Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/WA8BwY6yehtdgtZPRP7Wsg7Z8bU.roa
File: WA8BwY6yehtdgtZPRP7Wsg7Z8bU.roa (raw, json)
Hash identifier: b+9lo0iDmteCUkHagSHGh43ncI0C+qyR2eJCzargUkI=
Subject key identifier: 58:0F:01:C1:8E:B2:7A:1B:5D:82:D6:4F:44:FE:D6:B2:0E:D9:F1:B5
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 1C8F903D
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/WA8BwY6yehtdgtZPRP7Wsg7Z8bU.roa
Signing time: Thu 27 Jan 2022 17:34:31 +0000
ROA not before: Thu 27 Jan 2022 17:34:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 212.111.222.0/24 maxlen: 24
212.111.223.0/24 maxlen: 24
212.111.220.0/24 maxlen: 24
212.111.221.0/24 maxlen: 24
195.178.132.0/24 maxlen: 24
195.178.133.0/24 maxlen: 24
195.178.134.0/24 maxlen: 24
195.178.135.0/24 maxlen: 24
195.178.140.0/24 maxlen: 24
195.178.141.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 479170621 (0x1c8f903d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jan 27 17:34:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=580f01c18eb27a1b5d82d64f44fed6b20ed9f1b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d4:26:b1:dd:78:5a:48:38:ce:6c:db:b0:ab:
2c:35:a9:1d:4b:57:3d:dd:57:50:af:ba:33:08:c5:
4b:24:0d:2b:14:69:6e:4f:e4:00:8d:d6:84:0e:a5:
8d:00:08:8b:c3:0d:ad:48:ea:4d:14:2b:91:b8:4c:
db:c2:1d:5e:29:77:a5:dc:34:a1:9b:4b:45:08:49:
18:e0:66:0d:d1:b5:f8:0b:d4:c6:5c:87:26:e4:db:
ed:41:41:93:27:9f:37:97:bb:75:b6:1e:d3:af:e8:
51:5b:c1:bf:b3:ea:a8:8b:67:af:90:b7:fc:d9:f2:
0b:37:03:47:47:82:59:88:21:b1:f7:01:25:d0:f6:
1b:6d:86:84:84:92:0e:7a:fb:2f:1c:86:3a:4c:50:
0d:bb:89:32:6d:12:6c:c9:f8:3f:77:d3:8a:0f:54:
83:ca:e5:81:0d:08:04:71:4a:24:98:79:e0:63:c1:
21:50:df:88:d0:93:b5:45:6f:9f:93:46:a7:0a:7f:
48:8c:58:7f:48:38:9a:93:ea:65:8f:97:81:ca:2f:
c0:74:6c:86:e0:42:ee:59:21:df:90:bc:2d:fa:8a:
7a:17:27:85:14:89:8d:5f:d3:03:a6:1e:33:68:3b:
cb:22:4e:a7:b1:d0:78:5e:f2:ea:4c:35:b4:83:80:
f3:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:0F:01:C1:8E:B2:7A:1B:5D:82:D6:4F:44:FE:D6:B2:0E:D9:F1:B5
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/WA8BwY6yehtdgtZPRP7Wsg7Z8bU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.178.132.0/22
195.178.140.0/23
212.111.220.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:64:e2:db:6b:f5:cb:32:99:0c:d5:bd:8a:19:7f:16:94:9c:
ae:27:dd:7e:2f:69:ed:78:db:7b:25:5e:95:5a:aa:67:00:b9:
32:34:3d:b5:14:81:e7:a9:9c:8a:be:be:5c:78:a1:be:98:b5:
c2:57:30:b8:60:2e:4e:b4:b2:33:b8:27:8e:a0:2c:63:a5:39:
27:a8:32:89:4c:a1:1f:21:df:74:b6:b6:07:f6:e7:2f:72:21:
34:d3:a1:8e:c2:dd:40:03:26:9b:0e:09:e9:45:6f:45:3e:b0:
80:ff:07:81:b1:9e:36:2f:4c:f7:55:14:8d:01:a3:a7:7b:5f:
88:38:85:fd:2e:07:bc:a0:84:da:a9:51:db:51:fb:e4:aa:9a:
e8:f5:9d:68:00:5d:b8:fe:81:67:35:b6:e4:9a:0e:87:5b:a2:
bf:e5:f4:fe:87:6f:c1:a5:37:cf:83:b6:80:cc:e7:b4:2e:96:
54:5e:11:01:5e:d5:2d:6e:71:7a:e1:b3:d3:fc:f9:87:66:95:
a3:9c:c9:16:b9:29:10:57:2f:8d:e6:b6:55:76:5d:ce:d4:cb:
8f:51:6a:8d:7e:ff:7c:53:d5:58:7f:03:14:e5:2e:10:36:00:
ec:bd:7f:2d:8f:8f:8f:aa:cd:ec:d9:d7:29:cf:16:17:6e:77:
6f:18:72:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:38 2024 by rpki-client on console-ams.rpki-client.org