Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/WqkJ9ZhBxCJXbj2hdkoOaQlHr4M.roa
File: WqkJ9ZhBxCJXbj2hdkoOaQlHr4M.roa (raw, json)
Hash identifier: vhOziZgPuv5TOoXwEkynJmjSOU282uNg+JOS2UzXDMY=
Subject key identifier: 5A:A9:09:F5:98:41:C4:22:57:6E:3D:A1:76:4A:0E:69:09:47:AF:83
Certificate issuer: /CN=111d895492ed4b69d5aa6eda5f702fe763a27ba0
Certificate serial: 06C87A80
Authority key identifier: 11:1D:89:54:92:ED:4B:69:D5:AA:6E:DA:5F:70:2F:E7:63:A2:7B:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ER2JVJLtS2nVqm7aX3Av52Oie6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/WqkJ9ZhBxCJXbj2hdkoOaQlHr4M.roa
Signing time: Sat 01 Jan 2022 10:00:34 +0000
ROA not before: Sat 01 Jan 2022 10:00:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 559
IP address blocks: 130.125.0.0/16 maxlen: 16
192.42.42.0/23 maxlen: 23
192.42.44.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113801856 (0x6c87a80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=111d895492ed4b69d5aa6eda5f702fe763a27ba0
Validity
Not Before: Jan 1 10:00:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5aa909f59841c422576e3da1764a0e690947af83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8a:33:9f:50:5f:fb:2f:c4:e9:68:c8:33:ea:
a1:92:96:30:ce:91:d8:9e:5a:5d:55:27:28:83:b0:
1d:7c:4b:3b:5e:a9:d7:ad:2a:fc:de:48:00:9d:87:
2e:55:66:88:e8:6f:d5:30:30:da:b5:27:09:d9:2c:
54:e0:1b:e0:e1:d9:a2:76:14:66:f7:03:e8:12:e5:
a9:70:ce:91:84:96:9e:2e:94:87:fb:71:10:01:a9:
aa:2a:0b:79:ca:11:26:00:e6:3b:a8:1e:ed:98:a9:
14:0f:8b:c2:34:6c:ae:b0:ba:ff:98:e9:13:f3:03:
60:bc:aa:1d:36:fa:fe:b6:eb:bd:c4:97:d2:b6:a2:
7f:b2:9c:3d:e1:ea:6d:5e:65:a1:a8:42:90:e1:8c:
8a:35:e7:f2:da:ff:17:9c:e9:68:60:66:25:41:9d:
66:1c:0f:e9:16:68:5e:54:6e:8e:f8:44:23:75:2a:
5e:5a:62:75:46:27:09:85:51:cd:b1:72:9a:98:24:
b4:d4:75:4c:18:ab:68:58:07:10:45:04:e8:03:1f:
a9:5b:83:ed:5e:d7:f0:1b:76:be:2b:fc:a0:ca:4e:
5b:60:ec:b3:77:1e:ed:fb:61:7e:ad:c1:8d:9a:b7:
cd:7d:8f:82:af:01:44:63:43:43:a1:6c:2a:f3:94:
83:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:A9:09:F5:98:41:C4:22:57:6E:3D:A1:76:4A:0E:69:09:47:AF:83
X509v3 Authority Key Identifier:
keyid:11:1D:89:54:92:ED:4B:69:D5:AA:6E:DA:5F:70:2F:E7:63:A2:7B:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ER2JVJLtS2nVqm7aX3Av52Oie6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/WqkJ9ZhBxCJXbj2hdkoOaQlHr4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/ER2JVJLtS2nVqm7aX3Av52Oie6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.125.0.0/16
192.42.42.0-192.42.47.255
Signature Algorithm: sha256WithRSAEncryption
ae:96:9a:cb:6a:fe:c0:ec:97:5a:d2:5a:68:d9:2c:a5:53:09:
a0:31:fb:3e:2e:52:ae:ba:30:47:50:e1:73:2a:9a:b0:d8:f8:
e9:86:69:9d:4c:61:de:17:a3:24:10:48:e8:98:2d:12:d1:d8:
6e:65:32:55:fe:24:c7:99:49:3e:d2:8e:18:d7:b7:bb:2f:69:
6f:b9:a9:19:3d:79:b2:61:5a:1e:a3:00:de:d5:40:23:78:61:
d0:4d:27:db:7b:dd:3c:e8:1d:d4:5a:58:98:84:f4:43:3a:37:
7b:3d:51:fa:3b:db:ea:2e:ff:4d:64:b4:3e:6a:a8:c1:3d:9c:
74:32:a3:3a:bc:83:df:12:b9:c6:ae:21:9a:70:48:d8:56:aa:
d6:ca:0d:6b:e7:0e:ef:9d:84:76:40:8c:6b:5f:d8:8d:c3:1f:
c1:86:1f:11:47:f8:e2:2c:6a:bc:00:4c:2e:2e:49:1b:2c:f3:
43:7b:6b:a0:20:8d:db:e4:95:31:c3:9e:97:fb:ba:45:31:5f:
44:b4:1b:64:8c:ea:bc:9a:50:a2:6c:ed:1a:00:71:88:c4:bf:
e3:c8:6d:f9:66:21:f8:d7:30:65:e3:67:be:69:8d:66:94:4a:
2d:bd:09:ef:93:c0:db:f8:a5:92:9e:34:99:87:b5:27:49:5a:
15:e5:0c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:45 2023 by rpki-client on console-fra.rpki-client.org