Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/31f27a-b57b-4780-84d0-271bd72cdf69/1/WuPaUhJ7gMO3DD3TNGh3HDLeoC8.roa
File: WuPaUhJ7gMO3DD3TNGh3HDLeoC8.roa (raw, json)
Hash identifier: tcFfix6plJ7Ycp6GJJzr5e55W7Wt0wRC/1005jauCzU=
Subject key identifier: 5A:E3:DA:52:12:7B:80:C3:B7:0C:3D:D3:34:68:77:1C:32:DE:A0:2F
Certificate issuer: /CN=7ae62148b30b66bd0a3da3897ecfbfd9af4f431e
Certificate serial: 380CCF94
Authority key identifier: 7A:E6:21:48:B3:0B:66:BD:0A:3D:A3:89:7E:CF:BF:D9:AF:4F:43:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/euYhSLMLZr0KPaOJfs-_2a9PQx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/31f27a-b57b-4780-84d0-271bd72cdf69/1/WuPaUhJ7gMO3DD3TNGh3HDLeoC8.roa
Signing time: Tue 05 Apr 2022 10:05:52 +0000
ROA not before: Tue 05 Apr 2022 10:05:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24592
IP address blocks: 217.13.112.0/24 maxlen: 24
217.13.116.0/24 maxlen: 24
217.13.115.0/24 maxlen: 24
217.13.114.0/24 maxlen: 24
217.13.112.0/20 maxlen: 20
217.13.113.0/24 maxlen: 24
217.13.118.0/24 maxlen: 24
217.13.117.0/24 maxlen: 24
185.86.35.0/24 maxlen: 24
185.86.34.0/24 maxlen: 24
185.86.33.0/24 maxlen: 24
185.86.32.0/24 maxlen: 24
185.86.32.0/22 maxlen: 22
212.92.32.0/24 maxlen: 24
212.92.38.0/24 maxlen: 24
212.92.37.0/24 maxlen: 24
212.92.36.0/24 maxlen: 24
212.92.35.0/24 maxlen: 24
212.92.34.0/24 maxlen: 24
212.92.32.0/19 maxlen: 19
212.92.33.0/24 maxlen: 24
212.92.44.0/24 maxlen: 24
212.92.43.0/24 maxlen: 24
212.92.42.0/24 maxlen: 24
212.92.41.0/24 maxlen: 24
212.92.40.0/24 maxlen: 24
212.92.39.0/24 maxlen: 24
212.92.46.0/24 maxlen: 24
212.92.45.0/24 maxlen: 24
212.92.51.0/24 maxlen: 24
212.92.50.0/24 maxlen: 24
212.92.49.0/24 maxlen: 24
212.92.48.0/24 maxlen: 24
212.92.47.0/24 maxlen: 24
212.92.52.0/24 maxlen: 24
212.92.58.0/24 maxlen: 24
212.92.57.0/24 maxlen: 24
212.92.56.0/24 maxlen: 24
212.92.55.0/24 maxlen: 24
212.92.54.0/24 maxlen: 24
212.92.53.0/24 maxlen: 24
212.92.59.0/24 maxlen: 24
212.92.63.0/24 maxlen: 24
212.92.62.0/24 maxlen: 24
212.92.61.0/24 maxlen: 24
212.92.60.0/22 maxlen: 22
212.92.60.0/24 maxlen: 24
89.45.38.0/24 maxlen: 24
89.45.37.0/24 maxlen: 24
89.45.36.0/22 maxlen: 22
89.45.36.0/24 maxlen: 24
89.45.39.0/24 maxlen: 24
217.13.125.0/24 maxlen: 24
217.13.124.0/24 maxlen: 24
217.13.123.0/24 maxlen: 24
217.13.122.0/24 maxlen: 24
217.13.121.0/24 maxlen: 24
217.13.120.0/24 maxlen: 24
217.13.119.0/24 maxlen: 24
217.13.127.0/24 maxlen: 24
217.13.126.0/24 maxlen: 24
2a02:23c8::/40 maxlen: 40
2a02:23c8:ff00::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 940363668 (0x380ccf94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ae62148b30b66bd0a3da3897ecfbfd9af4f431e
