Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/WdGNOjma2Whwf0wxXtyy9_n6kRY.roa
File: WdGNOjma2Whwf0wxXtyy9_n6kRY.roa (raw, json)
Hash identifier: aSVzeGJp3MwKido1euqJQukl6x0ohDKLieWtfGJ5Hi8=
Subject key identifier: 59:D1:8D:3A:39:9A:D9:68:70:7F:4C:31:5E:DC:B2:F7:F9:FA:91:16
Certificate issuer: /CN=3718b734349bf327d9453b96501e44b192e55142
Certificate serial: 068522C8
Authority key identifier: 37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/WdGNOjma2Whwf0wxXtyy9_n6kRY.roa
Signing time: Sat 01 Jan 2022 10:05:17 +0000
ROA not before: Sat 01 Jan 2022 10:05:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 31.14.36.0/22 maxlen: 24
185.155.52.0/22 maxlen: 24
45.132.26.0/23 maxlen: 24
45.132.25.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109388488 (0x68522c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3718b734349bf327d9453b96501e44b192e55142
Validity
Not Before: Jan 1 10:05:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=59d18d3a399ad968707f4c315edcb2f7f9fa9116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:61:2b:bc:27:c0:a5:0e:68:af:1c:37:8e:70:
d3:bb:75:0a:2f:e8:e2:ae:46:b1:eb:90:e7:c1:90:
1d:51:93:c3:57:2d:6b:97:e6:70:e5:e5:da:bc:f3:
97:77:3f:5c:8f:62:8b:d5:ea:7b:4d:4f:b5:57:8a:
3a:d9:ca:f1:68:0f:33:77:30:2f:e4:a1:14:c4:e8:
15:d8:be:93:5d:6b:1d:38:ce:9c:4b:5d:6d:ac:6c:
d8:70:a3:c3:eb:96:3f:25:b5:74:52:fa:9f:68:fb:
f1:16:2e:d3:48:35:38:29:eb:2e:80:14:39:ce:6a:
57:d6:1a:f5:87:34:7e:43:bf:33:8e:5a:6d:22:d4:
6c:66:26:48:10:4e:03:b6:d5:ed:4b:75:98:73:9f:
f9:c4:7e:99:d7:09:fa:89:65:a2:6e:ec:40:a9:28:
7d:b8:4c:0a:9a:98:40:7d:ab:56:bf:d8:eb:bd:4e:
01:cb:42:98:b8:1f:4e:51:e4:0f:8c:ea:75:8a:16:
16:90:dd:0d:4c:34:e9:e5:50:14:ad:0d:3d:ab:31:
04:1a:7b:87:cc:af:91:f0:1b:58:1b:03:6c:90:82:
59:39:5a:f2:d7:99:9d:c1:69:f4:6e:26:a7:f8:52:
6d:51:1a:40:6b:1e:ae:5a:6a:6c:2d:6d:be:be:1b:
e9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:D1:8D:3A:39:9A:D9:68:70:7F:4C:31:5E:DC:B2:F7:F9:FA:91:16
X509v3 Authority Key Identifier:
keyid:37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/WdGNOjma2Whwf0wxXtyy9_n6kRY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.36.0/22
45.132.25.0-45.132.27.255
185.155.52.0/22
Signature Algorithm: sha256WithRSAEncryption
67:08:e9:e2:63:07:40:34:63:11:a3:12:04:0a:6c:1a:b9:f6:
94:d7:78:a5:5d:3d:5c:54:2c:8d:ca:e3:ed:15:c0:09:e6:45:
76:e3:fa:90:60:a1:31:1e:95:32:b1:95:78:17:de:5a:dc:b0:
51:80:e2:46:2f:dd:0e:f3:70:36:ca:b1:23:5c:fa:08:d4:29:
a4:fc:27:b9:74:03:5c:83:4f:52:fa:78:d4:ca:bf:ac:e6:12:
6f:cc:4d:46:f6:d6:51:ac:69:31:34:21:d4:e0:bb:44:8e:61:
30:f5:1b:75:14:63:c1:c5:e8:ef:00:c2:19:e8:b6:be:68:bd:
a0:0d:3a:28:1c:66:92:83:9f:2d:c3:cd:d4:1f:52:a8:6b:0a:
cd:29:94:f9:66:ea:7d:03:a6:7e:f9:cd:f5:8e:99:85:eb:4e:
42:92:bf:eb:77:1c:4b:a5:a5:fd:5a:00:f7:6f:23:29:33:81:
b6:a0:a9:d2:0b:d3:28:1c:48:45:20:64:8b:0d:ba:fc:ab:a7:
0b:99:18:78:15:60:15:91:89:9f:2e:d4:35:70:e8:33:f2:ec:
83:eb:9d:a4:2c:5b:9b:72:a3:52:3e:bf:72:08:31:78:68:6f:
ed:81:b3:c1:ee:5c:d1:ba:94:a4:6a:8d:78:27:40:40:8f:ed:
35:43:03:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:23 2023 by rpki-client on console-ams.rpki-client.org