Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/WliEx4N_8rA-NLvsavBC2VePips.roa
File: WliEx4N_8rA-NLvsavBC2VePips.roa (raw, json)
Hash identifier: 8SChNYaczJSaf+mSkEV5nXHk0+rBKdR2HGeKQ0rduIA=
Subject key identifier: 5A:58:84:C7:83:7F:F2:B0:3E:34:BB:EC:6A:F0:42:D9:57:8F:8A:9B
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 01845D44E076EDF75E06BE86BC49BCE8F09F
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/WliEx4N_8rA-NLvsavBC2VePips.roa
Signing time: Wed 09 Nov 2022 16:41:45 +0000
ROA not before: Wed 09 Nov 2022 16:41:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 188.209.128.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:5d:44:e0:76:ed:f7:5e:06:be:86:bc:49:bc:e8:f0:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Nov 9 16:41:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5a5884c7837ff2b03e34bbec6af042d9578f8a9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:93:85:fe:9d:7c:02:51:16:80:d3:2a:92:f9:
38:08:07:87:95:34:4a:38:4e:eb:4d:c2:6a:10:c2:
0b:3b:3a:52:6b:45:16:76:ce:f0:ea:f0:64:ce:27:
c1:10:cc:41:a7:db:f7:a6:29:6f:c2:00:3b:f9:35:
38:31:18:70:0f:63:fc:3b:38:8b:4d:9a:fd:d8:d5:
02:d2:78:ec:0f:40:10:98:37:b8:79:bf:f6:7b:f3:
9f:33:01:22:96:f0:57:3e:21:d2:5b:58:42:83:57:
20:3f:82:f7:91:cb:84:7a:b6:99:1a:b0:77:39:f1:
2e:64:80:f2:76:8f:8e:d9:7d:c4:72:5d:be:85:de:
9a:0d:83:bc:5e:96:ba:62:9a:70:b3:5e:fc:46:fb:
0d:2e:47:56:9f:53:ea:33:b5:78:40:a7:b0:27:e2:
ae:59:3d:36:ab:a5:43:ec:46:73:b5:3b:c3:d1:9e:
36:17:10:0f:fe:82:dc:ba:fa:86:f1:02:d8:c0:6b:
93:9a:98:6f:88:f1:e6:bd:5e:70:a7:7b:51:99:b6:
7c:f7:db:a9:c4:74:b3:58:a5:98:17:8d:75:d0:ef:
08:fc:60:44:f0:95:db:44:45:d7:9f:c7:41:a8:a7:
80:09:aa:58:e3:77:4c:2d:8c:9e:e5:90:42:0e:93:
e1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:58:84:C7:83:7F:F2:B0:3E:34:BB:EC:6A:F0:42:D9:57:8F:8A:9B
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/WliEx4N_8rA-NLvsavBC2VePips.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.209.128.0/20
Signature Algorithm: sha256WithRSAEncryption
44:29:a8:bc:9c:ab:31:23:c5:ef:2d:5a:45:e6:a0:1b:67:fe:
a2:df:c6:98:e4:54:7d:3c:92:86:d9:2c:63:60:64:45:8d:04:
83:a9:66:0f:6f:5e:ee:b2:05:e2:42:69:09:2c:99:58:46:c9:
6c:e8:30:69:57:6c:62:c3:76:2b:7e:a3:d6:c6:60:64:87:fd:
6a:58:57:b6:78:69:6c:85:39:83:89:53:26:d7:31:42:c7:8e:
94:99:6f:aa:20:b2:e5:d4:70:42:75:47:5f:75:04:f3:51:44:
8f:30:8c:5b:95:dd:6b:12:42:aa:e7:d8:bf:15:4a:57:17:ab:
b9:4d:f1:b1:40:8d:5e:92:f8:ac:4c:49:4d:ba:39:12:06:1d:
8d:86:32:f7:76:21:de:b8:46:0c:46:93:57:64:f7:9c:5a:ef:
92:c5:90:2a:e7:41:de:7d:c5:87:d9:ce:38:da:ff:80:3a:4d:
91:4f:c7:19:b2:21:19:8f:30:6c:44:d8:ed:e1:c6:2a:8a:7d:
a9:76:3b:42:e4:7d:12:51:4c:de:de:3f:c6:8b:ca:de:f0:f3:
93:bf:e1:6c:64:42:69:ef:c2:1c:89:89:1f:db:12:71:68:ea:
27:e6:34:17:ab:28:1d:4c:91:cd:1e:77:dd:28:9d:d8:23:85:
c7:df:c0:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:54 2024 by rpki-client on console-ams.rpki-client.org