Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/WRS-P2p6C8nv0bKo34n4sBKTWPo.roa
File: WRS-P2p6C8nv0bKo34n4sBKTWPo.roa (raw, json)
Hash identifier: +crDMx8cns9UimHBhsGPA3n88lbfG02vrGxuevTLYw0=
Subject key identifier: 59:14:BE:3F:6A:7A:0B:C9:EF:D1:B2:A8:DF:89:F8:B0:12:93:58:FA
Certificate issuer: /CN=ae7a9b1745a5a70c3bf7bcc2c2ee166460aff7a8
Certificate serial: 381C3B5F
Authority key identifier: AE:7A:9B:17:45:A5:A7:0C:3B:F7:BC:C2:C2:EE:16:64:60:AF:F7:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rnqbF0Wlpww797zCwu4WZGCv96g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/WRS-P2p6C8nv0bKo34n4sBKTWPo.roa
Signing time: Wed 23 Mar 2022 08:44:26 +0000
ROA not before: Wed 23 Mar 2022 08:44:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204385
IP address blocks: 31.202.15.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 941374303 (0x381c3b5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae7a9b1745a5a70c3bf7bcc2c2ee166460aff7a8
Validity
Not Before: Mar 23 08:44:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5914be3f6a7a0bc9efd1b2a8df89f8b0129358fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:50:24:31:b8:7a:1b:82:bc:7c:40:e2:91:ee:
bc:32:8e:ad:9b:34:7a:31:4e:68:1a:fa:cc:f8:62:
1c:09:90:54:78:d6:f7:ac:2b:38:2d:df:fb:1a:78:
35:dc:06:63:e5:2a:a2:e7:cf:e2:b7:2c:4a:cb:f6:
a3:36:0a:1a:53:1b:5d:f2:68:01:c1:08:60:a5:28:
ac:e5:76:12:d3:0d:9c:6b:89:20:78:21:58:2c:e8:
a4:48:8c:b7:7e:7c:3f:41:4c:5c:44:27:c7:d3:89:
15:de:6e:ce:ef:45:52:94:ce:dc:1f:fe:42:92:18:
f1:48:ad:78:51:9c:69:88:85:40:69:c2:70:44:62:
28:40:17:53:07:3e:71:4f:d4:b0:a7:51:19:76:0a:
af:bb:11:49:62:e4:a8:fc:86:d0:49:cf:8b:48:4d:
3c:27:a2:a1:00:c3:d1:7f:dc:81:b0:4f:8c:70:e9:
2a:ec:5b:9b:9d:f5:47:65:d2:8d:2e:91:e9:2e:34:
c3:51:01:e7:64:79:a2:97:95:32:02:7a:8b:fc:0d:
36:a9:fb:96:34:34:5c:dc:af:08:6e:7e:24:77:89:
d7:1c:60:0a:2b:4f:e5:d6:e0:56:16:08:79:cb:1b:
27:55:3e:00:61:54:60:47:73:8a:c7:2d:e3:bc:6f:
85:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:14:BE:3F:6A:7A:0B:C9:EF:D1:B2:A8:DF:89:F8:B0:12:93:58:FA
X509v3 Authority Key Identifier:
keyid:AE:7A:9B:17:45:A5:A7:0C:3B:F7:BC:C2:C2:EE:16:64:60:AF:F7:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnqbF0Wlpww797zCwu4WZGCv96g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/WRS-P2p6C8nv0bKo34n4sBKTWPo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/rnqbF0Wlpww797zCwu4WZGCv96g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.202.15.0/24
Signature Algorithm: sha256WithRSAEncryption
56:2b:b5:07:2e:45:cf:09:51:1d:b3:22:b9:64:3a:eb:35:44:
22:e9:37:c5:11:4a:78:f8:69:e8:a9:1f:af:df:55:5a:6a:d1:
4a:a0:ad:8a:10:42:fe:91:23:94:dc:71:06:1c:a2:5a:c2:2f:
f9:e5:9f:52:3e:43:d7:61:7f:ce:e5:3b:62:86:b5:6f:fd:47:
c1:d2:8c:2f:7d:89:2c:2f:7b:82:e6:5f:eb:27:4a:f0:2d:cc:
46:48:d5:49:f7:ce:7e:ee:60:78:d8:28:d8:fa:0e:bf:5c:62:
cf:a6:8d:a6:c0:84:ea:58:a1:23:58:21:4d:a9:bf:d6:e7:ea:
63:ac:e1:2f:60:e9:a3:f2:cd:d5:34:d5:2b:b4:3b:a7:65:a9:
93:59:84:4c:b8:dd:4e:de:87:9c:a8:71:78:59:21:62:ca:7a:
24:ea:03:10:f4:f7:be:e4:68:44:30:ad:27:0a:dd:c3:a2:51:
31:b4:01:52:fa:ad:1c:a4:20:ec:de:3e:84:86:23:51:63:d9:
60:5a:b7:db:16:51:c3:19:4e:ce:34:34:d2:1f:6d:11:0b:63:
c4:5b:1b:bd:b2:47:53:0e:fd:bf:ce:4c:ef:15:a3:e3:96:de:
76:f2:3a:01:1a:15:15:72:8a:71:88:65:53:ac:16:c7:49:54:
62:d9:5c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:59 2023 by rpki-client on console-fra.rpki-client.org