Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/WC_wj0u4MzlnnHqZr-TbNXhTgjw.roa
File: WC_wj0u4MzlnnHqZr-TbNXhTgjw.roa (raw, json)
Hash identifier: m7nBkeCVVkuupDDxGW2HjZT3A/OVrfP1x4Ra/cgxt+8=
Subject key identifier: 58:2F:F0:8F:4B:B8:33:39:67:9C:7A:99:AF:E4:DB:35:78:53:82:3C
Certificate issuer: /CN=1c6c48cccce321ec18702957b396381a1f1a0410
Certificate serial: 0183845508C00A81FF82366A3AB1218185B5
Authority key identifier: 1C:6C:48:CC:CC:E3:21:EC:18:70:29:57:B3:96:38:1A:1F:1A:04:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HGxIzMzjIewYcClXs5Y4Gh8aBBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/WC_wj0u4MzlnnHqZr-TbNXhTgjw.roa
Signing time: Wed 28 Sep 2022 13:41:48 +0000
ROA not before: Wed 28 Sep 2022 13:41:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204144
IP address blocks: 45.85.212.0/22 maxlen: 22
45.80.240.0/22 maxlen: 22
45.88.252.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:84:55:08:c0:0a:81:ff:82:36:6a:3a:b1:21:81:85:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c6c48cccce321ec18702957b396381a1f1a0410
Validity
Not Before: Sep 28 13:41:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=582ff08f4bb83339679c7a99afe4db357853823c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e7:4b:c5:9e:76:75:ff:4a:12:b3:bc:6b:d0:
36:04:0c:3d:6e:d6:2f:32:2a:39:d7:3b:b2:ed:be:
36:d4:32:22:52:a9:fd:97:55:11:8e:87:7f:6f:2d:
37:81:11:f8:50:06:5f:7b:6c:e4:7d:6a:9a:62:d9:
71:0c:d0:1a:f9:58:2a:12:0e:af:10:fd:11:45:49:
6c:88:0e:49:c8:54:c5:c7:a0:df:ef:4d:a2:a7:16:
ad:34:d6:9f:5e:4d:57:c0:be:af:d9:14:18:68:75:
1f:ea:26:aa:2f:9a:f7:e8:06:1b:23:77:81:67:e7:
8f:57:6b:0c:90:a5:2d:70:45:7d:48:1e:65:22:f2:
02:4e:2d:ae:fd:c6:e9:d6:52:ac:4c:e0:61:8b:fe:
8d:ef:9a:7f:45:c2:cf:cd:d6:44:d3:09:1e:c7:3b:
87:df:94:46:51:d0:93:48:8e:8f:ff:f1:18:92:40:
34:7f:71:48:00:1d:8c:1b:b9:f8:27:62:5e:73:2b:
8d:79:02:e4:74:ed:c1:35:08:da:76:0b:66:55:80:
ee:b0:21:6e:ae:73:a0:20:62:71:90:46:89:c8:c8:
52:da:2c:65:a2:e0:a3:5a:bf:f8:b0:5a:4d:7d:e7:
f3:8e:9d:2e:04:db:68:b2:42:30:11:3e:ef:84:ad:
31:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:2F:F0:8F:4B:B8:33:39:67:9C:7A:99:AF:E4:DB:35:78:53:82:3C
X509v3 Authority Key Identifier:
keyid:1C:6C:48:CC:CC:E3:21:EC:18:70:29:57:B3:96:38:1A:1F:1A:04:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGxIzMzjIewYcClXs5Y4Gh8aBBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/WC_wj0u4MzlnnHqZr-TbNXhTgjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/HGxIzMzjIewYcClXs5Y4Gh8aBBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.240.0/22
45.85.212.0/22
45.88.252.0/22
Signature Algorithm: sha256WithRSAEncryption
28:d2:bb:06:cb:dc:36:d7:02:3f:eb:d0:9a:60:44:3d:1f:97:
15:2a:43:6d:79:77:0d:28:9d:d5:a6:c9:2d:ac:e8:96:8a:96:
46:6a:de:fe:b1:1f:78:45:9d:6c:1f:17:f7:5d:5c:ab:f0:b2:
11:b1:79:40:09:bf:66:96:4c:3d:13:ae:76:c4:80:a8:1e:63:
18:34:51:28:9f:e5:cf:52:92:16:6f:de:2a:4c:07:3d:b4:a7:
2b:bd:9b:32:80:4f:eb:50:00:5c:a0:3e:7f:ac:99:13:f4:05:
5c:2d:d5:c2:58:da:8a:ca:71:d3:9a:37:e0:34:25:2b:b4:d8:
ac:d5:9c:8e:ff:df:1e:0a:55:ba:7d:be:cd:4a:c1:8c:8a:e5:
70:18:c1:36:f7:5e:53:38:d9:78:d9:c9:c7:47:f5:2f:84:db:
eb:b4:28:b7:7c:bd:15:04:9e:fd:68:c0:a6:7f:bf:10:33:bd:
57:b6:46:52:b7:69:a0:41:79:61:63:ed:b6:ca:eb:51:5a:65:
7c:20:8b:6d:46:8d:fa:bf:b4:94:b6:7c:15:82:1c:17:d0:81:
27:df:0f:58:17:d6:43:bf:ac:a6:59:a7:ea:52:ea:a7:57:ce:
52:70:64:fd:37:e6:30:fe:b3:4b:c7:90:68:54:27:c8:e9:f4:
63:82:7e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:07 2023 by rpki-client on console-ams.rpki-client.org