Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/WzkjImvGpbaSsRhOpdugyynnHhU.roa
File: WzkjImvGpbaSsRhOpdugyynnHhU.roa (raw, json)
Hash identifier: AvRWGXv4N+6t1nvjGAhcPMC4OakJlMWP+Q+QdYhPo5A=
Subject key identifier: 5B:39:23:22:6B:C6:A5:B6:92:B1:18:4E:A5:DB:A0:CB:29:E7:1E:15
Certificate issuer: /CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Certificate serial: 01C31B4C
Authority key identifier: F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/WzkjImvGpbaSsRhOpdugyynnHhU.roa
Signing time: Tue 29 Mar 2022 07:58:01 +0000
ROA not before: Tue 29 Mar 2022 07:58:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210906
IP address blocks: 45.113.238.0/24 maxlen: 24
43.245.116.0/23 maxlen: 23
193.36.76.0/24 maxlen: 24
193.36.86.0/24 maxlen: 24
45.141.80.0/22 maxlen: 22
193.200.96.0/23 maxlen: 23
89.47.34.0/24 maxlen: 24
43.245.119.0/24 maxlen: 24
193.36.172.0/24 maxlen: 24
89.33.83.0/24 maxlen: 24
194.26.149.0/24 maxlen: 24
209.35.4.0/23 maxlen: 23
162.218.158.0/24 maxlen: 24
162.218.157.0/24 maxlen: 24
212.102.116.0/24 maxlen: 24
209.35.99.0/24 maxlen: 24
209.35.113.0/24 maxlen: 24
193.148.92.0/23 maxlen: 23
207.244.216.0/22 maxlen: 22
194.29.67.0/24 maxlen: 24
194.29.70.0/24 maxlen: 24
194.29.80.0/24 maxlen: 24
147.185.250.0/24 maxlen: 24
89.32.204.0/24 maxlen: 24
86.104.215.0/24 maxlen: 24
86.104.227.0/24 maxlen: 24
147.185.217.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29563724 (0x1c31b4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Validity
Not Before: Mar 29 07:58:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5b3923226bc6a5b692b1184ea5dba0cb29e71e15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:cb:af:7a:be:a8:d6:af:56:c2:b4:b2:8f:07:
06:14:b8:c9:b5:7b:f4:4f:73:5e:78:77:dc:bf:0a:
1a:98:f0:a1:6a:19:f6:0f:44:78:33:51:46:11:bd:
78:2f:6a:04:95:16:5e:6a:4b:3d:20:0b:42:51:c1:
d9:47:e1:bb:4a:c6:c4:34:25:f2:f4:50:12:c1:76:
6b:90:5f:d8:fe:8a:2b:bf:4a:30:48:28:19:bb:9f:
bf:8e:3d:10:ac:d6:2f:3c:ad:11:ca:b7:92:3c:4b:
31:23:04:b8:2a:7e:14:60:71:28:b6:a6:ca:64:30:
12:2a:5f:d7:b5:6f:f2:fc:eb:e0:c7:8f:c7:39:ea:
01:2d:43:99:38:f6:91:d8:2c:f2:ba:3c:d6:d2:64:
57:a8:e3:79:b7:a3:0f:6f:76:d0:47:0b:61:86:96:
61:25:1f:65:b5:46:69:00:ae:ed:a6:51:e5:90:2d:
c1:75:1c:4c:e3:e5:8b:27:8c:ea:60:86:70:f3:0d:
ad:7c:77:a3:9c:7b:d6:9e:fb:b5:cb:e0:c6:de:a3:
e6:06:cb:bd:95:a2:da:39:04:53:3b:92:33:54:ed:
26:c6:f0:d1:7f:3d:98:eb:83:31:b6:80:67:04:6f:
a3:00:41:8c:ce:83:1d:36:21:0d:74:75:ff:ba:85:
b9:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:39:23:22:6B:C6:A5:B6:92:B1:18:4E:A5:DB:A0:CB:29:E7:1E:15
X509v3 Authority Key Identifier:
keyid:F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/WzkjImvGpbaSsRhOpdugyynnHhU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.245.116.0/23
43.245.119.0/24
45.113.238.0/24
45.141.80.0/22
86.104.215.0/24
86.104.227.0/24
89.32.204.0/24
89.33.83.0/24
89.47.34.0/24
147.185.217.0/24
147.185.250.0/24
162.218.157.0-162.218.158.255
193.36.76.0/24
193.36.86.0/24
193.36.172.0/24
193.148.92.0/23
193.200.96.0/23
194.26.149.0/24
194.29.67.0/24
194.29.70.0/24
194.29.80.0/24
207.244.216.0/22
209.35.4.0/23
209.35.99.0/24
209.35.113.0/24
212.102.116.0/24
Signature Algorithm: sha256WithRSAEncryption
66:df:78:54:52:3e:3e:a3:1d:f5:eb:97:7c:87:b4:0f:21:bd:
71:75:70:02:f1:69:74:6e:72:18:8e:2d:5b:06:0d:7a:14:43:
89:b7:84:93:0b:be:3b:e7:88:e5:ef:99:c0:26:9b:d6:41:c6:
c5:e4:dd:3e:a5:05:c1:da:8b:97:a9:24:23:8b:44:bb:14:69:
1f:d2:2b:45:1a:13:8c:a4:e8:d8:75:17:a3:8b:45:c8:0a:f0:
3f:1a:20:37:a2:35:28:e5:7a:f8:81:cd:4a:d5:43:a5:ed:8d:
98:8e:7f:ac:06:c0:2a:6e:fe:69:db:76:ce:13:0d:26:5c:de:
72:40:5f:46:e1:c4:0e:11:74:3e:d2:b5:d6:6b:87:82:e3:ca:
44:60:ea:0a:92:03:a4:66:6f:0a:21:c8:3a:c6:07:c8:64:a1:
6e:93:c6:9d:ca:2e:b3:00:f6:f7:6c:ce:b7:1f:45:aa:1c:39:
19:75:35:50:97:d6:86:40:eb:84:df:40:b3:4e:bf:9c:c4:6d:
69:bb:69:fb:4a:81:45:e0:44:2e:bb:9f:64:42:61:43:a4:30:
6f:7f:ce:d6:0c:0b:bb:55:b5:c8:a4:a6:80:c0:72:5c:43:db:
21:c3:2b:1b:e4:73:ea:c9:80:be:39:4b:88:11:64:5c:93:27:
e2:ab:fd:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:35 2024 by rpki-client on console-ams.rpki-client.org