Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/wGW5F1DHD7A_ZdOMoTgaMk7ZRSI.roa
File: wGW5F1DHD7A_ZdOMoTgaMk7ZRSI.roa (raw, json)
Hash identifier: GavLZ/CB8SuhCIknQsfbaUFuGDVYFU1P+zFZQ90kIAw=
Subject key identifier: C0:65:B9:17:50:C7:0F:B0:3F:65:D3:8C:A1:38:1A:32:4E:D9:45:22
Certificate issuer: /CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315
Certificate serial: 0A3AEC28
Authority key identifier: AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/wGW5F1DHD7A_ZdOMoTgaMk7ZRSI.roa
Signing time: Sat 01 Jan 2022 11:58:11 +0000
ROA not before: Sat 01 Jan 2022 11:58:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203833
IP address blocks: 159.100.24.0/22 maxlen: 22
79.133.32.0/23 maxlen: 23
79.133.43.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171633704 (0xa3aec28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315
Validity
Not Before: Jan 1 11:58:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c065b91750c70fb03f65d38ca1381a324ed94522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1a:a7:e4:ba:ee:e2:6d:09:68:9f:40:e7:85:
e5:40:dd:48:dc:82:0f:ed:68:46:7d:d6:ff:94:11:
10:b6:e8:ce:80:fc:de:3f:d0:64:31:6d:51:16:b1:
6c:89:4f:5f:97:31:05:76:ea:ac:85:5d:89:a9:9b:
46:3c:e6:62:18:e5:54:73:01:01:44:6e:fd:eb:c9:
19:66:94:77:a3:0d:b5:4b:04:eb:5b:82:51:f8:7c:
5e:cc:ca:8d:f2:10:21:6e:50:06:50:8c:ef:76:d6:
58:0f:81:65:3f:e5:ea:ed:97:6c:97:81:39:b8:fe:
cd:cc:f6:fc:c9:8c:09:01:db:19:40:c2:1e:df:eb:
14:a6:a3:c1:0d:82:d4:4b:6f:df:45:9a:24:b6:b3:
23:ed:0f:85:63:e3:93:8c:e9:61:4a:0e:40:35:12:
ba:5a:d9:51:b2:29:8d:34:b6:1e:20:08:7c:14:ff:
14:6e:02:1a:25:31:2e:45:fd:b7:27:0b:0c:eb:4a:
8a:eb:45:69:e3:45:16:87:0d:c6:97:00:0c:12:2f:
2d:13:73:1f:62:10:d2:e6:e7:17:4a:cc:36:ff:1c:
8b:3e:07:0b:b9:a2:3c:50:52:3a:9a:f6:ab:20:24:
fe:31:90:77:89:4f:cf:64:39:bb:3d:45:2f:88:0f:
26:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:65:B9:17:50:C7:0F:B0:3F:65:D3:8C:A1:38:1A:32:4E:D9:45:22
X509v3 Authority Key Identifier:
keyid:AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/wGW5F1DHD7A_ZdOMoTgaMk7ZRSI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.133.32.0/23
79.133.43.0/24
159.100.24.0/22
Signature Algorithm: sha256WithRSAEncryption
be:94:83:b8:ae:23:fa:a5:17:42:70:6c:1f:d3:5a:af:0f:f6:
2d:47:56:26:02:b1:11:98:56:2b:26:61:28:59:ce:de:58:d2:
81:11:65:90:6b:97:a1:71:16:55:83:f1:1e:f0:90:02:0b:10:
cd:b5:5d:e1:4b:69:35:f9:85:fd:f7:e8:5a:b4:07:5f:06:72:
df:5d:44:81:8e:75:77:f4:38:7d:cb:9b:71:b0:81:ac:ec:3b:
ca:3c:84:60:38:7c:cb:77:b9:a3:99:99:b4:01:2d:79:75:bd:
cd:b0:a7:a9:38:3d:06:c2:db:6e:e7:06:93:d4:5a:cd:0a:79:
28:a1:cb:89:9d:4c:45:be:27:a6:dc:d1:f6:93:6f:ce:e6:76:
6c:10:93:6b:45:54:c5:8e:64:3d:66:7e:3d:87:e0:33:10:e0:
56:fe:fa:7c:b6:8b:9f:61:e8:ee:82:16:0b:a4:c4:8a:8d:f3:
68:c1:fa:85:20:91:47:6f:17:a5:77:70:e9:ba:db:63:a0:69:
1a:22:5a:2a:cb:5b:d8:f8:ce:7c:c0:3e:06:72:71:b3:05:54:
80:1c:c7:45:32:6b:2c:89:5f:b7:23:2c:b0:e6:1e:87:71:35:
00:58:53:6d:24:03:6b:b3:96:ed:56:d5:52:6a:45:eb:86:bd:
27:09:27:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:35 2024 by rpki-client on console-ams.rpki-client.org