Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/wSPT4DBS6yUJ-F4RH-zoLeMcu3M.roa
File: wSPT4DBS6yUJ-F4RH-zoLeMcu3M.roa (raw, json)
Hash identifier: WmIsRVeZI2SUHzuP02Fx9aNAF5xD0QlXGCzhvcD3rcQ=
Subject key identifier: C1:23:D3:E0:30:52:EB:25:09:F8:5E:11:1F:EC:E8:2D:E3:1C:BB:73
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 05AC67A0
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/wSPT4DBS6yUJ-F4RH-zoLeMcu3M.roa
Signing time: Fri 01 Jul 2022 12:11:25 +0000
ROA not before: Fri 01 Jul 2022 12:11:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202766
IP address blocks: 94.198.47.0/24 maxlen: 24
94.198.46.0/24 maxlen: 24
89.42.70.0/24 maxlen: 24
185.242.175.0/24 maxlen: 24
178.19.44.0/24 maxlen: 24
178.19.47.0/24 maxlen: 24
80.66.112.0/23 maxlen: 23
185.229.212.0/22 maxlen: 22
185.229.213.0/24 maxlen: 24
185.229.212.0/24 maxlen: 24
80.66.117.0/24 maxlen: 24
80.66.116.0/24 maxlen: 24
80.66.115.0/24 maxlen: 24
80.66.114.0/24 maxlen: 24
185.229.215.0/24 maxlen: 24
185.229.214.0/24 maxlen: 24
80.66.121.0/24 maxlen: 24
80.66.120.0/24 maxlen: 24
89.44.150.0/24 maxlen: 24
178.19.33.0/24 maxlen: 24
178.19.32.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95184800 (0x5ac67a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jul 1 12:11:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c123d3e03052eb2509f85e111fece82de31cbb73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a3:f8:96:74:0a:cd:5e:15:3f:38:9a:87:b3:
17:d8:e8:9f:44:17:c9:cb:e6:50:44:43:c2:b2:f8:
b0:e8:98:b7:ad:90:99:27:7a:bd:00:34:28:19:5c:
49:db:2e:71:ed:67:da:52:44:bd:7b:76:25:c0:db:
08:5d:18:5e:12:da:ac:ee:23:67:8f:ec:e2:c5:54:
32:79:b8:5b:c8:62:c3:fe:58:0f:00:2b:cd:79:fb:
72:8d:7f:8e:16:bb:12:2c:19:72:69:a0:36:aa:47:
0e:65:9d:b3:1a:22:66:33:d6:f3:91:9c:4a:ad:3e:
13:58:ac:f0:f3:3a:73:f5:f8:6d:4b:02:d1:2d:2e:
3d:71:64:5e:ba:7c:08:5e:08:8a:9d:b4:6f:b9:ee:
20:d7:23:19:9b:10:13:43:c6:11:fe:9b:9e:b0:9d:
40:35:4f:d9:ee:6b:d1:30:30:30:51:82:d6:71:2a:
fe:8a:1d:fc:52:dd:22:13:0e:53:f1:c2:d1:f2:a2:
a3:2d:6d:e4:6b:a5:53:d5:16:f7:09:9a:d1:70:2d:
4f:0c:87:82:9c:54:d0:4c:12:f6:17:85:50:d1:d9:
c8:81:93:7c:76:56:f5:a1:19:ef:04:ca:5c:13:90:
cb:65:a3:94:7b:eb:4c:d4:5b:e8:c2:0a:c6:03:e4:
c3:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:23:D3:E0:30:52:EB:25:09:F8:5E:11:1F:EC:E8:2D:E3:1C:BB:73
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/wSPT4DBS6yUJ-F4RH-zoLeMcu3M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.66.112.0-80.66.117.255
80.66.120.0/23
89.42.70.0/24
89.44.150.0/24
94.198.46.0/23
178.19.32.0/23
178.19.44.0/24
178.19.47.0/24
185.229.212.0/22
185.242.175.0/24
Signature Algorithm: sha256WithRSAEncryption
00:a9:69:96:ba:74:33:25:27:1b:83:49:5a:22:61:5e:1a:4b:
63:bf:17:79:78:3a:fe:ac:e3:01:07:27:20:22:b4:39:a1:85:
fe:f1:eb:23:1f:15:4d:29:f9:61:9c:23:5c:8d:cf:5f:a9:2c:
e3:3c:54:c9:39:5f:9b:4a:c4:96:6c:95:48:96:df:da:f7:a5:
d9:f3:02:b9:60:78:fa:09:01:02:62:6f:8c:e9:26:99:41:95:
cc:cc:4b:80:ee:7a:b0:33:72:84:23:31:b3:1a:17:5b:2f:fc:
11:2d:6b:0e:34:a1:66:d6:c1:8d:27:ae:44:6e:2e:f1:8a:26:
79:e3:b8:40:dd:1c:fd:71:c8:4b:0c:b8:9c:a9:59:54:b3:19:
40:bf:5f:21:ff:10:75:a1:8a:05:80:b2:72:18:b7:01:ea:47:
ca:d4:55:8d:af:18:c7:ab:8b:48:24:c3:36:20:c6:08:50:b0:
b9:4f:41:3c:9b:13:53:6a:fd:93:7a:cd:fb:76:06:2f:e4:ff:
83:bc:d5:80:35:28:36:4d:9c:45:44:58:86:3f:d8:89:46:39:
b5:1d:7c:c1:6d:c3:dc:e5:2e:b0:f4:ca:64:ad:da:e3:eb:bb:
89:29:de:3e:e3:9a:1d:e1:ad:f7:8a:76:c6:f3:83:bf:16:a0:
14:3a:ce:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:36 2023 by rpki-client on console-ams.rpki-client.org