Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b8c30c-82d9-46bb-bb07-9ca100428f10/1/wjZgfSTpdSpGPksidawYqEqUFZE.roa
File: wjZgfSTpdSpGPksidawYqEqUFZE.roa (raw, json)
Hash identifier: +rTUmvuC1g9fLRAuDWNKOTEWb19lPcUFt+PD8+jea5I=
Subject key identifier: C2:36:60:7D:24:E9:75:2A:46:3E:4B:22:75:AC:18:A8:4A:94:15:91
Certificate issuer: /CN=eb337ead6b9b93dd0d758abf9d7b303072a99eb9
Certificate serial: 09214EE8
Authority key identifier: EB:33:7E:AD:6B:9B:93:DD:0D:75:8A:BF:9D:7B:30:30:72:A9:9E:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zN-rWubk90NdYq_nXswMHKpnrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/b8c30c-82d9-46bb-bb07-9ca100428f10/1/wjZgfSTpdSpGPksidawYqEqUFZE.roa
Signing time: Sat 01 Jan 2022 13:04:42 +0000
ROA not before: Sat 01 Jan 2022 13:04:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209322
IP address blocks: 45.67.77.0/24 maxlen: 24
45.67.78.0/24 maxlen: 24
45.67.76.0/24 maxlen: 24
45.67.79.0/24 maxlen: 24
2a07:3c80:600::/40 maxlen: 40
2a07:3c80:400::/40 maxlen: 40
2a07:3c80:200::/40 maxlen: 40
2a07:3c80::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153177832 (0x9214ee8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb337ead6b9b93dd0d758abf9d7b303072a99eb9
Validity
Not Before: Jan 1 13:04:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c236607d24e9752a463e4b2275ac18a84a941591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:57:c0:fe:cd:73:98:4e:17:42:20:65:f5:72:
d3:90:d3:64:a5:04:91:3a:24:4a:cb:54:41:b1:45:
10:2e:68:4b:85:89:38:1c:1c:7b:c0:43:4d:dd:ec:
14:74:fe:ea:6b:08:5a:8e:7c:2e:7d:65:26:ce:6a:
98:64:d4:30:1b:86:dd:ee:10:51:43:8e:e4:7e:1a:
74:cc:78:61:d2:53:57:1d:f4:d1:37:e6:2f:84:ba:
bb:44:85:49:3e:78:21:21:d8:42:74:b7:63:bc:12:
61:48:db:02:37:ac:47:e6:84:2d:8f:42:83:95:31:
c5:d8:19:48:d5:24:ff:69:48:17:8b:69:00:f0:29:
7e:58:48:00:c9:3e:e7:38:b2:76:55:e7:4b:52:9f:
66:f2:5e:a4:fb:98:96:fe:fd:8e:18:bd:36:cc:76:
6f:fb:69:98:17:e2:d1:d5:f8:8b:b9:80:6e:20:32:
31:56:c8:61:7d:56:bd:d5:58:09:35:7c:e2:fb:79:
35:5b:4a:bb:f4:b0:dd:f9:25:72:6d:67:0b:21:dd:
92:77:df:b2:c6:70:ec:b7:1f:f1:e7:04:7d:e2:b8:
4a:e8:d6:42:30:0a:79:14:0b:dd:f4:d4:d6:12:8d:
cf:c0:6a:6b:b6:a9:1f:7e:95:d1:6f:24:93:56:cc:
12:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:36:60:7D:24:E9:75:2A:46:3E:4B:22:75:AC:18:A8:4A:94:15:91
X509v3 Authority Key Identifier:
keyid:EB:33:7E:AD:6B:9B:93:DD:0D:75:8A:BF:9D:7B:30:30:72:A9:9E:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zN-rWubk90NdYq_nXswMHKpnrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b8c30c-82d9-46bb-bb07-9ca100428f10/1/wjZgfSTpdSpGPksidawYqEqUFZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b8c30c-82d9-46bb-bb07-9ca100428f10/1/6zN-rWubk90NdYq_nXswMHKpnrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.76.0/22
IPv6:
2a07:3c80::/40
2a07:3c80:200::/40
2a07:3c80:400::/40
2a07:3c80:600::/40
Signature Algorithm: sha256WithRSAEncryption
2d:9f:06:63:e7:8a:4f:fa:d3:e8:25:4b:04:f6:2a:99:d3:27:
f1:61:64:1c:f0:1c:42:69:e9:4a:c7:77:84:3a:9c:db:33:40:
1e:ba:91:82:0a:84:48:19:63:29:e0:d7:a9:20:4f:c9:ae:38:
f4:a1:0c:e2:13:b5:a0:e7:9a:3d:d5:0b:37:48:96:29:56:d4:
5e:18:5d:d3:bc:4b:ab:04:89:62:73:af:8c:6d:9f:14:bd:35:
d1:20:a8:66:40:a6:00:c6:05:1c:03:68:18:15:05:77:7d:ef:
ad:56:4f:01:e4:4c:d3:04:6a:53:e1:5d:04:e7:03:cc:7d:dc:
2d:02:52:0f:d5:24:b2:3f:93:e3:29:86:93:1c:1c:81:f0:39:
aa:da:51:35:5f:42:fc:17:95:23:3d:04:57:f0:78:03:9d:e4:
ea:67:d3:f9:22:33:88:51:4a:b5:24:26:8d:9c:e3:23:17:ea:
0a:5c:f6:5e:23:b6:34:10:7a:3b:fa:7a:05:03:73:a8:d1:0c:
80:95:b6:2a:90:20:cf:cf:fc:b3:b2:15:bb:0d:b1:ac:77:50:
20:1b:4a:ca:a5:9f:8b:1f:99:6b:e8:61:fe:f2:87:e7:5b:be:
a2:27:6e:84:f9:05:48:21:3b:b8:5a:18:a7:2b:d6:97:8c:c8:
7a:e6:74:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:57 2023 by rpki-client on console-fra.rpki-client.org