Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/wUTORbMN7FKVozuJx9sev1-D3sc.roa
File: wUTORbMN7FKVozuJx9sev1-D3sc.roa (raw, json)
Hash identifier: KO/F2rIftsIk4rhGVSsMLnuez1OcnofEwcKgnw/xya4=
Subject key identifier: C1:44:CE:45:B3:0D:EC:52:95:A3:3B:89:C7:DB:1E:BF:5F:83:DE:C7
Certificate issuer: /CN=32bdecf2b1a410f6523c20e630826709cb6dac19
Certificate serial: 023BF8
Authority key identifier: 32:BD:EC:F2:B1:A4:10:F6:52:3C:20:E6:30:82:67:09:CB:6D:AC:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mr3s8rGkEPZSPCDmMIJnCcttrBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/wUTORbMN7FKVozuJx9sev1-D3sc.roa
Signing time: Wed 12 Jan 2022 12:26:54 +0000
ROA not before: Wed 12 Jan 2022 12:26:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42189
IP address blocks: 77.240.96.0/20 maxlen: 24
185.115.8.0/22 maxlen: 24
2a00:1aa8::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146424 (0x23bf8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32bdecf2b1a410f6523c20e630826709cb6dac19
Validity
Not Before: Jan 12 12:26:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c144ce45b30dec5295a33b89c7db1ebf5f83dec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fd:4d:c9:d8:b9:e2:9d:d1:87:79:b3:06:d4:
b1:8a:e3:ec:18:bd:e0:c5:1e:66:d6:3d:71:7e:39:
85:61:ee:b1:41:8d:1d:fd:21:19:5a:c7:18:da:6f:
a2:3a:43:ac:47:ba:35:28:d5:99:5b:53:83:9e:1a:
7e:6c:91:84:02:71:12:96:cd:8d:b8:de:5c:65:99:
b5:7b:30:b7:27:14:e8:2f:90:80:2f:dd:82:30:8e:
a5:21:3d:ae:e0:82:82:73:41:96:85:d3:7e:9d:0f:
50:2d:13:8a:42:58:4a:4c:81:e8:da:a3:7a:79:17:
f6:30:99:ce:7d:8f:6b:3c:18:af:bd:ff:0f:69:75:
2e:77:07:c1:30:c5:be:4b:24:e9:b4:8a:39:92:f2:
dd:8f:62:15:b8:3e:47:e5:7d:e7:ca:97:15:2d:a7:
c1:4e:1b:93:49:b8:57:ea:36:2c:82:72:a1:c3:18:
f2:50:39:27:69:99:5c:9e:ec:5d:a7:93:ad:f0:3e:
00:ce:07:fd:90:bd:ed:b4:34:4d:7d:8a:46:62:e7:
97:0a:7d:1a:7f:e8:f1:88:5b:bb:1d:56:e6:81:c4:
d9:db:47:50:2a:c7:b6:af:bb:ae:fd:8d:74:33:67:
45:e4:0d:39:52:cc:f9:9b:d0:a9:e5:5b:23:ef:40:
90:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:44:CE:45:B3:0D:EC:52:95:A3:3B:89:C7:DB:1E:BF:5F:83:DE:C7
X509v3 Authority Key Identifier:
keyid:32:BD:EC:F2:B1:A4:10:F6:52:3C:20:E6:30:82:67:09:CB:6D:AC:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mr3s8rGkEPZSPCDmMIJnCcttrBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/wUTORbMN7FKVozuJx9sev1-D3sc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/Mr3s8rGkEPZSPCDmMIJnCcttrBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.240.96.0/20
185.115.8.0/22
IPv6:
2a00:1aa8::/29
Signature Algorithm: sha256WithRSAEncryption
60:ce:1a:a6:eb:ce:31:fd:a1:05:37:88:10:6f:32:12:04:27:
fd:9a:9d:af:a4:ed:01:37:fa:45:21:69:3a:72:37:9b:4b:5b:
86:38:9e:08:c4:97:3f:e4:e3:1d:04:2d:9e:0b:2e:4d:ef:e8:
2b:55:dd:31:a5:47:66:4a:7d:54:e8:cb:0a:8b:83:b1:07:1a:
05:f7:96:f5:7c:4f:e5:97:7d:44:b8:cd:40:f2:26:07:9d:8f:
b4:fc:d3:71:72:f7:70:1f:1d:1d:95:43:ce:88:ae:49:9b:16:
c5:5a:2f:f7:a7:ce:f7:d8:89:f4:10:eb:57:09:ee:5f:de:c1:
48:10:2f:13:f9:6a:63:9f:ca:22:3c:ee:78:23:53:bd:1b:59:
9f:c0:05:61:cf:ad:f0:7c:d6:6a:30:57:b1:d0:3e:29:ed:15:
fb:4c:74:18:52:7b:54:90:3d:7b:89:9c:5a:62:22:0b:4e:fc:
ed:6a:8d:e1:f6:bf:4f:f8:c6:78:77:e9:78:67:b0:51:2f:70:
53:59:be:af:87:5c:02:dc:9d:85:c3:be:b1:1e:97:c0:78:7b:
71:7e:66:56:27:05:69:99:43:4f:81:cb:96:40:b2:66:d2:d5:
40:bd:8f:97:8a:45:fe:9f:1e:aa:c2:47:43:29:9a:fe:e0:1e:
24:c9:12:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:43 2024 by rpki-client on console-fra.rpki-client.org