Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/wfPu_pZkYBSI8DtuGw6ugtExKYA.roa
File: wfPu_pZkYBSI8DtuGw6ugtExKYA.roa (raw, json)
Hash identifier: RkVliYJrLJh2zUq3vAPPVkGzp3vKjVY7yAROfiBnIbw=
Subject key identifier: C1:F3:EE:FE:96:64:60:14:88:F0:3B:6E:1B:0E:AE:82:D1:31:29:80
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 018283CF1A7088FE6C19C4ED9AE5B0B48D92
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/wfPu_pZkYBSI8DtuGw6ugtExKYA.roa
Signing time: Tue 09 Aug 2022 18:12:44 +0000
ROA not before: Tue 09 Aug 2022 18:12:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61135
IP address blocks: 212.68.35.0/24 maxlen: 24
188.132.249.0/24 maxlen: 24
188.132.155.0/24 maxlen: 24
188.132.154.0/24 maxlen: 24
188.132.189.0/24 maxlen: 24
188.132.191.0/24 maxlen: 24
78.135.73.0/24 maxlen: 24
78.135.87.0/24 maxlen: 24
78.135.86.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:83:cf:1a:70:88:fe:6c:19:c4:ed:9a:e5:b0:b4:8d:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Aug 9 18:12:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c1f3eefe9664601488f03b6e1b0eae82d1312980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:98:2c:06:39:c7:87:9d:43:54:b6:ec:d3:30:
0d:ce:32:fd:c5:3a:ea:98:bb:be:54:0c:00:45:e5:
7d:60:01:86:fb:e3:ef:c1:cc:f2:91:2f:a5:f7:01:
f4:7c:32:4d:5a:0d:3a:4a:20:43:9f:2b:2b:6c:8d:
26:e6:0b:94:36:78:bd:12:7e:9a:f4:4e:89:ad:b7:
76:06:48:d3:a2:d6:02:6e:d7:0a:92:a5:18:45:1a:
a5:88:25:bc:1d:1c:01:78:ae:d1:84:88:59:1d:98:
a2:73:31:71:36:3b:80:37:87:b6:2c:1a:38:e0:71:
03:83:e7:e1:09:95:e7:85:ba:d2:91:fe:1d:45:ac:
7d:47:77:74:1d:ff:57:3b:6c:9e:da:a4:d5:ed:74:
6a:d6:fe:d3:69:17:c0:a7:80:ef:ec:cc:d1:5c:19:
69:ee:d0:64:98:f4:64:71:a7:ed:90:4e:77:d7:e4:
55:3f:ae:d9:9b:58:06:d4:f1:07:d8:da:19:1f:23:
71:7b:f5:0d:22:83:82:6c:6a:47:d0:f2:5c:d8:7c:
73:f8:7e:95:0f:fc:d2:e4:12:7a:49:c6:cc:a8:ed:
92:90:be:79:0f:fe:1d:8d:7d:6f:9c:0d:dd:f2:b7:
12:e8:19:d2:81:01:74:7a:ee:8b:01:73:09:bd:d4:
67:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F3:EE:FE:96:64:60:14:88:F0:3B:6E:1B:0E:AE:82:D1:31:29:80
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/wfPu_pZkYBSI8DtuGw6ugtExKYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.73.0/24
78.135.86.0/23
188.132.154.0/23
188.132.189.0/24
188.132.191.0/24
188.132.249.0/24
212.68.35.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:b7:dd:82:1a:7c:e3:30:b7:64:f3:21:c6:57:49:a6:db:45:
2f:02:1c:c3:90:13:a1:a0:0d:53:23:95:07:4c:d3:6d:40:84:
47:69:4d:3b:41:c8:de:d7:6f:c1:a4:d8:82:d0:47:f5:d6:00:
a8:74:8c:5d:93:e3:25:3a:5f:9c:eb:4d:6c:e8:48:f9:91:17:
36:f5:a4:d0:e3:97:6e:fa:6f:2b:09:a1:f2:cf:24:5c:70:8f:
57:b3:e7:00:d1:db:77:3b:09:98:c2:10:6e:1d:e7:c7:8c:28:
f4:72:5b:ed:0e:ab:9b:ec:ed:bb:e7:79:66:ed:64:cc:97:4a:
18:09:bd:c3:9a:69:f8:5f:8c:3c:8b:b4:8a:4b:68:a0:c8:80:
b0:d3:63:2b:3a:f9:6a:e1:30:92:8a:ef:2e:2a:ab:2a:95:77:
0c:9e:35:76:cf:38:80:0a:fe:8d:87:e1:44:25:94:12:de:73:
44:68:ac:20:f2:ad:b8:75:c0:06:99:58:9d:07:6e:33:82:07:
cb:dd:6a:0b:c4:22:cf:d5:f7:7e:19:71:83:a5:ab:ce:d8:64:
e1:66:3d:3e:56:6b:9b:5d:dd:0e:89:ec:ab:61:54:ae:b2:7a:
7a:d9:3d:0a:aa:ee:9f:10:33:da:60:38:63:d2:c3:8a:77:ff:
bd:b4:cd:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:44 2024 by rpki-client on console-fra.rpki-client.org