Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/WJcny0iqGPL3-CUzotCzwyRqbBE.roa
File: WJcny0iqGPL3-CUzotCzwyRqbBE.roa (raw, json)
Hash identifier: 7ZStZzE3i25uIYyMW7QYLPX4LD8ZFvDgrv7ZHnOXEBc=
Subject key identifier: 58:97:27:CB:48:AA:18:F2:F7:F8:25:33:A2:D0:B3:C3:24:6A:6C:11
Certificate issuer: /CN=c469fe3d882c93e38e8b6a286a3177dc17e99ac7
Certificate serial: 327FEA92
Authority key identifier: C4:69:FE:3D:88:2C:93:E3:8E:8B:6A:28:6A:31:77:DC:17:E9:9A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGn-PYgsk-OOi2ooajF33Bfpmsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/WJcny0iqGPL3-CUzotCzwyRqbBE.roa
Signing time: Sat 01 Jan 2022 11:03:36 +0000
ROA not before: Sat 01 Jan 2022 11:03:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200762
IP address blocks: 178.57.94.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 847243922 (0x327fea92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c469fe3d882c93e38e8b6a286a3177dc17e99ac7
Validity
Not Before: Jan 1 11:03:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=589727cb48aa18f2f7f82533a2d0b3c3246a6c11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:0e:5d:f9:3d:f1:31:d1:55:d4:c4:c0:f9:01:
19:6a:1b:94:fc:da:db:ad:cb:f7:22:e8:db:73:82:
fa:41:ee:4e:32:f3:eb:0f:76:60:6d:7e:d8:b3:bc:
0e:f3:20:21:a0:5b:09:d8:3c:82:30:11:9f:3b:4b:
be:a7:4d:5d:ac:f8:a0:24:2e:c7:a0:74:31:44:3e:
a9:da:ed:75:2d:0a:e6:0f:4e:94:f2:79:48:72:92:
0a:40:4f:4c:d6:16:ad:9c:df:c1:6f:81:be:dd:10:
63:d4:62:41:06:ff:17:5c:ed:45:2b:82:91:49:4d:
e6:6c:c6:6d:04:71:11:7c:92:96:5b:ba:c0:e6:f9:
6f:12:f1:c9:f1:4c:ad:47:ea:2f:23:e7:cf:5a:64:
3d:99:52:34:a3:db:ef:9f:6d:a1:0e:e6:66:66:8a:
b6:6d:df:ac:c9:cb:98:8f:e1:38:a4:02:28:92:a9:
c4:d5:17:c6:ef:ff:03:65:69:95:c2:82:41:d0:c7:
7d:8f:6d:00:1b:d8:80:3e:9e:bb:36:f0:dc:f8:98:
12:cc:e1:c0:00:a5:a6:e7:f1:7d:2d:4f:3e:fa:db:
a0:d8:91:5e:66:3d:f1:b0:b6:12:df:27:47:e5:98:
34:e8:9e:df:3a:76:a0:81:a2:9b:f2:43:65:40:83:
e1:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:97:27:CB:48:AA:18:F2:F7:F8:25:33:A2:D0:B3:C3:24:6A:6C:11
X509v3 Authority Key Identifier:
keyid:C4:69:FE:3D:88:2C:93:E3:8E:8B:6A:28:6A:31:77:DC:17:E9:9A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGn-PYgsk-OOi2ooajF33Bfpmsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/WJcny0iqGPL3-CUzotCzwyRqbBE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/xGn-PYgsk-OOi2ooajF33Bfpmsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.57.94.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:d1:01:d6:40:79:4c:85:af:6f:ce:52:68:b2:8c:5a:ac:56:
