Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Wx_pYFJzPj9XMkNWBmna75wv9XE.roa
File: Wx_pYFJzPj9XMkNWBmna75wv9XE.roa (raw, json)
Hash identifier: f2jUeEpicDNImlSR1mtPAKwDlQAMIRMPDrCa672hSWU=
Subject key identifier: 5B:1F:E9:60:52:73:3E:3F:57:32:43:56:06:69:DA:EF:9C:2F:F5:71
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 276A7951
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Wx_pYFJzPj9XMkNWBmna75wv9XE.roa
Signing time: Sat 01 Jan 2022 16:07:58 +0000
ROA not before: Sat 01 Jan 2022 16:07:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35273
IP address blocks: 146.158.31.0/24 maxlen: 24
93.170.26.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 661289297 (0x276a7951)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:07:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5b1fe96052733e3f573243560669daef9c2ff571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:05:df:19:bc:cd:fd:b7:17:4a:eb:cb:9b:af:
95:78:74:16:08:d5:5f:53:81:89:da:ae:c5:f7:28:
73:54:95:34:fa:22:fa:89:e7:eb:c0:ea:ff:d4:12:
72:c2:3b:12:f0:78:30:87:63:bd:56:b5:be:32:95:
2a:6b:66:10:2b:4d:ac:90:03:e4:0c:a0:a1:1f:df:
70:0b:18:e1:40:dd:62:d4:52:b3:1b:d5:0b:c3:19:
29:b5:21:cf:5c:27:53:1d:79:43:1c:09:42:e7:42:
51:97:38:74:87:35:6f:e0:f2:da:71:63:3e:02:06:
7d:8c:cf:6c:f5:8f:b9:40:71:bd:8c:c7:1a:e6:33:
b8:25:05:25:91:af:48:3b:c5:d6:66:a8:8c:83:f3:
33:06:bf:e0:64:64:53:a0:c0:1e:b7:2d:9d:ab:b1:
61:d8:e3:df:54:41:15:ae:36:ab:5e:26:ae:40:1f:
6a:b7:70:9f:39:bb:f4:18:4f:8a:50:91:8b:e9:15:
c5:79:2b:47:80:5a:2e:f9:24:95:b6:c5:c3:8f:60:
f2:a9:28:3a:56:7f:e4:71:5a:9f:39:fb:90:b7:8e:
db:ae:fb:e7:9d:dc:9b:e6:ed:9b:be:36:c3:54:6a:
4d:b1:0b:6d:0e:27:0c:36:3a:75:8a:f4:6d:5b:f4:
92:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:1F:E9:60:52:73:3E:3F:57:32:43:56:06:69:DA:EF:9C:2F:F5:71
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Wx_pYFJzPj9XMkNWBmna75wv9XE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.26.0/24
146.158.31.0/24
Signature Algorithm: sha256WithRSAEncryption
28:7a:7d:47:1c:d3:cd:d1:9c:22:77:6f:ea:82:fe:56:c0:f1:
00:3b:5c:c7:08:9d:f3:41:0d:48:e6:6b:79:3f:fe:64:8e:52:
fd:c5:e2:5c:d7:54:34:b8:03:51:4d:2c:71:98:4b:d9:2a:cd:
f7:ce:32:b6:29:d9:09:bc:f4:8f:72:df:40:7a:af:86:4a:3f:
9f:40:da:64:58:5a:7c:7e:f9:50:62:46:8e:c8:50:f7:21:f0:
6e:c3:af:98:27:eb:43:35:a4:8e:72:d0:28:5e:fe:be:a7:94:
42:83:5f:f4:56:a8:e0:ec:ec:a0:cd:33:60:c2:cd:8a:4d:87:
2a:a9:44:17:74:1a:54:06:c7:e0:f8:d1:34:b9:bf:bc:b1:d6:
62:3a:70:59:a0:a4:9a:ba:86:21:1c:dc:ee:3f:18:e8:52:66:
0d:9a:2c:5b:b1:5c:cb:f2:ca:f3:ad:f6:64:3d:33:69:89:ae:
48:12:8b:56:38:fe:83:26:e0:5d:2f:62:a7:dc:dd:5d:f9:22:
d2:90:45:6e:b6:91:d8:2e:cf:ee:dd:bc:e4:61:a9:de:e5:c7:
21:07:cb:30:c4:d7:98:ee:a8:79:fb:d1:c2:78:7a:82:43:41:
c2:fa:f6:cb:2f:e9:a2:dc:d7:2c:1b:c6:ec:80:c8:fc:76:48:
79:84:16:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:42 2023 by rpki-client on console-fra.rpki-client.org