5:4a:
1d:9c:0b:19:00:7a:79:44:c9:7c:7a:6a:bc:c9:3d:
46:7f:e5:60:9a:36:0b:0f:d3:13:04:71:1c:0c:49:
9b:71:f4:56:99:99:d0:6f:7f:83:b2:84:42:a9:da:
f4:e0:30:fb:df:d3:9d:05:0d:2e:8b:6f:d5:17:e7:
dc:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:50:34:2F:A6:3E:55:3F:C9:53:AC:E4:C2:91:EA:12:B0:76:A3:CC
X509v3 Authority Key Identifier:
keyid:AE:B6:6E:C5:E8:F2:40:5F:6F:8D:48:6E:73:FB:82:B8:DE:0D:EE:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrZuxejyQF9vjUhuc_uCuN4N7g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/W1A0L6Y-VT_JU6zkwpHqErB2o8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.176.0/21
178.237.166.0/23
IPv6:
2a03:a860:a00::/40
Signature Algorithm: sha256WithRSAEncryption
09:17:bc:db:99:fd:9f:2e:e5:2b:37:02:cb:88:70:5e:05:23:
91:0e:29:43:f4:1d:ed:b4:ec:c8:dd:ed:46:16:d8:f0:02:02:
6a:75:38:ac:f3:35:81:0b:15:09:83:49:d0:b3:b2:3d:60:eb:
b5:09:14:2d:62:2c:c7:6e:57:55:f5:65:ee:64:26:90:52:b0:
ea:5a:8c:63:64:dc:92:37:fb:c2:61:d1:0d:d3:50:be:3c:53:
64:33:0d:33:0f:29:e5:51:ce:3d:8f:f1:35:2d:82:8d:a3:0a:
87:1e:27:2a:b1:4b:46:d9:07:34:33:ca:c1:5f:a9:96:21:71:
8c:fc:27:3a:c7:db:40:f7:e5:c9:bf:d6:90:04:b8:d4:d9:81:
81:cd:b4:29:08:39:ae:3d:d4:51:3a:d3:c5:2f:07:d6:4e:ae:
bb:f0:80:79:02:5d:cf:ec:0e:e4:60:0a:b0:cf:a3:b7:38:e4:
af:6f:65:e8:fb:41:fd:12:fb:07:a3:a9:21:1a:7b:bc:6d:c2:
69:80:d0:52:0c:09:4f:69:bf:8b:55:09:47:5e:ff:75:d7:95:
14:dc:7e:9b:34:19:ee:35:67:b2:ca:43:c4:66:2d:0a:3b:86:
ae:a8:8c:02:fa:a0:9e:5b:ef:b6:af:0d:3c:22:e0:f4:42:8c:
7d:64:1e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:13 2023 by rpki-client on console-fra.rpki-client.org