Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wVZC92PwfADw0HCuBEris5z_pdQ.roa
File: wVZC92PwfADw0HCuBEris5z_pdQ.roa (raw, json)
Hash identifier: pdHAxoUYyhPYepNXAUdJMzHu3qmEYGMfP4suz7ZmPn0=
Subject key identifier: C1:56:42:F7:63:F0:7C:00:F0:D0:70:AE:04:4A:E2:B3:9C:FF:A5:D4
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01849F5D395296E25E974EF7053FC59C72FB
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wVZC92PwfADw0HCuBEris5z_pdQ.roa
Signing time: Tue 22 Nov 2022 12:43:17 +0000
ROA not before: Tue 22 Nov 2022 12:43:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25198
IP address blocks: 45.131.186.0/24 maxlen: 24
185.238.189.0/24 maxlen: 24
2a0e:97c0:a80::/44 maxlen: 48
2a0e:97c0:300::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:9f:5d:39:52:96:e2:5e:97:4e:f7:05:3f:c5:9c:72:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Nov 22 12:43:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c15642f763f07c00f0d070ae044ae2b39cffa5d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2c:6d:6d:f0:b8:93:84:de:96:da:87:76:93:
15:65:68:00:94:a0:78:a8:25:6e:61:7f:99:fe:a7:
74:53:d3:cc:50:db:e0:05:9e:bc:56:40:48:a6:6e:
a5:f4:1c:56:55:79:28:4a:50:5f:90:43:29:d9:b8:
3d:c1:78:c6:28:31:ca:90:48:d3:72:02:d0:1c:ca:
b2:1f:d7:92:4d:e6:56:a3:d7:02:a4:aa:cf:87:0f:
9d:52:5c:46:56:b2:47:31:53:3d:e1:51:eb:d5:3a:
40:94:ab:46:a2:a3:88:19:4b:07:30:af:d8:5d:01:
7f:9c:da:33:6f:e1:a4:9f:88:95:4b:89:63:23:40:
b1:6b:ed:6e:1f:f2:4d:77:9c:38:bd:f5:83:63:40:
e4:1d:5e:35:67:93:19:25:15:70:ff:48:bd:ea:05:
20:cc:e5:be:41:f7:fe:c6:45:ac:26:ce:86:1f:da:
13:00:4e:5a:0c:50:be:c3:e3:d4:d3:b8:99:6c:ea:
c7:75:19:0c:a1:40:b3:bc:97:00:3b:1c:79:51:7d:
b1:ac:d7:71:ae:8c:60:2d:65:5d:66:e1:e6:f5:83:
68:6e:80:98:c2:c6:9a:03:a2:62:ee:7e:19:23:a3:
79:2a:59:ef:af:9c:a7:f6:48:f2:e6:67:ce:6f:a7:
97:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:56:42:F7:63:F0:7C:00:F0:D0:70:AE:04:4A:E2:B3:9C:FF:A5:D4
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wVZC92PwfADw0HCuBEris5z_pdQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.186.0/24
185.238.189.0/24
IPv6:
2a0e:97c0:300::/44
2a0e:97c0:a80::/44
Signature Algorithm: sha256WithRSAEncryption
10:f1:a5:84:6f:86:0f:05:93:5d:47:fe:14:2c:be:41:0a:ad:
c5:91:d3:99:00:7f:46:6f:86:4e:f1:af:52:0a:91:d0:62:dd:
e4:2e:74:de:62:4b:3c:b9:99:1c:61:4c:3b:2f:d9:23:ae:9d:
8a:80:07:ed:58:c2:cf:a3:d6:c4:94:e4:75:11:6a:40:8d:fc:
0c:f7:be:51:ac:94:33:62:5c:f2:d6:1d:cf:b4:ef:ac:95:5d:
1a:7c:63:90:06:18:c2:dd:e0:70:b2:f7:bb:02:2e:d0:9d:56:
8a:ca:7d:69:41:fc:c5:0f:f2:72:f7:6e:80:3c:00:90:5d:38:
c9:ef:b7:62:26:60:28:24:06:38:6e:af:07:96:51:62:ae:93:
7b:3b:cd:b8:d6:e3:7e:f4:c8:9a:88:f8:21:f6:ed:a4:4c:0e:
c1:7f:be:35:75:87:28:a3:db:e2:50:e8:c4:9f:79:80:f8:e3:
c1:f7:b4:fc:6f:3e:11:56:f4:c1:28:d0:7e:9c:c2:5b:b5:89:
97:9b:59:bb:29:b8:13:c4:28:0b:f3:a5:27:fb:01:10:a0:bb:
3c:53:bd:7f:1f:4e:87:9e:6a:38:a3:6a:a5:19:6f:15:15:26:
32:23:42:ff:68:9b:ae:65:02:e5:4b:fb:97:8c:dd:9f:1e:73:
0e:c6:44:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:21 2023 by rpki-client on console-fra.rpki-client.org