Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/wyWUk2yyuX_et0c_AHseclnKmLM.roa
File: wyWUk2yyuX_et0c_AHseclnKmLM.roa (raw, json)
Hash identifier: lhTVuFY8ZfvkcYofgulLsUsotNK4IJtHal+EtcActOg=
Subject key identifier: C3:25:94:93:6C:B2:B9:7F:DE:B7:47:3F:00:7B:1E:72:59:CA:98:B3
Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial: 01849BA16540B5C0EC316FC92FE6C30040AF
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/wyWUk2yyuX_et0c_AHseclnKmLM.roa
Signing time: Mon 21 Nov 2022 19:19:16 +0000
ROA not before: Mon 21 Nov 2022 19:19:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44094
IP address blocks: 45.84.1.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:9b:a1:65:40:b5:c0:ec:31:6f:c9:2f:e6:c3:00:40:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Validity
Not Before: Nov 21 19:19:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c32594936cb2b97fdeb7473f007b1e7259ca98b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:0c:2b:2e:b3:ed:a6:58:eb:b1:79:4a:c0:3b:
5d:e4:0e:3a:64:6c:61:e8:fd:28:ee:50:c1:4b:c1:
6e:78:4c:19:01:9d:f6:25:16:08:51:2d:60:94:a0:
39:ba:66:d8:5c:fc:89:db:8e:bc:a0:31:20:d1:79:
24:1c:0f:34:d7:06:a1:11:b2:00:e1:2f:9a:93:34:
c8:ef:c8:d6:56:8b:e3:42:5c:65:33:2e:bf:c5:09:
55:a3:72:24:df:ef:70:78:df:1e:f5:7e:a2:c4:c9:
51:47:b4:a7:04:45:29:e2:d8:2f:c6:16:3d:5a:64:
43:3c:e7:0c:9e:58:76:49:61:e5:d5:fb:9c:6d:57:
23:c7:a6:e4:17:01:f0:e5:bb:a8:00:e3:4d:9e:18:
ff:da:77:cc:14:06:8c:50:8f:34:63:78:25:a8:15:
6f:8c:e1:be:8f:30:4d:ce:e9:d4:41:22:55:b1:68:
97:bc:66:c6:02:c2:5b:b4:83:e2:30:35:31:60:5a:
f5:51:09:d3:63:15:ad:61:5a:b4:f3:f7:1b:7b:bd:
2b:2a:f0:b8:58:8f:7c:30:e4:65:93:8b:d0:bb:32:
7e:42:56:ec:10:8d:7f:a7:f1:73:c5:71:b7:de:e1:
70:74:76:eb:ab:f0:14:f2:9f:a6:c3:37:7d:53:b6:
f6:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:25:94:93:6C:B2:B9:7F:DE:B7:47:3F:00:7B:1E:72:59:CA:98:B3
X509v3 Authority Key Identifier:
keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/wyWUk2yyuX_et0c_AHseclnKmLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.1.0/24
Signature Algorithm: sha256WithRSAEncryption
97:45:77:de:4b:cf:93:52:3d:69:ce:b0:a9:78:f6:7a:4b:3e:
64:3e:67:fe:78:59:61:91:93:23:b4:96:6c:ed:0d:ce:dc:54:
9c:6d:63:8c:7a:bd:e2:43:ce:2d:a2:7e:ed:10:b3:7d:00:1f:
d8:be:c8:a3:e7:c7:61:42:81:6e:a0:9e:e1:e5:59:3f:14:b3:
f2:80:ec:7a:f8:1f:ba:6e:96:15:b2:31:28:62:9b:de:be:31:
8b:96:46:de:cb:58:7a:2a:84:1e:3b:50:07:b0:a9:0b:9f:09:
53:5c:f6:2d:44:45:af:13:40:0a:ae:06:04:86:da:d5:58:69:
dd:72:cf:ac:f2:ea:c8:ae:13:aa:a3:47:b5:07:9f:a4:16:7a:
ca:89:45:f6:d0:67:2d:ae:cf:17:75:1c:90:6f:e1:de:90:40:
c6:96:3f:8a:1b:24:e5:ab:e9:14:05:58:9b:85:62:5e:c2:a2:
7c:77:ee:d3:17:84:38:0a:99:97:ee:5b:9f:30:1a:27:2e:e5:
73:4c:e8:a1:75:8e:4e:95:34:24:76:aa:a3:29:15:17:f9:12:
1d:37:c0:74:96:9e:62:23:fa:0b:49:36:4b:df:0d:79:97:84:
9f:4e:e1:12:64:00:87:fe:4b:5b:44:32:32:ce:5d:87:b2:58:
f7:dc:7a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:42 2023 by rpki-client on console-fra.rpki-client.org