Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/WjtucO4teAgPwaFV-1WFYzI0je8.roa
File: WjtucO4teAgPwaFV-1WFYzI0je8.roa (raw, json)
Hash identifier: D5AZCxvUPejbgoWtR0nrIbgVPIuXfkSsQtPxD2eFOOQ=
Subject key identifier: 5A:3B:6E:70:EE:2D:78:08:0F:C1:A1:55:FB:55:85:63:32:34:8D:EF
Certificate issuer: /CN=f970049cba7f39aeed31d65313c7b953f3fda135
Certificate serial: 048E62DE
Authority key identifier: F9:70:04:9C:BA:7F:39:AE:ED:31:D6:53:13:C7:B9:53:F3:FD:A1:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/WjtucO4teAgPwaFV-1WFYzI0je8.roa
Signing time: Sat 01 Jan 2022 03:02:42 +0000
ROA not before: Sat 01 Jan 2022 03:02:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197317
IP address blocks: 91.219.152.0/22 maxlen: 24
185.158.160.0/22 maxlen: 24
2a07:ae40::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76440286 (0x48e62de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f970049cba7f39aeed31d65313c7b953f3fda135
Validity
Not Before: Jan 1 03:02:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5a3b6e70ee2d78080fc1a155fb55856332348def
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:90:b4:44:92:36:c3:bb:77:cc:d6:61:3b:e4:
7a:e1:0c:6e:a5:2d:ae:51:50:5f:db:f9:2d:52:c4:
0c:48:8d:3c:d0:e4:ca:97:58:fa:08:57:79:b3:5f:
b3:b5:32:df:58:42:53:03:6f:a9:1b:48:09:05:f8:
62:06:56:40:b7:71:81:cf:68:6f:21:f9:f4:5b:b7:
0b:eb:4d:15:ff:01:61:6b:ff:86:3c:da:92:ee:d2:
61:18:b8:d0:02:b1:9e:96:af:6a:ba:44:85:45:81:
f6:63:69:ba:70:8b:a2:32:19:c3:84:78:ec:5d:b2:
07:27:93:34:a1:e2:da:c2:18:87:6f:03:a2:fa:75:
ab:5d:f5:a7:69:d6:7b:c8:26:3c:84:86:53:ba:c0:
d9:25:26:d6:c4:ad:f9:45:e6:78:b3:d1:f6:20:78:
b3:db:63:75:14:7d:02:78:3b:2b:0f:bc:1e:75:f7:
84:05:93:fc:29:2f:c6:d2:ac:38:58:7e:43:da:24:
dd:15:3e:68:f2:b6:72:e8:0b:49:86:e6:49:fb:ff:
1b:17:ea:cf:cf:f6:32:c1:a4:46:2b:f1:62:12:84:
6e:4f:a9:f2:57:3c:e3:ad:a7:cf:3f:29:9c:6f:b3:
2b:22:9e:fa:53:88:e5:b5:22:4e:00:11:8f:7c:8b:
36:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:3B:6E:70:EE:2D:78:08:0F:C1:A1:55:FB:55:85:63:32:34:8D:EF
X509v3 Authority Key Identifier:
keyid:F9:70:04:9C:BA:7F:39:AE:ED:31:D6:53:13:C7:B9:53:F3:FD:A1:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/WjtucO4teAgPwaFV-1WFYzI0je8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.219.152.0/22
185.158.160.0/22
IPv6:
2a07:ae40::/29
Signature Algorithm: sha256WithRSAEncryption
39:16:ee:e0:7a:29:19:0f:6e:48:fd:58:54:bd:8b:49:af:01:
5d:3b:19:79:d2:3f:52:0e:e6:eb:bd:ee:e0:33:4b:68:d4:42:
62:40:92:75:74:4f:d4:06:5e:6e:bc:27:a3:5e:fd:82:75:85:
bc:4a:ae:a3:6c:5b:4c:54:0e:14:66:be:8b:cd:98:2f:03:5f:
b7:28:06:75:87:b4:e6:9d:02:0e:be:78:19:82:ea:d3:2d:45:
aa:e0:56:00:13:e7:44:a8:e1:5e:62:14:4a:70:a4:cb:2d:3d:
95:6b:15:f4:d7:91:a0:8e:17:a5:00:a5:05:e4:2c:25:17:7a:
2f:13:88:97:7f:4d:23:81:4a:03:60:70:6e:84:70:74:32:0a:
61:70:03:7c:c7:44:18:e8:57:89:b5:1d:59:be:9b:c5:4a:f0:
62:35:bb:92:5a:3f:04:2e:f8:d2:b1:b9:e1:64:81:8d:18:e4:
d9:b4:db:37:63:9c:0b:3d:18:d3:7a:1a:95:3e:9b:4b:4d:ab:
5d:85:dc:51:10:cf:e9:0a:07:7f:42:45:0c:85:de:13:a1:7d:
6d:19:9c:da:c2:03:91:7c:81:66:11:cf:d1:2e:6a:d0:b6:57:
7e:47:25:c0:6d:03:2b:cd:6d:60:3a:cf:6f:1a:eb:0d:77:f3:
48:a4:a9:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:01 2024 by rpki-client on console-fra.rpki-client.org