Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/wdRoIB8k2laYX8oQkZjjGySIuGM.roa
File: wdRoIB8k2laYX8oQkZjjGySIuGM.roa (raw, json)
Hash identifier: dFd1XUCobGP/QO5erGMg7Je261EUX3InezzKNHMTdAU=
Subject key identifier: C1:D4:68:20:1F:24:DA:56:98:5F:CA:10:91:98:E3:1B:24:88:B8:63
Certificate issuer: /CN=f1b8bbb1e186a599d4cc058cabf4df0e252f31fa
Certificate serial: 05F225E2
Authority key identifier: F1:B8:BB:B1:E1:86:A5:99:D4:CC:05:8C:AB:F4:DF:0E:25:2F:31:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8bi7seGGpZnUzAWMq_TfDiUvMfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/wdRoIB8k2laYX8oQkZjjGySIuGM.roa
Signing time: Sat 15 Jan 2022 14:33:54 +0000
ROA not before: Sat 15 Jan 2022 14:33:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41717
IP address blocks: 193.242.109.0/24 maxlen: 32
193.242.106.0/24 maxlen: 32
193.43.79.0/24 maxlen: 32
193.43.91.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99755490 (0x5f225e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1b8bbb1e186a599d4cc058cabf4df0e252f31fa
Validity
Not Before: Jan 15 14:33:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c1d468201f24da56985fca109198e31b2488b863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:2b:3a:c9:ca:22:54:55:09:1f:fb:5a:1f:fc:
3b:89:3c:43:68:16:06:ad:1d:cb:a4:99:d9:e0:6c:
f9:6b:45:21:24:16:36:3a:0e:bf:d3:b5:55:4b:9f:
79:85:fb:e4:30:db:4c:30:a6:49:97:61:d2:31:79:
a5:a3:78:77:f7:32:dc:ba:16:98:21:13:41:b3:b3:
db:66:a8:de:de:e2:8b:38:22:61:e0:a4:42:35:51:
5e:08:94:cd:41:cb:0a:15:10:49:86:69:8e:74:4b:
44:ff:4d:c7:67:63:52:f8:41:84:89:d0:5e:ce:32:
97:8b:00:57:59:02:e7:58:b2:93:26:c5:26:ec:a0:
d9:af:67:e3:f7:ff:8e:bc:72:27:5e:f8:b5:a4:8c:
47:7d:0c:45:d7:2e:ad:b0:8a:04:ab:66:a2:aa:33:
af:51:a2:21:e4:30:6b:a5:02:f2:fa:b9:d7:dc:8e:
03:5a:ec:71:fc:c4:48:bc:5e:6d:5e:12:a3:44:ae:
89:5f:c6:65:e6:40:3c:bc:66:07:d0:04:f7:bc:ea:
f0:14:1d:1f:66:dc:08:c5:f1:ba:e0:9a:81:51:cc:
f3:df:51:84:85:7a:b4:ab:2f:a0:fa:44:00:8d:7a:
1d:f6:fe:97:7a:49:97:34:5f:28:90:f3:a0:4a:84:
43:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:D4:68:20:1F:24:DA:56:98:5F:CA:10:91:98:E3:1B:24:88:B8:63
X509v3 Authority Key Identifier:
keyid:F1:B8:BB:B1:E1:86:A5:99:D4:CC:05:8C:AB:F4:DF:0E:25:2F:31:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bi7seGGpZnUzAWMq_TfDiUvMfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/wdRoIB8k2laYX8oQkZjjGySIuGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/8bi7seGGpZnUzAWMq_TfDiUvMfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.43.79.0/24
193.43.91.0/24
193.242.106.0/24
193.242.109.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:79:0c:5b:95:0c:ed:85:cd:a5:31:ec:4d:2e:78:a7:52:a6:
2d:98:1c:2a:d2:15:7e:d0:07:db:cc:61:dc:6a:de:76:76:a6:
09:5d:8b:fb:76:83:19:2d:db:86:75:5a:b8:83:4f:7e:8f:b6:
75:69:4a:53:74:65:d4:46:f6:e9:c2:12:f8:ec:fb:2b:86:3a:
30:98:eb:62:99:b4:b4:37:d5:1b:bc:db:92:bd:4f:82:33:34:
62:c4:22:4f:4c:98:b5:de:60:a4:79:89:de:d2:f0:b8:91:dc:
16:39:ae:01:5d:04:8a:2e:8b:89:61:db:3e:f9:e2:95:09:90:
ee:9b:67:31:d5:0b:c6:c4:4b:ef:54:47:ad:0b:33:5d:de:c8:
69:5b:16:8d:06:21:c0:e2:3f:96:38:c0:30:5c:4e:4a:1c:c2:
4a:8b:8c:c1:7a:ea:80:fa:d3:4c:34:dd:d2:84:f6:db:56:50:
b2:19:bb:72:cc:67:02:4c:28:fc:cd:e1:39:e7:5c:9d:b2:93:
5a:d9:c7:ee:3e:57:64:64:66:08:a7:23:5f:6c:3c:a1:40:6f:
9d:c6:5b:71:a0:3b:a9:1d:9d:5b:13:fa:a2:89:30:11:82:0e:
0f:d9:9e:2a:74:cf:aa:57:cc:3b:01:87:d7:da:3c:3a:8e:9e:
c8:c6:59:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:02 2023 by rpki-client on console-fra.rpki-client.org