Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/WEZYsBjH73zi4u3CBpIYFenct2U.roa
File: WEZYsBjH73zi4u3CBpIYFenct2U.roa (raw, json)
Hash identifier: 7LkDaNokZ6tjMKH6xIDHf4fw8oFkHClZjss+qLlL9hU=
Subject key identifier: 58:46:58:B0:18:C7:EF:7C:E2:E2:ED:C2:06:92:18:15:E9:DC:B7:65
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 07E03337
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/WEZYsBjH73zi4u3CBpIYFenct2U.roa
Signing time: Sat 01 Jan 2022 08:01:05 +0000
ROA not before: Sat 01 Jan 2022 08:01:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211347
IP address blocks: 84.54.38.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 132133687 (0x7e03337)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Jan 1 08:01:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=584658b018c7ef7ce2e2edc206921815e9dcb765
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:eb:1f:e3:3f:ea:e9:b3:dc:bd:80:6a:92:a8:
8e:7f:6f:3b:99:52:a5:e7:c4:75:d5:6d:02:e0:00:
7a:a2:8c:0c:3e:7c:bf:81:58:3c:fa:83:68:34:fc:
b5:9d:d6:73:4c:40:9d:ca:58:b1:ba:05:d6:7b:31:
bf:88:b3:9d:00:50:d6:a1:fb:ba:07:7c:47:16:e1:
16:47:4a:ea:fc:ec:5b:7b:f1:cb:95:71:37:b2:b8:
82:71:1d:ab:cf:c1:6e:60:cb:7e:5b:2e:a3:a2:eb:
74:c0:b8:84:e5:72:34:aa:19:42:23:a1:3b:69:97:
39:23:3b:02:78:11:af:88:9e:5a:15:7f:db:6a:bb:
78:ea:d7:e3:71:d2:59:69:d5:34:24:f1:f3:75:56:
37:1e:52:ba:da:c6:b3:c1:a9:85:68:b2:96:85:c3:
f2:38:10:7a:a0:71:61:ce:f0:ef:94:39:3a:1d:90:
cb:4f:46:e7:f0:c9:0c:90:16:fa:40:99:02:fa:94:
af:5c:f7:7b:85:b1:ed:05:41:c7:f1:54:a7:43:f7:
7d:91:e9:da:11:07:81:cd:e8:de:28:f4:93:eb:7a:
8b:44:cd:b5:69:50:4e:38:15:f5:c4:ad:9f:d4:9c:
7b:e7:f4:ee:23:53:79:6c:e9:27:f5:ea:ec:79:9d:
85:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:46:58:B0:18:C7:EF:7C:E2:E2:ED:C2:06:92:18:15:E9:DC:B7:65
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/WEZYsBjH73zi4u3CBpIYFenct2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.54.38.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:2f:07:5b:75:69:81:78:5d:9b:33:ea:3f:e5:72:24:79:fd:
84:8e:8b:3e:94:3c:2a:48:01:0b:a8:fd:c7:9b:f8:a9:38:0d:
21:49:8c:53:34:36:46:3c:b2:cc:d0:61:0d:b4:db:18:f3:f2:
3c:95:5c:4d:0b:9b:b3:21:61:89:ae:aa:27:74:16:54:18:44:
59:a2:de:30:04:15:9c:2b:9f:86:f5:fd:40:32:b1:54:29:39:
2f:11:e1:55:0c:a1:14:cb:a3:5d:09:99:42:05:42:da:98:9c:
48:fd:7b:a3:0d:bb:a5:cb:d5:2f:63:be:e8:a1:69:3e:7b:10:
d5:2f:f3:3b:66:cb:35:5e:57:04:e9:6c:4d:0c:2d:70:c2:e3:
86:1a:26:ed:71:4e:f4:b9:19:2d:c7:86:78:72:b2:d2:fc:5a:
34:65:70:6a:9b:c4:33:63:84:c0:20:18:25:1c:57:ac:24:ae:
64:00:ff:a7:d7:4d:ca:6e:6c:e7:3e:d0:9b:c9:b7:79:4d:a3:
b7:52:60:fa:17:de:d3:16:38:5a:41:6e:bd:a5:3c:8c:a5:49:
d2:55:e2:ff:57:65:b4:2d:e6:bf:91:08:43:c2:c2:84:76:6f:
76:84:78:2d:69:c8:53:2c:27:f3:42:31:d4:f1:65:98:84:ca:
42:60:01:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:32 2023 by rpki-client on console-ams.rpki-client.org