Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/Wtzb5vu6CQbsoL8PGFFy6SsVzNE.roa
File: Wtzb5vu6CQbsoL8PGFFy6SsVzNE.roa (raw, json)
Hash identifier: wrMjF29ii/6gICS2bDzgIbzNDroUlbTKWwRcccMBMdQ=
Subject key identifier: 5A:DC:DB:E6:FB:BA:09:06:EC:A0:BF:0F:18:51:72:E9:2B:15:CC:D1
Certificate issuer: /CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13
Certificate serial: 033B3303
Authority key identifier: B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/Wtzb5vu6CQbsoL8PGFFy6SsVzNE.roa
Signing time: Thu 17 Mar 2022 16:51:14 +0000
ROA not before: Thu 17 Mar 2022 16:51:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207967
IP address blocks: 185.125.200.0/22 maxlen: 22
95.140.152.0/21 maxlen: 21
80.90.184.0/21 maxlen: 21
80.90.180.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54211331 (0x33b3303)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13
Validity
Not Before: Mar 17 16:51:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5adcdbe6fbba0906eca0bf0f185172e92b15ccd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:35:c6:c8:f6:8b:d0:bb:0c:a2:70:d2:25:e9:
fc:ab:cb:66:1c:2b:87:65:1f:5c:a8:f5:84:77:58:
44:b5:5d:74:91:01:69:b5:c2:8b:1b:8e:e2:4d:bb:
1e:ab:e7:07:dd:81:b2:b3:47:3c:74:25:90:a5:03:
1b:14:c8:12:6b:d7:5d:2a:91:52:c8:75:c1:01:63:
66:b8:60:c5:37:cb:c4:c4:dd:93:bf:1c:39:4e:d3:
bb:42:16:27:d8:f3:69:89:64:f3:bf:53:96:06:0d:
0e:e3:0d:c4:50:1f:da:08:99:05:b0:7c:bc:31:6f:
dd:ff:a3:f4:95:f0:53:9d:5d:04:04:eb:16:18:2a:
7f:16:90:82:54:7a:41:73:44:80:a4:da:7e:8a:67:
bd:84:d8:03:42:26:14:82:96:92:7f:a0:2a:fa:18:
d3:58:76:23:96:cc:c2:36:37:dd:5f:78:d8:61:6f:
1f:4c:9f:3c:0e:08:82:44:94:4a:5e:47:c1:6e:52:
fa:81:3b:e3:2c:e7:52:38:3f:38:77:ae:6e:29:65:
6b:6f:57:98:71:cb:12:64:59:ce:ea:c4:43:fb:42:
20:e9:3b:a6:18:4c:b9:b4:f3:38:24:9f:da:09:a3:
a0:be:b0:66:cc:e3:e7:61:ae:c6:18:10:5a:63:22:
6f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:DC:DB:E6:FB:BA:09:06:EC:A0:BF:0F:18:51:72:E9:2B:15:CC:D1
X509v3 Authority Key Identifier:
keyid:B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/Wtzb5vu6CQbsoL8PGFFy6SsVzNE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.90.180.0-80.90.191.255
95.140.152.0/21
185.125.200.0/22
Signature Algorithm: sha256WithRSAEncryption
48:7f:ce:f4:82:ce:d2:67:cb:cf:bc:03:9c:d5:41:e7:5a:2a:
6c:1b:54:f2:fa:ab:95:99:11:fd:a5:0e:b8:4a:91:70:80:4c:
3a:f2:83:b6:ae:43:ea:de:9f:96:9d:df:df:e2:fe:00:d3:21:
97:a3:63:b0:92:fe:9f:68:88:5a:ad:72:15:5d:2b:13:f9:6b:
88:53:88:c3:d1:34:6d:ee:2f:4a:4b:5a:60:f9:df:22:c9:57:
39:f9:18:0a:0a:d4:dc:9f:79:22:c2:c9:42:6b:11:26:58:ac:
9b:ac:f4:bf:9b:c5:96:d8:6e:04:cc:8c:20:81:14:f6:35:2c:
c2:64:a7:62:33:c5:94:c9:5c:c5:54:82:c3:97:9b:c3:74:17:
05:73:b7:d5:15:3d:78:b7:4a:db:7d:78:b7:7f:e7:db:0f:0b:
2a:80:3a:a3:61:38:7d:14:e9:b4:7f:1a:a7:da:c8:28:f6:14:
fc:fd:b8:81:cc:54:00:0a:99:b2:38:f8:5d:71:cd:22:a4:09:
a9:78:c9:d3:3e:7a:ad:d3:19:2b:62:46:7d:08:e5:ca:6f:07:
c9:6c:99:4e:c1:ab:5e:55:40:9e:cc:51:b0:a9:b0:0e:35:35:
5d:dd:a8:26:e6:79:a1:27:3f:ac:a6:1e:fe:f6:87:19:64:8d:
fe:39:ac:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:15 2024 by rpki-client on console-fra.rpki-client.org