Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/WBhqWWpcxA3objQzUrGm3OV9YFs.roa
File: WBhqWWpcxA3objQzUrGm3OV9YFs.roa (raw, json)
Hash identifier: iI1zmcIMIVF8Rjiw21Rhmda/F3ejkcdHZ3Liuk6wKUA=
Subject key identifier: 58:18:6A:59:6A:5C:C4:0D:E8:6E:34:33:52:B1:A6:DC:E5:7D:60:5B
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 0182B69554803AD00FA5F436EABCC546E3EA
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/WBhqWWpcxA3objQzUrGm3OV9YFs.roa
Signing time: Fri 19 Aug 2022 14:50:16 +0000
ROA not before: Fri 19 Aug 2022 14:50:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 399471
IP address blocks: 80.71.229.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:b6:95:54:80:3a:d0:0f:a5:f4:36:ea:bc:c5:46:e3:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Aug 19 14:50:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=58186a596a5cc40de86e343352b1a6dce57d605b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:31:70:7b:70:dc:20:ee:52:cc:fd:6e:88:34:
a3:f0:f6:98:a9:30:b8:77:fd:da:c1:38:a8:77:21:
94:43:d1:5b:dc:41:85:e4:5a:97:b8:b2:87:9a:dd:
b6:00:91:ae:42:f8:95:5d:26:12:f9:cf:01:5a:99:
87:93:b3:f3:78:8d:2d:e9:b4:21:a2:9d:f4:17:cc:
46:4b:58:a5:c1:03:f7:ea:bd:ff:60:cf:08:cb:1f:
c9:b0:32:c1:2a:2d:6e:b0:96:2a:fd:5d:e1:9d:80:
4a:25:d2:d6:5f:54:81:c6:03:d6:53:6d:65:f2:43:
6b:ed:9b:1a:06:42:20:2c:c3:51:42:50:8b:bc:6b:
75:51:b9:b7:74:05:0e:20:cc:cd:d6:7c:1e:5b:8c:
66:cf:1d:7d:d3:48:a2:9f:a7:dc:c5:c1:39:a9:6a:
18:a2:32:4c:52:8a:0f:94:ce:50:f8:70:11:d3:04:
21:cb:05:53:b9:e4:a1:d8:83:f7:65:aa:72:80:bf:
8e:73:96:5d:a4:d1:e6:d4:82:7f:03:c1:83:c2:21:
84:75:7d:d0:70:9f:4e:2c:d9:04:5d:64:e4:60:c1:
ed:6d:6f:bf:4f:2e:e3:39:02:01:0d:1e:21:45:1d:
50:10:81:1e:78:6a:5f:fb:3c:c1:60:76:66:35:d3:
21:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:18:6A:59:6A:5C:C4:0D:E8:6E:34:33:52:B1:A6:DC:E5:7D:60:5B
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/WBhqWWpcxA3objQzUrGm3OV9YFs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.229.0/24
Signature Algorithm: sha256WithRSAEncryption
38:a8:8a:26:da:b4:a0:17:5e:0d:b7:e9:28:35:f0:74:da:52:
08:27:07:e4:88:57:37:15:c6:4a:56:54:3d:d5:d9:97:f9:df:
7f:15:45:cf:be:4f:8b:75:fd:64:6a:cf:9a:ee:97:6f:23:d6:
e9:f4:90:ed:ec:ec:db:b6:95:d7:50:c0:ad:ce:e5:1d:3b:be:
04:08:41:7f:b6:0d:00:84:d1:8d:9d:b2:ca:06:19:d7:e1:63:
ed:1d:17:15:14:d0:12:9e:af:6b:b0:aa:7a:94:af:58:76:d7:
6c:91:52:ce:82:e9:c6:1d:01:3d:08:45:58:79:f2:dc:e2:13:
b1:2e:87:48:1a:42:46:e8:a5:3f:5f:5e:e3:83:e8:68:85:61:
ce:1a:04:d2:c8:3d:4a:78:a9:81:a0:c3:41:e6:55:79:b1:8d:
99:e0:21:6e:2d:65:53:e2:da:f1:aa:61:4e:d8:26:41:92:ca:
a1:b0:bc:64:35:e7:f1:0f:2d:88:54:c3:c4:00:ff:8e:e0:55:
ba:71:37:0b:8f:69:bc:b7:64:e3:dc:f6:08:f0:d3:c0:c2:72:
f9:28:8c:e6:00:27:20:f5:57:dc:a3:c7:a9:05:35:a3:98:bb:
43:45:2e:d1:6c:bc:73:34:85:4b:5c:24:67:51:cd:a6:3e:7f:
56:9c:27:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:56 2023 by rpki-client on console-fra.rpki-client.org