Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/WqXgW65FwDjjgaAzB44ZmToIWMU.roa
File: WqXgW65FwDjjgaAzB44ZmToIWMU.roa (raw, json)
Hash identifier: JBgS/7BzhwZCYQIs/GqMdz+G1ZGWuDJdif8hb/pAlXY=
Subject key identifier: 5A:A5:E0:5B:AE:45:C0:38:E3:81:A0:33:07:8E:19:99:3A:08:58:C5
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 0184E8B00638BC9F77EE47158209E98484A8
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/WqXgW65FwDjjgaAzB44ZmToIWMU.roa
Signing time: Tue 06 Dec 2022 18:26:00 +0000
ROA not before: Tue 06 Dec 2022 18:26:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48944
IP address blocks: 185.243.50.0/23 maxlen: 24
185.215.228.0/23 maxlen: 23
178.239.144.0/22 maxlen: 22
185.212.50.0/23 maxlen: 24
178.239.148.0/23 maxlen: 24
178.239.158.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e8:b0:06:38:bc:9f:77:ee:47:15:82:09:e9:84:84:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Dec 6 18:26:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5aa5e05bae45c038e381a033078e19993a0858c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:62:c6:f3:aa:4b:93:dd:46:0d:49:39:65:78:
8b:3a:ee:fc:6b:11:a1:ea:b4:8a:b4:9b:e3:a3:05:
46:39:da:d5:e4:bf:01:66:ec:d2:a7:2d:2e:df:20:
30:93:59:fa:31:4b:e8:62:35:f5:3e:95:c1:1f:8c:
32:42:39:67:41:48:5f:37:6e:2b:65:40:49:a2:32:
eb:34:75:e5:75:6d:a7:f9:41:b9:0b:6b:7e:6e:61:
e4:19:66:74:d2:10:40:83:23:32:87:ae:50:e9:59:
e1:48:75:5d:4e:2a:c9:11:c0:6d:f8:a1:09:31:79:
b0:d7:d7:a1:58:a1:f6:72:55:8e:b1:35:61:cd:57:
32:04:ed:3d:65:35:ef:0b:d3:98:24:ea:3a:ee:65:
32:df:ea:4c:25:06:15:3a:a1:0d:08:92:87:42:9a:
18:10:af:3b:52:a5:71:2a:93:72:cc:71:30:30:3a:
c1:45:48:55:6c:79:b6:3f:98:dc:80:29:bd:ff:54:
36:e8:b4:3d:d5:71:22:bb:16:57:ab:c7:8e:18:81:
d0:b4:92:8e:21:bb:1e:f2:68:bc:8c:82:c8:ea:9b:
a1:8b:44:dc:be:82:f4:2c:51:c3:e5:2f:47:e8:51:
22:65:62:5e:2d:d6:06:67:bd:cc:f3:9a:7c:84:a8:
5e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:A5:E0:5B:AE:45:C0:38:E3:81:A0:33:07:8E:19:99:3A:08:58:C5
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/WqXgW65FwDjjgaAzB44ZmToIWMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.144.0-178.239.149.255
178.239.158.0/23
185.212.50.0/23
185.215.228.0/23
185.243.50.0/23
Signature Algorithm: sha256WithRSAEncryption
14:8a:ba:ef:23:97:5a:60:ab:4a:57:53:43:47:cc:ee:04:70:
f5:4f:9d:37:aa:f7:30:b5:4a:dd:e0:ec:44:ce:8d:d5:59:d9:
af:d6:c6:14:d2:6b:f1:79:9a:a7:20:67:7e:6a:34:32:60:7d:
27:0f:de:d4:c1:3d:95:20:74:b1:82:9e:8e:78:65:a9:26:50:
3b:0f:d2:1e:bf:dd:a2:3b:72:e6:11:10:cc:a4:28:9d:ed:31:
40:28:b9:4b:ef:72:42:34:2c:7c:22:60:ae:42:49:d7:80:65:
79:33:d5:4b:75:0c:19:70:4c:82:30:d2:4c:8d:a7:01:dd:92:
72:80:8c:f1:bb:67:d7:11:2c:58:6c:ec:5f:8c:7b:82:4a:2e:
5e:2e:ae:3b:c9:65:ca:b1:13:91:fb:f8:94:cf:9c:cf:1b:59:
ef:b1:4b:87:a3:30:f1:ef:16:c8:1b:21:0b:56:50:46:b2:66:
f7:ea:7c:b0:9c:ac:8b:6c:a0:40:24:57:e6:ca:56:58:d1:f1:
8e:d9:b9:72:ef:c9:1f:47:24:43:b8:c1:bb:2e:72:e7:78:4e:
38:19:55:fd:24:f4:60:a4:89:dd:d8:45:1d:e6:fa:d1:9d:08:
9b:76:1f:90:ed:ff:a7:1a:84:a8:44:97:2f:c0:5f:6b:df:a0:
c1:71:e7:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:33 2023 by rpki-client on console-fra.rpki-client.org