Validity
Not Before: Apr 5 10:05:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5ae3da52127b80c3b70c3dd33468771c32dea02f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:95:f1:a6:5f:68:fe:b6:8e:a0:f4:27:4a:c5:
92:9f:f2:69:ea:97:20:c4:fd:18:48:91:cc:a4:00:
27:63:14:62:e7:a1:1c:22:30:18:74:41:6b:e9:3a:
17:2e:75:f3:ed:d7:21:8f:a5:e1:8a:b8:2b:df:de:
05:0d:ff:8e:ed:3c:65:e8:00:a5:28:c9:bd:28:a5:
2d:9f:91:bb:05:16:2c:fa:ab:e0:24:5d:b0:59:8a:
eb:08:46:1c:c9:b8:5f:74:c2:6d:4a:22:65:94:9b:
64:6d:b3:df:14:f2:6e:86:3e:0b:05:bb:4c:96:c7:
43:b8:d4:6e:88:0c:05:67:38:76:05:0a:1e:d3:ae:
bd:42:31:02:ec:37:58:5b:6c:87:43:7f:3e:ed:29:
57:11:26:73:d5:a3:ac:42:bc:f9:e0:4a:4e:8b:b9:
d2:e0:a4:5f:16:3d:e5:da:de:fe:82:b7:73:4e:8a:
39:80:02:4a:dc:53:88:ee:52:a5:7f:cf:9b:f5:ae:
0a:da:d8:61:1c:23:fb:00:50:9c:18:30:8d:f5:e5:
65:1b:4c:be:75:38:9b:0b:00:d3:c4:df:01:72:ed:
54:cd:88:43:a5:58:56:cc:cd:5f:89:3e:18:20:f2:
ab:3d:72:9e:68:b0:ce:c5:3b:87:e4:2f:e8:a9:2d:
38:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E3:DA:52:12:7B:80:C3:B7:0C:3D:D3:34:68:77:1C:32:DE:A0:2F
X509v3 Authority Key Identifier:
keyid:7A:E6:21:48:B3:0B:66:BD:0A:3D:A3:89:7E:CF:BF:D9:AF:4F:43:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/euYhSLMLZr0KPaOJfs-_2a9PQx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/31f27a-b57b-4780-84d0-271bd72cdf69/1/WuPaUhJ7gMO3DD3TNGh3HDLeoC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/31f27a-b57b-4780-84d0-271bd72cdf69/1/euYhSLMLZr0KPaOJfs-_2a9PQx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.45.36.0/22
185.86.32.0/22
212.92.32.0/19
217.13.112.0/20
IPv6:
2a02:23c8::/40
2a02:23c8:ff00::/40
Signature Algorithm: sha256WithRSAEncryption
03:25:cf:79:05:28:16:a2:bc:5e:a6:67:56:fc:d0:b8:e6:f1:
24:ff:70:b5:0a:98:40:4e:03:59:18:9a:45:60:71:be:4e:17:
ef:0f:33:2d:5c:6b:e0:49:d3:8f:65:32:c1:6a:3e:59:ef:a7:
18:32:de:a7:fa:4a:1f:67:fe:4a:d2:28:8a:6f:e6:fc:d5:4e:
12:55:e7:25:d9:a4:a1:b6:d8:03:e0:1c:6a:1d:5b:d4:17:93:
5b:06:67:26:52:dd:85:b9:3c:7f:ac:4d:73:9d:5b:a2:60:6f:
ff:11:b5:8b:ef:39:04:cf:0e:01:86:82:2c:cc:62:1e:08:6d:
0c:0a:3c:e0:86:1d:51:db:17:81:95:f6:a1:c1:03:50:69:19:
92:e8:27:21:b0:bd:10:50:15:f8:83:4a:fb:ef:1c:4c:e2:87:
71:c7:5d:7d:69:a3:99:ed:17:cd:31:1d:b8:15:3b:cb:28:cb:
59:30:e8:9d:3e:c9:9e:88:5c:86:8b:ae:dc:04:20:4f:0c:de:
d5:c0:fa:8c:fe:d5:fa:e3:61:0e:6e:e1:a3:ab:8d:a7:13:ba:
65:a6:99:b7:e0:ca:8b:09:ca:44:06:31:29:fc:a7:bc:a4:f9:
ee:d4:61:5b:d6:b7:fe:4e:3b:67:6b:f6:de:a5:5c:06:d5:1b:
35:fa:03:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:40 2024 by rpki-client on console-fra.rpki-client.org