Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/wGWCS9eHJc89-CLG9DjwLUsSGqU.roa
File: wGWCS9eHJc89-CLG9DjwLUsSGqU.roa (raw, json)
Hash identifier: u+OaVfw0IfUjgFqgjk1qstgbYndHnwR08UZi9HgQDo8=
Subject key identifier: C0:65:82:4B:D7:87:25:CF:3D:F8:22:C6:F4:38:F0:2D:4B:12:1A:A5
Certificate issuer: /CN=dede91a0fb1f4dd17900d06db6e88336f78b5c05
Certificate serial: 0294B2
Authority key identifier: DE:DE:91:A0:FB:1F:4D:D1:79:00:D0:6D:B6:E8:83:36:F7:8B:5C:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/wGWCS9eHJc89-CLG9DjwLUsSGqU.roa
Signing time: Wed 11 May 2022 09:45:03 +0000
ROA not before: Wed 11 May 2022 09:45:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3320
IP address blocks: 192.124.252.0/24 maxlen: 24
193.28.64.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169138 (0x294b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dede91a0fb1f4dd17900d06db6e88336f78b5c05
Validity
Not Before: May 11 09:45:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c065824bd78725cf3df822c6f438f02d4b121aa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:10:b3:34:87:4f:01:aa:44:65:69:27:20:ba:
91:c6:a6:23:1d:1e:a0:28:d8:3b:bb:4a:0f:aa:3e:
16:c2:c2:c2:13:7f:9e:12:c8:a5:28:32:00:e0:94:
25:eb:2f:ec:30:f9:71:6b:a8:0e:f7:23:ee:92:4b:
16:9f:06:12:c2:18:ad:c9:12:ca:b6:7f:2f:42:ae:
75:7c:6e:3d:cc:16:d6:4a:13:9e:fc:44:b7:9d:ed:
05:3b:28:3a:fd:e2:88:da:4f:42:84:b5:94:71:93:
18:9e:b5:3e:84:47:50:21:95:d6:31:df:91:5e:4e:
de:b2:cd:8f:fd:33:ab:30:d7:29:12:29:c1:c8:4b:
c5:74:09:d5:e7:ff:9d:fc:ec:45:55:6c:bc:77:99:
ff:65:a2:86:7a:93:eb:be:47:a7:8e:c3:bb:53:cf:
fd:00:14:6c:e0:86:73:c1:bf:58:eb:64:00:3d:1c:
66:62:94:6c:0e:64:20:f9:2d:6c:9f:a9:92:0d:39:
4c:d2:49:7f:5d:98:b8:a9:74:8a:1f:87:6f:d9:4a:
87:e8:2a:52:df:21:4c:a2:c6:56:26:c5:9f:36:4e:
2e:d3:55:22:6e:7f:be:5b:56:72:43:9e:69:12:4a:
7d:0e:fe:f2:67:53:12:84:59:d4:f6:bc:3a:06:f2:
d4:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:65:82:4B:D7:87:25:CF:3D:F8:22:C6:F4:38:F0:2D:4B:12:1A:A5
X509v3 Authority Key Identifier:
keyid:DE:DE:91:A0:FB:1F:4D:D1:79:00:D0:6D:B6:E8:83:36:F7:8B:5C:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/wGWCS9eHJc89-CLG9DjwLUsSGqU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.252.0/24
193.28.64.0/24
Signature Algorithm: sha256WithRSAEncryption
59:8d:c0:8a:2f:e7:7f:f7:8b:8d:11:28:a1:5a:12:69:ae:f0:
b1:d4:3f:f2:47:c8:03:51:e1:07:17:54:53:22:ab:07:e0:c7:
13:e8:13:cb:42:43:a1:09:6d:ae:0b:c9:e3:73:98:d7:70:97:
00:59:b3:32:1c:bd:3a:c2:20:58:36:e3:79:9a:bf:71:55:22:
66:11:91:3e:f0:98:ca:d8:70:0a:6d:55:3f:c5:3a:1c:91:e5:
42:32:b2:20:35:8d:81:e0:32:23:2c:d4:cb:d6:5b:d2:21:44:
06:e7:12:44:2e:ec:bc:74:a5:e5:e6:89:3a:41:29:3b:c6:25:
a5:c1:a4:c2:d6:27:59:29:64:24:94:eb:79:22:88:e3:16:20:
71:94:ac:25:b6:d6:26:65:e3:9a:72:7c:09:27:7c:37:da:d0:
c6:93:38:84:5f:70:41:13:65:e4:37:56:b9:4e:72:07:c8:1d:
85:47:0f:5c:b5:51:e8:9d:95:3d:1c:38:2b:d2:52:73:2d:b6:
99:8b:44:c7:a4:f0:b4:4f:9e:35:4e:76:01:dc:c1:29:5f:63:
04:c4:29:a4:43:65:00:3d:fb:f0:97:c5:64:72:73:07:48:16:
0a:1c:53:cc:49:aa:34:12:71:f0:93:2f:9d:ab:ec:9a:d9:f2:
9a:4f:80:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:32 2023 by rpki-client on console-fra.rpki-client.org