Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/wUDlmXA2PPJZ5y9w8VTfXgJhYyU.roa
File: wUDlmXA2PPJZ5y9w8VTfXgJhYyU.roa (raw, json)
Hash identifier: VNccvNhRpHA3D5saErly7vVivOeWrKWHy0V2EjVKsH4=
Subject key identifier: C1:40:E5:99:70:36:3C:F2:59:E7:2F:70:F1:54:DF:5E:02:61:63:25
Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial: 08387AAB
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/wUDlmXA2PPJZ5y9w8VTfXgJhYyU.roa
Signing time: Sat 01 Jan 2022 07:56:14 +0000
ROA not before: Sat 01 Jan 2022 07:56:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204102
IP address blocks: 212.22.67.0/24 maxlen: 24
212.22.84.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137919147 (0x8387aab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
Validity
Not Before: Jan 1 07:56:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c140e59970363cf259e72f70f154df5e02616325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4c:02:d3:8d:64:28:76:2c:6e:1f:ec:91:f2:
14:c8:f6:e3:1f:5c:2b:69:89:ec:86:ba:4c:42:15:
ab:1f:71:59:02:cc:ce:34:c3:92:a2:c2:7d:73:2d:
f9:37:b4:3e:96:58:68:93:ec:69:32:94:84:ff:5f:
2c:bf:4e:3a:75:3f:32:02:c7:4c:5e:11:79:ee:27:
ae:40:bf:8b:18:f4:83:8f:7d:55:28:c7:4c:82:46:
85:aa:5d:c0:d5:3d:87:a0:a7:8f:50:75:95:d3:97:
e4:ab:46:c0:af:7d:41:38:1a:c3:84:fa:4b:95:e5:
16:ea:35:3f:b7:02:38:b3:07:1b:b3:87:c7:0e:e2:
53:52:e1:ac:1d:21:6a:fa:ce:3f:b2:21:16:c1:a4:
35:bd:66:d9:97:a1:52:86:53:46:ac:09:ac:2a:7c:
d3:36:e7:58:4a:d8:3a:37:e0:e5:c6:5f:f7:5f:e0:
de:80:c0:fb:80:4b:57:2c:75:28:73:7a:6d:b5:7e:
10:d9:03:42:65:68:1e:d0:ea:77:ac:0b:da:fb:9e:
82:1b:d7:4e:82:66:12:c8:82:63:1a:20:7c:a5:c8:
d0:5c:ba:b9:af:c7:67:98:28:41:52:14:5f:35:78:
5c:f0:bb:e5:14:0c:da:81:3a:17:0b:5f:6b:b0:c9:
1b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:40:E5:99:70:36:3C:F2:59:E7:2F:70:F1:54:DF:5E:02:61:63:25
X509v3 Authority Key Identifier:
keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/wUDlmXA2PPJZ5y9w8VTfXgJhYyU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.22.67.0/24
212.22.84.0/24
Signature Algorithm: sha256WithRSAEncryption
30:5e:82:18:6c:a6:9a:ad:8b:23:5b:6e:e2:ef:2b:c2:eb:8d:
a0:a1:ce:da:1d:8e:27:73:4e:a5:22:50:af:50:4b:d2:62:62:
5b:ed:1c:ba:c0:1b:c9:59:7f:37:f2:39:5e:67:93:b2:21:5a:
d6:f7:a0:ca:0b:c2:40:3d:17:3c:95:45:6b:a7:20:e4:48:9f:
ec:f8:78:8a:d1:85:fe:2d:d8:3c:e3:5e:d5:95:1b:c9:ac:0e:
17:28:c9:f1:db:e2:e0:ad:ea:31:3a:22:9f:96:7a:b9:aa:22:
a9:ce:db:b8:ff:4a:a4:09:41:2c:00:9b:4c:0a:e5:04:a0:45:
46:57:12:f5:e5:5d:2b:1a:ce:70:71:ce:70:be:94:f3:33:1b:
d7:7a:2f:b2:67:30:a5:98:ea:c9:03:b3:68:ad:c4:72:ee:85:
1b:a9:be:02:dd:b4:dd:6d:da:51:e7:08:52:54:57:17:10:dd:
b1:5d:f7:52:47:64:63:a4:4c:5b:1a:8b:2b:71:f9:ab:dc:aa:
49:d1:fd:08:ee:c1:6f:3f:15:6e:41:cb:cf:1d:7b:17:6b:bb:
af:54:68:9a:31:9f:53:c4:c3:67:56:58:3d:45:fd:49:a4:39:
bc:bf:3b:35:d6:2a:83:31:fd:a1:af:1e:81:47:a5:98:e9:29:
9a:b7:cc:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:02 2023 by rpki-client on console-fra.rpki-client.org