Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/Wuwa59knpUsrxYvDjzFAxNffqpo.roa
File: Wuwa59knpUsrxYvDjzFAxNffqpo.roa (raw, json)
Hash identifier: 2NL62vMJM7kA1LzIdMsZdfs8FSeIHx8GQNfmzwKyRww=
Subject key identifier: 5A:EC:1A:E7:D9:27:A5:4B:2B:C5:8B:C3:8F:31:40:C4:D7:DF:AA:9A
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 07EAB9F9
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/Wuwa59knpUsrxYvDjzFAxNffqpo.roa
Signing time: Tue 31 May 2022 05:03:13 +0000
ROA not before: Tue 31 May 2022 05:03:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212598
IP address blocks: 45.11.190.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 132823545 (0x7eab9f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: May 31 05:03:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5aec1ae7d927a54b2bc58bc38f3140c4d7dfaa9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:13:57:e1:82:26:45:6e:50:c9:a3:35:54:32:
20:e4:67:6f:a3:f9:c7:d8:12:70:20:aa:96:2b:57:
61:92:7c:2c:be:ba:89:d6:91:91:fd:4d:19:e0:ac:
6a:ef:b9:98:77:a8:a6:a0:d8:5e:8e:bb:37:f2:5a:
34:86:73:eb:c8:7e:97:c3:ce:fa:2b:45:a7:0d:51:
63:ec:dc:70:39:ee:35:6c:97:d5:5d:dd:5f:a2:01:
f7:af:81:0e:2f:c8:1a:d6:73:0e:3c:d3:5b:0a:b7:
48:f1:68:9f:e6:88:40:9c:35:85:37:41:a4:90:cb:
d3:f8:71:c0:a1:0f:c9:8c:e4:6e:ee:29:ea:f8:d7:
9f:04:d9:53:b4:07:fe:c3:70:fb:5d:28:f6:6b:6a:
70:43:ad:31:d4:a7:6a:a8:92:08:e4:26:ac:12:c3:
2c:c8:bb:c9:13:4f:70:fd:a9:67:ae:8f:2f:67:af:
bc:de:7e:ca:4b:59:a1:2b:a7:96:65:9e:46:27:19:
74:b5:ff:c5:76:2c:17:f6:28:d3:a0:8a:75:9e:62:
41:45:14:c5:2e:53:58:66:f5:11:dd:d8:0a:12:e9:
af:c8:ed:fe:59:15:f9:b6:44:50:0c:0c:cd:fe:a9:
92:42:e5:7a:c9:14:e3:85:0b:b2:91:0e:0d:ca:b5:
00:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:EC:1A:E7:D9:27:A5:4B:2B:C5:8B:C3:8F:31:40:C4:D7:DF:AA:9A
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/Wuwa59knpUsrxYvDjzFAxNffqpo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.190.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:d6:e3:a5:c5:02:dd:fb:51:c7:68:cd:c2:42:2b:4a:d5:ea:
01:54:9e:89:5c:05:46:63:d6:5a:ee:ab:e3:2b:63:0f:74:cb:
53:97:93:82:be:77:47:f9:da:3f:d5:07:a1:f9:4c:93:36:72:
e6:df:52:99:41:00:c9:c9:25:ac:1b:c4:27:bc:ef:e3:47:b9:
85:5c:4d:3e:c1:ed:56:64:4f:62:c7:3e:01:67:49:46:55:00:
03:63:9e:df:ec:40:3b:5f:63:81:09:e5:fb:57:e5:0c:a1:5e:
52:dd:3a:8a:cd:d2:ff:c1:da:a5:06:19:c8:25:6f:62:3b:17:
58:51:0c:9c:d4:de:42:19:8d:22:a3:8f:cb:dd:7a:5c:a8:d8:
05:37:bb:83:d6:92:4a:fa:5f:4e:1a:02:e2:3b:e3:c9:a6:79:
52:c5:50:e0:1c:23:67:22:20:72:ac:c9:4a:11:97:86:bf:a3:
83:83:3d:cf:0e:ae:26:34:1d:02:e5:53:e4:e1:20:25:70:3b:
1f:4a:c2:1c:d7:95:9b:35:7a:ee:59:4e:22:ff:6e:75:bd:20:
2b:71:70:dd:42:a2:ee:69:f2:65:6c:de:26:2e:74:5a:0f:3a:
42:43:28:f4:a7:1b:77:e7:87:f1:76:70:5d:fe:dc:6d:c5:ce:
e0:5c:9b:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:14 2023 by rpki-client on console-fra.rpki-client.org