Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/064794-2c36-43d6-b800-739d62669f91/1/w2mgN3pVE6iny5h0c3TRqVMWK2c.roa
File: w2mgN3pVE6iny5h0c3TRqVMWK2c.roa (raw, json)
Hash identifier: ReFG/R+SY2UZaUry7SrLf5iUGIDqnEUEsQod8GxB6Pc=
Subject key identifier: C3:69:A0:37:7A:55:13:A8:A7:CB:98:74:73:74:D1:A9:53:16:2B:67
Certificate issuer: /CN=db1da321843f9fad138e6115d85bee8a920b8e1d
Certificate serial: 078FE560
Authority key identifier: DB:1D:A3:21:84:3F:9F:AD:13:8E:61:15:D8:5B:EE:8A:92:0B:8E:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2x2jIYQ_n60TjmEV2FvuipILjh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/064794-2c36-43d6-b800-739d62669f91/1/w2mgN3pVE6iny5h0c3TRqVMWK2c.roa
Signing time: Sat 01 Jan 2022 16:05:36 +0000
ROA not before: Sat 01 Jan 2022 16:05:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24603
IP address blocks: 45.152.100.0/22 maxlen: 24
185.105.80.0/22 maxlen: 24
193.108.179.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126870880 (0x78fe560)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db1da321843f9fad138e6115d85bee8a920b8e1d
Validity
Not Before: Jan 1 16:05:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c369a0377a5513a8a7cb98747374d1a953162b67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:37:dd:e1:c9:cb:b3:3f:97:59:7a:82:c9:4d:
b6:75:c8:a9:c8:a4:55:98:58:22:3c:3f:09:54:74:
fd:8f:6b:ab:78:85:a0:61:1e:68:64:f8:b8:bf:a2:
44:38:c1:e0:5e:43:99:a0:c0:50:e6:02:69:e4:02:
9c:dd:ab:9f:ad:0c:1b:82:81:28:15:2f:b0:cc:3f:
ec:1c:06:b6:b4:88:79:3c:20:86:26:4a:5f:1e:37:
76:c8:d0:20:d1:82:6b:c2:13:73:d4:72:2a:cb:0a:
c6:33:aa:58:c0:f2:a7:5c:99:ef:39:c9:44:d7:e1:
78:52:76:e6:19:42:66:7a:db:ff:c9:0a:33:f5:ec:
a5:9c:4f:35:2d:ab:c9:d1:d9:85:5e:de:40:8d:27:
79:7a:c5:65:a3:3d:2b:b2:97:f8:9e:29:2f:2d:d7:
12:cb:c2:0f:ba:69:77:15:d2:5e:94:27:36:92:10:
e7:64:2e:be:cb:00:b9:7d:75:18:b6:71:87:61:27:
1c:61:c4:06:15:df:ca:c0:68:d3:45:65:55:99:36:
e3:e4:c8:34:c5:61:ed:05:51:a9:ba:c0:0c:70:cb:
bc:1f:7e:a0:34:4a:7b:fa:71:86:06:55:a7:69:e6:
1a:81:88:ba:20:c0:89:af:89:89:d7:96:9e:92:d7:
93:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:69:A0:37:7A:55:13:A8:A7:CB:98:74:73:74:D1:A9:53:16:2B:67
X509v3 Authority Key Identifier:
keyid:DB:1D:A3:21:84:3F:9F:AD:13:8E:61:15:D8:5B:EE:8A:92:0B:8E:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2x2jIYQ_n60TjmEV2FvuipILjh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/064794-2c36-43d6-b800-739d62669f91/1/w2mgN3pVE6iny5h0c3TRqVMWK2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/064794-2c36-43d6-b800-739d62669f91/1/2x2jIYQ_n60TjmEV2FvuipILjh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.100.0/22
185.105.80.0/22
193.108.179.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:34:86:66:7a:dd:de:d8:d6:82:8b:12:2d:92:15:c1:bc:4c:
03:f7:09:c8:18:07:f9:68:29:bb:f5:e1:d2:f8:18:d1:15:94:
e8:67:f2:52:07:ef:8b:a2:66:10:0e:2e:10:35:37:3b:39:f9:
4c:fb:8f:a8:85:ae:12:28:85:61:7a:f4:fa:a2:91:3d:6b:98:
90:58:0f:5d:36:fa:91:05:e3:5a:50:1f:fd:93:41:f4:13:4f:
de:5d:9e:d2:31:2b:54:f2:6d:4b:3b:13:ad:8f:ee:98:5d:e5:
65:02:47:6b:24:62:87:11:ea:c1:ef:c8:3e:9f:a0:bf:06:49:
93:33:10:45:22:b0:5e:97:75:bd:35:3b:f2:68:48:f5:30:96:
81:6b:06:bd:6d:d0:6b:d6:3f:6a:f6:7d:8e:c2:da:e1:55:33:
eb:22:21:31:65:13:6c:52:65:3e:e4:23:3e:03:3e:ce:23:13:
74:58:44:3c:34:b7:79:36:01:42:f3:8e:69:6c:c5:5b:18:4b:
4a:80:f1:26:97:70:00:53:f4:7d:e6:56:67:c9:15:49:37:ce:
10:8b:a8:5d:7d:d3:93:03:cd:6b:f4:33:9e:c4:a9:d4:67:78:
24:15:f3:94:0b:8d:d5:2a:66:31:19:b7:9c:8b:f5:23:c6:d4:
d7:7d:db:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:57 2023 by rpki-client on console-fra.rpki-client.org