Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/Wol1n5IUBH6YePgMNNJQkZQRgZI.roa
File: Wol1n5IUBH6YePgMNNJQkZQRgZI.roa (raw, json)
Hash identifier: 81SOAbkMJ70OqWLCjDwkACX4mYiAGuQnaQC6BNHtqP4=
Subject key identifier: 5A:89:75:9F:92:14:04:7E:98:78:F8:0C:34:D2:50:91:94:11:81:92
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 08C7C844
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/Wol1n5IUBH6YePgMNNJQkZQRgZI.roa
Signing time: Sat 21 May 2022 11:25:30 +0000
ROA not before: Sat 21 May 2022 11:25:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 176.105.228.0/22 maxlen: 24
91.239.148.0/23 maxlen: 24
212.115.124.0/22 maxlen: 24
45.132.80.0/22 maxlen: 24
91.244.199.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 147310660 (0x8c7c844)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: May 21 11:25:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5a89759f9214047e9878f80c34d2509194118192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:36:33:36:5d:47:26:1b:3c:69:bd:32:8d:98:
b6:db:20:47:c3:a0:43:19:38:5a:23:31:5d:88:06:
87:a0:8c:d1:04:79:0d:35:7f:e4:9c:b5:25:22:24:
1c:35:9f:03:0f:8a:71:8e:83:94:d3:13:69:2b:b5:
ec:00:5c:c1:68:00:23:67:88:78:b1:6d:cd:1f:85:
ef:f2:85:a4:2e:52:be:42:6e:3f:45:f9:2d:db:47:
52:ea:4d:46:32:ce:18:91:2c:f6:44:de:a7:e9:aa:
60:8a:38:ea:05:ef:7a:6e:cc:f7:5c:90:db:f5:54:
c5:47:3e:92:6c:9b:9a:79:90:cb:a3:c6:b2:b7:0c:
14:a6:66:9a:da:5d:e5:b5:52:45:65:e6:a7:21:7f:
aa:d8:0c:38:cb:e7:f9:f4:61:f6:2f:b7:c3:50:fc:
7f:3d:c1:4a:92:3b:7b:c6:9e:08:35:ea:75:04:ce:
f4:53:b4:a8:38:c7:36:f5:63:d3:5e:64:39:00:f9:
94:ee:dc:26:cc:cc:57:85:46:af:9e:2f:04:1c:84:
62:c1:bc:d5:fd:aa:1d:5a:f2:7b:80:3c:b5:a6:8d:
00:b7:b9:7b:5b:97:6a:ef:e6:bf:ec:f6:5c:35:fb:
e3:e9:94:86:52:c1:a4:1d:6a:6b:95:ea:aa:ee:66:
68:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:89:75:9F:92:14:04:7E:98:78:F8:0C:34:D2:50:91:94:11:81:92
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/Wol1n5IUBH6YePgMNNJQkZQRgZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.80.0/22
91.239.148.0/23
91.244.199.0/24
176.105.228.0/22
212.115.124.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:52:3a:7d:13:0b:a1:93:61:bf:8b:a5:9c:bf:4e:c3:00:c4:
ff:35:59:fd:d1:7b:27:24:cd:63:c8:57:91:b4:57:05:c0:a3:
65:19:e2:5b:ff:80:ac:17:1c:0f:89:1d:40:89:28:8b:18:96:
c8:9c:14:97:07:db:75:6f:d1:eb:97:bb:dc:31:8b:47:7f:bc:
91:2f:37:18:39:35:57:4d:ab:7b:92:f8:97:3e:17:df:ad:bc:
e9:81:e6:d4:37:5e:43:5b:74:23:ca:ad:b6:1f:b5:86:d1:ee:
eb:88:50:33:49:1f:9a:88:6c:11:a2:10:01:3f:ec:fa:e0:6b:
85:43:45:43:05:a6:50:76:7f:0e:19:da:1c:70:62:c2:a3:33:
01:43:3c:9a:df:4c:2a:e5:ae:bb:df:e0:bc:fb:08:f7:a4:80:
6b:88:02:89:9f:1d:41:e7:e5:2d:43:ee:43:b0:59:83:0f:b3:
90:8e:fe:57:20:80:8d:29:9d:b2:a9:50:e6:b1:1a:16:58:a1:
e3:16:bb:62:03:ad:c6:e0:11:51:0b:68:7e:9e:aa:d7:75:d1:
56:f3:b8:fb:55:30:a6:12:24:32:bd:1e:1f:e1:4c:a3:5b:53:
c8:28:06:8e:e9:95:cd:10:dc:0b:71:74:15:4a:cf:e6:ab:6f:
50:58:e9:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:19 2023 by rpki-client on console-fra.rpki-client.org