Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/5c6c21-f8c8-4640-a12f-08c0b5e7a5ad/1/WfuZd9B4NJubRqXIR7K0RcLZG6w.roa
File: WfuZd9B4NJubRqXIR7K0RcLZG6w.roa (raw, json)
Hash identifier: z5l0QjPCVVbxL175dZDCqKE47vM/5NqeJ9DQxSTbFlI=
Subject key identifier: 59:FB:99:77:D0:78:34:9B:9B:46:A5:C8:47:B2:B4:45:C2:D9:1B:AC
Certificate issuer: /CN=5b8afd86d17516ec67af610d2d3041d06c1cd480
Certificate serial: 018326EC5902DF72B7F600ACAF1B81065213
Authority key identifier: 5B:8A:FD:86:D1:75:16:EC:67:AF:61:0D:2D:30:41:D0:6C:1C:D4:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W4r9htF1Fuxnr2ENLTBB0Gwc1IA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/5c6c21-f8c8-4640-a12f-08c0b5e7a5ad/1/WfuZd9B4NJubRqXIR7K0RcLZG6w.roa
Signing time: Sat 10 Sep 2022 10:22:46 +0000
ROA not before: Sat 10 Sep 2022 10:22:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39855
IP address blocks: 45.91.150.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:26:ec:59:02:df:72:b7:f6:00:ac:af:1b:81:06:52:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b8afd86d17516ec67af610d2d3041d06c1cd480
Validity
Not Before: Sep 10 10:22:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=59fb9977d078349b9b46a5c847b2b445c2d91bac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9c:cf:27:7c:b2:b1:a6:85:07:f8:78:53:ef:
fa:81:e1:51:ce:57:f9:18:ce:8f:94:72:a0:e3:3d:
a5:e8:59:42:2e:1a:96:ee:94:26:7b:d9:53:7c:b3:
80:b3:10:7c:f9:78:7b:29:77:6b:68:23:2c:2e:31:
27:ed:02:7e:ca:d9:d7:7c:08:2f:67:34:97:d1:09:
4a:a3:83:86:76:15:5f:f9:78:55:54:26:52:bd:e0:
26:a7:1a:54:84:13:ce:ad:db:20:ec:15:bd:de:b6:
13:19:b2:97:ac:c5:ad:f7:f5:25:ac:d2:67:0d:82:
63:55:76:a9:e4:53:e3:47:f2:21:80:4e:c5:58:3c:
1d:7a:fa:d6:2d:11:4d:0d:ed:1e:45:44:22:18:c3:
c4:75:82:3b:85:27:97:1a:5d:ab:d4:ea:05:87:8d:
20:1a:53:9b:7f:5d:48:a1:25:6f:eb:1b:ed:b2:db:
f0:3c:d1:f4:d4:85:04:56:6e:04:0a:99:c1:20:ed:
ff:9d:78:b5:30:13:fd:5e:35:7c:c6:da:d4:5b:15:
92:60:87:c9:aa:ee:66:3f:ac:50:bb:a6:c3:dc:e3:
25:1d:a7:d4:7e:c1:30:cb:dc:f9:08:fc:67:4d:54:
12:87:6f:f3:dc:f4:21:10:78:d7:33:b3:4f:08:a6:
94:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:FB:99:77:D0:78:34:9B:9B:46:A5:C8:47:B2:B4:45:C2:D9:1B:AC
X509v3 Authority Key Identifier:
keyid:5B:8A:FD:86:D1:75:16:EC:67:AF:61:0D:2D:30:41:D0:6C:1C:D4:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W4r9htF1Fuxnr2ENLTBB0Gwc1IA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/5c6c21-f8c8-4640-a12f-08c0b5e7a5ad/1/WfuZd9B4NJubRqXIR7K0RcLZG6w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/5c6c21-f8c8-4640-a12f-08c0b5e7a5ad/1/W4r9htF1Fuxnr2ENLTBB0Gwc1IA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.150.0/24
Signature Algorithm: sha256WithRSAEncryption
96:23:ed:8f:dd:ed:cf:00:1a:10:43:ae:92:dc:d2:37:dd:3d:
53:0f:1e:db:c2:00:aa:59:75:4b:0c:3d:e6:9f:ea:cb:dd:2e:
01:b7:7d:2b:4c:c0:a0:96:09:44:05:70:bb:8e:95:8f:22:88:
8e:41:b1:31:d4:fa:11:17:58:05:26:6f:d7:cf:f5:fc:01:8e:
fa:47:bd:4f:1f:c1:13:91:e3:6e:38:e4:6d:93:5c:7c:15:f8:
75:8f:52:c4:d6:d9:4a:77:22:6e:77:cf:95:d9:31:ad:04:f1:
d5:3e:a5:1f:7e:01:6b:32:ea:9c:ef:bd:0b:21:26:5a:c3:01:
13:e3:09:77:d9:11:55:ac:2d:6e:10:66:e5:9e:ee:cc:07:4e:
b9:94:82:51:65:24:00:f0:a1:9f:85:ce:70:77:6a:3b:29:30:
36:a3:d7:14:0a:90:68:b3:c6:e2:7d:1e:96:11:d1:dc:fd:f4:
3a:21:15:3c:b1:01:e9:6b:78:0f:a2:3a:b8:8e:bc:ef:7b:e7:
55:b8:9a:5d:18:22:1c:12:ab:37:64:4f:40:8f:80:6b:ce:b9:
03:70:74:50:ec:51:ab:5e:7e:c0:3f:76:52:00:07:a1:20:f4:
8f:e3:0d:d8:e7:f8:95:cf:31:66:53:48:a9:c3:0d:b8:80:1e:
b9:2d:a4:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:38 2023 by rpki-client on console-ams.rpki-client.org