d9:05:7b:cf:d1:bb:ae:00:5e:b5:18:67:9b:6a:ef:e0:e9:d5:
2b:e1:77:c0:13:ad:40:f6:84:d9:b4:e0:83:44:cb:1a:59:c9:
5b:8c:16:57:8f:64:af:a8:29:67:14:22:63:63:61:ad:d6:2f:
bb:0d:a9:d1:23:7f:2e:69:0d:c0:70:9f:31:ad:89:89:ef:56:
32:78:8b:d9:05:2e:8e:15:1c:5e:01:7e:b3:53:d5:e6:18:9b:
3c:88:42:91:4e:22:43:a5:9b:9c:83:d2:41:3a:43:57:b5:61:
0d:89:ea:fb:41:ff:d8:ab:fd:c0:47:28:0e:43:c6:ff:d5:9f:
d2:2b:39:ee:0d:c0:2c:19:bb:d8:dc:f7:4c:06:e8:d3:df:a9:
5d:c7:69:b2:e9:98:b6:b8:88:49:b3:66:b9:f6:08:be:c8:ab:
11:b3:f1:67:c0:a8:19:33:71:53:d7:b8:3e:c9:dc:dd:53:68:
1a:62:d0:c4:db:5b:7d:62:be:96:f8:a4:60:1c:47:0f:4d:5c:
20:9c:01:c1:4f:91:24:0f:a4:9c:95:a7:6e:dd:f4:ee:58:c3:
57:d3:ee:b7:1f:8f:23:a7:bc:0e:c7:a8:38:28:dc:98:81:b3:
b7:3e:20:26
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEMn/qkjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
NDY5ZmUzZDg4MmM5M2UzOGU4YjZhMjg2YTMxNzdkYzE3ZTk5YWM3MB4XDTIyMDEw
MTExMDMzNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTg5NzI3Y2I0OGFh
MThmMmY3ZjgyNTMzYTJkMGIzYzMyNDZhNmMxMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIsOXfk98THRVdTEwPkBGWoblPza263L9yLo23OC+kHuTjLz
6w92YG1+2LO8DvMgIaBbCdg8gjARnztLvqdNXaz4oCQux6B0MUQ+qdrtdS0K5g9O
lPJ5SHKSCkBPTNYWrZzfwW+Bvt0QY9RiQQb/F1ztRSuCkUlN5mzGbQRxEXySllu6
wOb5bxLxyfFMrUfqLyPnz1pkPZlSNKPb759toQ7mZmaKtm3frMnLmI/hOKQCKJKp
xNUXxu//A2VplcKCQdDHfY9tABvYgD6euzbw3PiYEszhwAClpufxfS1PPvrboNiR
XmY98bC2Et8nR+WYNOie3zp2oIGim/JDZUCD4ccCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRYlyfLSKoY8vf4JTOi0LPDJGpsETAfBgNVHSMEGDAWgBTEaf49iCyT446L
aihqMXfcF+maxzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3hHbi1QWWdzay1PT2kyb29hakYzM0JmcG1zYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODQvYzQ3NWFiLWZkZDUtNDkyZi04MTNhLTYxZDlhMjNmMzQxMS8x
L1dKY255MGlxR1BMMy1DVXpvdEN6d3lScWJCRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODQv
YzQ3NWFiLWZkZDUtNDkyZi04MTNhLTYxZDlhMjNmMzQxMS8xL3hHbi1QWWdzay1P
T2kyb29hakYzM0JmcG1zYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALI5XjANBgkqhkiG9w0BAQsFAAOC
AQEArNEB1kB5TIWvb85SaLKMWqxW2QV7z9G7rgBetRhnm2rv4OnVK+F3wBOtQPaE
2bTgg0TLGlnJW4wWV49kr6gpZxQiY2NhrdYvuw2p0SN/LmkNwHCfMa2Jie9WMniL
2QUujhUcXgF+s1PV5hibPIhCkU4iQ6WbnIPSQTpDV7VhDYnq+0H/2Kv9wEcoDkPG
/9Wf0is57g3ALBm72Nz3TAbo09+pXcdpsumYtriISbNmufYIvsirEbPxZ8CoGTNx
U9e4Psnc3VNoGmLQxNtbfWK+lvikYBxHD01cIJwBwU+RJA+knJWnbt307ljDV9Pu
tx+PI6e8DseoOCjcmIGztz4gJg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:50 2023 by rpki-client on console-fra.rpki-client.org